Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier: 3eYWMtbFF6WskO01xnc7yPqKe391f/YAsMJwdv703T0=
Subject key identifier: AD:70:B6:F2:FD:94:43:5C:65:3F:E8:85:24:C1:41:AB:AF:80:C3:81
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial: 01A08BD5E657C175F4F974C04AC117464279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number: 1213
Signing time: Thu 10 Sep 2026 15:00:46 +0000
Manifest this update: Thu 10 Sep 2026 15:00:46 +0000
Manifest next update: Fri 11 Sep 2026 15:00:46 +0000
Files and hashes: 1: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: R/QYTnT25H8dN5Zbug/j8sjO+4m8U2nvjktsclwJlXk=)
2: iNHmZBm96p22r1v1NNf0vUA5CNU.roa (hash: W3eGIa/whnFHaDnHwnO2+GYR1xjT6RdNQB1XA+AY4TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:e6:57:c1:75:f4:f9:74:c0:4a:c1:17:46:42:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Validity
Not Before: Sep 10 15:00:46 2026 GMT
Not After : Sep 11 15:00:46 2026 GMT
Subject: CN=ad70b6f2fd94435c653fe88524c141abaf80c381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:d8:0d:17:a2:10:e3:a2:ad:34:7d:6c:2d:
1c:33:88:80:60:f7:1a:b5:7e:41:31:fd:15:a2:ce:
4a:a2:34:23:2e:50:3a:ee:b8:06:de:c8:a6:6c:93:
8f:82:e4:c9:0e:15:43:a9:73:eb:2e:1c:a2:06:4d:
16:8e:bd:64:a5:08:11:7a:44:55:a7:af:42:0c:4a:
f5:10:3c:8f:a8:6a:2b:1a:56:8e:b6:a0:7e:19:97:
6d:de:e9:f0:9c:fb:b8:e5:8a:15:84:ba:29:a0:68:
b7:b0:25:7b:74:1c:5f:63:ca:ab:a5:46:06:43:50:
59:1b:95:09:e4:fc:84:0f:2d:e4:59:b8:3f:82:6d:
4e:6b:03:0c:6f:15:37:4a:52:51:3f:79:c3:72:af:
d1:cf:23:79:ed:a2:8d:7c:ad:c3:a7:7a:7d:8a:71:
5d:0b:f3:4a:4b:5a:06:b6:11:25:62:6f:37:4b:44:
09:bc:74:71:f5:52:89:d1:92:8a:08:4d:04:23:1c:
2a:5f:94:24:fd:03:d5:0f:a6:a8:43:fd:13:e2:38:
79:8d:37:ce:98:43:44:b0:ab:28:23:92:7d:23:6e:
ad:6b:59:65:2e:ea:75:4c:be:eb:b9:6b:28:e9:4d:
2b:91:0a:2c:ae:68:30:49:b2:45:41:08:cd:9e:61:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:70:B6:F2:FD:94:43:5C:65:3F:E8:85:24:C1:41:AB:AF:80:C3:81
X509v3 Authority Key Identifier:
keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f4:16:56:7c:df:06:1a:dc:ee:d5:07:3d:e7:1d:9f:5c:d0:
f2:6e:72:62:0d:94:d9:a5:d7:68:19:48:f7:07:d2:c3:e9:d4:
70:07:bd:c8:d5:1a:c7:e9:26:06:01:52:b3:fa:fe:79:14:d2:
bb:61:31:4b:e2:4e:d3:79:b6:63:93:73:f8:bd:f9:c8:f6:98:
d0:ca:f1:22:1b:27:d1:a3:ba:fa:7f:bd:09:8c:e2:7d:96:31:
f9:61:ef:dd:8a:fa:6e:63:53:f1:92:10:ee:4d:fa:f4:0d:15:
25:70:3f:45:a2:55:da:5a:92:10:73:f1:b7:31:08:90:e3:ec:
11:38:1d:69:2e:df:b2:dd:9a:11:2a:e4:0e:09:d4:1b:f4:d2:
85:54:db:64:fc:ec:e2:2c:ff:3e:e9:98:af:56:c8:91:89:5d:
aa:50:8c:02:5f:8b:e7:d8:7e:89:d2:36:9f:1a:d4:b8:d3:a8:
e6:41:ac:51:da:a3:bf:c9:d7:f6:ab:7f:a1:16:9a:80:f8:1c:
99:2c:45:64:c1:9e:93:1f:35:1f:f1:57:fa:79:60:d9:d2:be:
92:b1:07:68:7a:7a:05:91:35:51:27:c2:26:5c:12:10:5d:89:
3b:d5:cd:b0:43:c5:12:86:dc:91:d5:76:50:aa:ee:b7:0b:26:
35:55:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:46:01 2026 by rpki-client