Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: SRiaez+0AJ6DSCr0NyzLabAe7FJyjpZP7C4k55npLug=
Subject key identifier: DA:21:0A:A5:88:11:DD:16:BE:E8:1A:30:B0:8B:FD:90:1C:96:8C:F1
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019F17C2C694F97E33281AF5126929B548F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 18BD
Signing time: Tue 30 Jun 2026 09:01:08 +0000
Manifest this update: Tue 30 Jun 2026 09:01:08 +0000
Manifest next update: Wed 01 Jul 2026 09:01:08 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: JX7BG+7KPFLBJZixTAT8GyXWjxwSZJUETwba2BREKY8=)
2: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (hash: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:c6:94:f9:7e:33:28:1a:f5:12:69:29:b5:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Jun 30 09:01:08 2026 GMT
Not After : Jul 1 09:01:08 2026 GMT
Subject: CN=da210aa58811dd16bee81a30b08bfd901c968cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:7a:65:19:2c:55:5d:48:85:f6:94:60:12:
46:f8:00:10:e7:fe:dd:33:49:be:b3:99:0a:21:13:
45:a6:c3:9a:06:8a:66:e1:40:28:42:fc:b6:13:fe:
d7:72:a5:5d:ce:82:96:b8:c0:32:a8:a7:cc:17:f4:
a6:e1:0a:58:e3:46:8e:f5:59:b6:ce:05:86:8d:a7:
fd:0a:80:7a:01:3c:49:6b:ae:05:8d:73:f3:2b:72:
1c:9a:41:44:a7:62:bf:4d:1a:d0:b7:2b:57:91:2b:
cc:b2:3e:20:a6:68:24:60:0b:1f:16:a7:08:7b:24:
06:85:3e:64:48:07:35:82:94:9d:b3:8a:8a:f7:32:
62:6d:3c:6d:a2:3f:9b:d6:2c:92:80:e3:b9:67:43:
be:0e:c1:85:cc:c4:4f:c3:e8:85:ae:6b:ca:0f:0c:
94:bd:4c:f2:62:c5:05:8c:05:9e:31:81:3e:a6:bb:
5f:de:8d:a3:58:cd:e3:3c:3a:22:1a:ed:ab:f4:4d:
98:36:8b:7c:87:7f:3b:d0:7f:d0:34:de:5e:12:3b:
d5:24:9f:27:d2:94:93:bf:60:64:0a:c5:e6:fa:5f:
e2:44:bb:12:6d:ef:81:d5:15:a3:c0:34:a9:09:04:
d3:c3:06:e5:be:68:71:85:6b:92:8c:ca:3a:3f:ce:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:0A:A5:88:11:DD:16:BE:E8:1A:30:B0:8B:FD:90:1C:96:8C:F1
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:46:d8:a5:f5:20:7c:4b:ec:5a:5a:f1:c3:bc:52:d6:b2:f4:
90:52:9d:86:3a:11:83:1c:fe:db:28:b9:e6:76:76:b5:67:24:
9a:8c:35:88:d3:9a:ad:84:35:30:be:2e:b4:6a:a3:a5:39:b7:
bb:90:e8:2a:cd:ee:94:17:4a:ec:21:08:c4:ff:77:7b:a5:5c:
9c:5e:85:e7:0c:d9:77:af:44:a5:a3:30:81:55:43:64:f4:33:
d4:eb:8a:5d:c9:0d:26:82:d7:bd:b2:f6:85:06:19:eb:f9:a0:
d9:43:46:10:e4:b1:be:47:f4:fa:6a:d1:99:6e:c4:af:ff:43:
d2:5f:a6:dd:56:ee:2f:bb:fb:21:06:8e:11:ef:6f:6a:0c:ab:
ab:49:55:c1:5e:f2:90:bd:be:91:8f:8a:11:ea:17:b6:61:cc:
ba:46:64:f8:33:46:40:69:27:ad:fb:77:6f:f3:64:1e:92:23:
0c:01:3c:29:c0:00:8b:d8:55:98:64:a1:8b:30:fa:df:68:8a:
78:27:ab:d0:c3:84:2c:5a:c1:78:84:74:e5:49:f1:d7:67:a4:
61:f4:b8:d3:ba:7f:98:75:3d:17:4c:f6:50:40:7a:51:55:d6:
e9:59:26:54:9a:a4:a9:16:3f:77:dc:99:a3:89:0b:1b:65:7d:
22:47:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:24 2026 by rpki-client