Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: FdUff7OQedXX6t7KWT36RL5bFp2ksanNjqe+XlligKU=
Subject key identifier: B0:09:AD:66:CC:8D:30:EA:02:19:55:D8:D8:4D:07:24:7C:C9:75:DE
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 01A13E26E3F7931657271B40ED69E47187AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 19DA
Signing time: Thu 15 Oct 2026 06:01:38 +0000
Manifest this update: Thu 15 Oct 2026 06:01:38 +0000
Manifest next update: Fri 16 Oct 2026 06:01:38 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: d/xMQerVObWpwLLNB4Bti+GHYeRFB2kaf4UHkYBaNN0=)
2: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (hash: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:e3:f7:93:16:57:27:1b:40:ed:69:e4:71:87:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Oct 15 06:01:38 2026 GMT
Not After : Oct 16 06:01:38 2026 GMT
Subject: CN=b009ad66cc8d30ea021955d8d84d07247cc975de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:6e:2e:c8:70:80:64:38:40:08:01:2a:3e:
b7:31:4f:6e:03:e9:9b:6a:6e:0e:e6:c1:fd:63:a0:
78:e5:d7:a6:0a:f7:b1:64:42:33:66:46:9d:05:fe:
48:a1:d3:29:cf:b5:e5:83:c3:24:31:73:7c:55:3b:
b2:86:b9:b1:fd:60:4e:4c:19:fe:5a:9f:a0:fe:d4:
f4:d0:90:b4:b8:84:3a:74:d7:04:0f:16:14:4d:12:
de:71:93:bf:20:58:ef:04:ed:40:86:c4:7a:15:3f:
5c:8b:ae:f1:bd:8b:61:15:2b:40:91:24:39:9f:8c:
b5:6a:e4:70:19:71:06:c8:95:97:e2:95:70:e1:b5:
61:e5:c4:d5:14:8e:d5:29:38:e4:63:b6:dd:72:11:
8a:bd:18:1e:a4:47:be:cd:d6:bc:f3:a9:ba:d1:66:
a2:4b:3c:f6:58:16:4d:e6:30:24:e4:08:1f:8c:cd:
49:45:42:f2:9d:a5:cb:f0:3b:f4:26:05:ef:d4:d5:
87:c5:ac:fb:f9:08:05:cf:86:f5:73:48:87:b7:78:
3e:e8:14:0e:79:89:9c:2c:9a:2e:dc:48:33:8c:22:
75:7d:34:4e:0f:12:68:18:dd:53:70:f9:68:55:95:
3e:fc:b3:5a:1d:68:43:ac:aa:13:3e:ba:47:9a:7a:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:AD:66:CC:8D:30:EA:02:19:55:D8:D8:4D:07:24:7C:C9:75:DE
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:45:7e:73:11:65:13:7b:15:b0:26:a5:d2:17:01:42:7e:ab:
a0:0a:67:15:48:71:76:9e:26:8e:cb:84:ec:23:df:a8:ed:69:
5d:37:7f:9d:a9:9a:83:d8:fc:18:42:91:60:57:99:d4:64:43:
18:fb:19:71:db:16:4e:dd:aa:d3:17:18:96:bc:8f:e2:d1:ee:
2d:bf:c4:b7:25:f0:19:82:a3:e1:4d:97:c2:a8:59:52:d0:9e:
c0:c2:d7:0a:7e:37:71:d4:39:fa:dc:fa:1b:5f:54:4d:fa:4d:
5a:36:7b:b5:e3:01:c6:eb:38:4c:dd:ff:7b:da:49:8a:2e:4c:
26:86:3f:5e:11:aa:3e:10:5b:ac:e3:97:88:f9:48:c4:9a:e1:
95:2b:72:c3:9c:e7:db:3e:f9:d6:dc:de:99:0d:3d:7c:d2:54:
90:0d:9d:b7:20:2e:e1:7d:24:7d:34:0b:f2:29:2c:a9:49:f5:
c5:2e:fa:03:6f:43:33:26:7b:0c:a1:19:71:6d:64:34:23:d2:
e8:fb:c7:08:7b:a2:38:b8:97:11:d4:cc:1e:b5:c5:c7:bf:b2:
92:97:99:8d:5a:71:73:eb:41:73:d1:08:7e:55:b6:e0:74:43:
47:9c:ed:5f:78:7b:ea:9d:99:99:5c:7a:c3:73:67:d1:de:06:
5d:70:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:16 2026 by rpki-client