Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: QE5bZKT8A1uhw+8HAOoX98+9lqaFgrNrg63OOBYxS3M=
Subject key identifier: 3E:30:70:22:59:59:35:69:0C:7A:E0:39:D3:F0:02:E2:A4:7B:9C:D3
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019D38D347D3E2330908777CB33B2C504512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 17C5
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: PhVL6YrBmYd5lP8Ofjqc8MzRn62KbwKkwC2lK7eQyr8=)
2: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (hash: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:47:d3:e2:33:09:08:77:7c:b3:3b:2c:50:45:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=3e307022595935690c7ae039d3f002e2a47b9cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:ef:e2:2b:eb:01:ed:6c:a3:db:7e:ea:63:
66:97:4c:5f:c7:fc:72:53:7d:6c:0a:c7:7c:35:51:
2f:2c:9b:da:12:9b:d2:64:2d:e9:13:77:5e:f4:29:
cc:63:3b:2a:a9:6f:c6:a8:6d:cc:ea:67:5b:e3:97:
4b:5e:34:31:0b:19:4a:6a:54:e4:50:50:1b:b9:44:
4a:42:ac:cd:a0:5f:97:35:e3:36:eb:da:3d:63:97:
1c:ed:5d:c2:c6:fb:e2:90:f4:ee:a9:1e:17:fe:d2:
0b:18:59:f9:9d:ea:93:13:a9:87:ec:d8:8b:17:a1:
b8:46:c8:6b:aa:ed:d1:70:73:07:94:3e:bc:a3:32:
98:1f:6f:e5:c9:1f:ab:fd:cd:8e:e6:dd:54:c3:cd:
a3:23:a5:56:1a:de:5c:a7:0c:69:76:55:e2:1a:ba:
70:a6:fa:57:c8:63:38:f2:b6:57:fe:84:d8:44:f2:
0b:a7:cd:07:98:05:c6:ed:5a:a0:e8:7c:32:ea:29:
3d:fd:97:0f:09:3d:78:d8:10:21:25:31:b4:11:2d:
1e:99:db:ba:af:73:0e:b1:c2:c5:ac:18:23:db:57:
c7:b7:aa:ac:04:93:8b:55:76:90:10:c2:58:ab:55:
ef:0b:e8:7e:d4:0b:43:d2:44:42:4c:d7:1a:f1:74:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:70:22:59:59:35:69:0C:7A:E0:39:D3:F0:02:E2:A4:7B:9C:D3
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:72:2c:db:00:2d:29:76:98:85:31:07:e4:87:37:39:90:bc:
6d:09:72:35:aa:2d:06:a4:4b:71:83:e5:04:a1:d5:7c:19:da:
b8:0a:8b:26:48:aa:1c:03:4e:e6:4c:01:e9:30:b5:93:4b:df:
ad:05:d5:a6:24:1d:d5:e6:21:09:76:69:ee:0e:4e:ca:2f:84:
90:dd:26:07:6a:e4:1b:6f:a9:fe:2d:de:de:51:c4:10:ce:07:
a5:24:9d:8c:0c:ba:54:09:52:65:1a:85:59:1c:bc:ec:b8:a3:
63:76:17:8c:a1:8f:e7:c8:96:d2:63:3f:f3:4c:75:c8:46:37:
e2:04:a4:d8:36:ec:da:e9:c1:d5:45:4d:51:57:5c:b6:48:e6:
87:fd:b0:aa:9a:31:1f:70:76:ca:b4:ed:13:aa:c1:10:30:7d:
b3:1b:92:6a:30:9d:a2:e9:14:9d:d5:ae:1d:63:a9:4a:2f:3c:
fa:08:8a:13:e1:21:be:e4:e7:a7:67:35:87:9f:63:dc:1f:35:
18:01:b4:d9:90:7e:b1:7e:a4:9a:0f:b7:53:ce:e1:eb:a4:e3:
c8:4d:aa:67:f1:de:13:60:39:06:55:31:ef:35:6c:af:a6:c4:
f9:32:f5:23:3d:86:ff:c1:89:29:55:a4:7f:02:38:af:d5:16:
b4:c4:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:33 2026 by rpki-client