
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: yqbt4y/gUJrC35gE8mL4veLVlqKeKttDMLeAy0Lsqe8=
Subject key identifier: 00:E8:09:0C:27:12:51:4B:E2:8D:4B:22:C8:4B:32:55:E5:07:1A:FC
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 01A001A64F1A9656955CE8390F43A4DE73E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 0FBC
Signing time: Fri 14 Aug 2026 19:01:11 +0000
Manifest this update: Fri 14 Aug 2026 19:01:11 +0000
Manifest next update: Sat 15 Aug 2026 19:01:11 +0000
Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: /vnsm54fGyEVzxqcMcDuELakWbgKrU8NrLsLR7ahX5g=)
2: syoW9dmBrPQScEStsWIE7Y3xj7E.roa (hash: 7MBJDw4Pca+UQjisSf8ek6epXNLQhKJ/t0Da7aSqre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:4f:1a:96:56:95:5c:e8:39:0f:43:a4:de:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Aug 14 19:01:11 2026 GMT
Not After : Aug 15 19:01:11 2026 GMT
Subject: CN=00e8090c2712514be28d4b22c84b3255e5071afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:fd:b7:7b:4e:86:e6:cd:54:a1:b2:1e:7b:
aa:5b:31:f0:e0:1c:4d:69:23:63:f2:2a:a0:ab:6a:
b6:39:3c:d9:38:07:a8:f6:fd:8b:7b:45:b0:82:e3:
da:ea:15:01:35:97:5e:f6:23:f8:cc:74:3e:c9:f7:
37:e6:02:24:79:76:c4:34:12:10:77:43:e2:33:4e:
31:ef:44:d9:e1:96:e5:0e:ee:6f:07:91:99:15:e9:
83:33:b9:a6:d2:f7:0b:b5:cd:e4:29:25:d6:b5:cd:
cd:1d:b5:11:67:ce:9c:6a:4f:a6:5f:b2:07:38:a6:
84:02:43:23:da:cb:16:42:24:e9:dc:d2:fe:38:0b:
4b:e1:65:6c:b7:31:c8:b9:06:52:a8:ba:b1:28:0a:
1d:81:64:fd:06:9a:b7:86:be:60:75:72:ed:f8:2c:
24:08:aa:1f:1a:d5:00:55:fe:b8:a9:52:f9:9c:02:
11:83:0e:54:cd:59:83:98:c9:30:a2:ee:db:fb:b9:
f5:ad:a0:37:9f:b9:e4:24:81:ec:46:d1:61:a6:61:
2a:74:af:fa:7c:83:32:16:9c:a5:5f:c2:37:3d:ef:
e2:3f:c4:93:46:83:f2:37:30:d7:29:ea:7d:a7:f0:
13:2b:73:b3:e4:c8:af:2c:d7:61:29:ed:cc:29:fd:
48:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E8:09:0C:27:12:51:4B:E2:8D:4B:22:C8:4B:32:55:E5:07:1A:FC
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:65:71:41:01:97:46:8a:03:e7:ed:20:45:d8:7c:ac:db:98:
e6:2b:48:8f:df:2e:52:12:a6:a4:ae:7b:b3:d6:20:8a:4a:c1:
07:27:2e:29:8b:c1:30:60:cf:f2:c8:c4:72:c0:ac:1d:28:7b:
7e:1f:c2:6a:1a:d0:69:47:ed:78:2e:c0:8e:04:c6:98:b4:98:
8a:b3:ae:21:18:86:60:0c:60:4b:6a:43:d8:f4:8e:66:fa:d4:
4f:16:62:b3:ef:26:64:6f:5b:7b:54:8e:92:70:09:d2:cc:ba:
c2:43:32:f0:0d:18:f5:37:4d:49:68:ff:98:a1:bb:ba:05:8b:
04:e6:a5:70:f6:26:f6:c2:0d:ab:a9:44:ba:ce:bc:bf:90:dd:
6a:b8:37:ae:0f:30:f0:79:52:5b:72:43:37:cf:63:71:c5:38:
58:29:1e:91:75:c3:98:d7:f3:c0:e5:ce:09:4b:79:2e:b8:de:
7d:3f:58:ac:a9:99:4c:27:bf:52:b7:b1:8d:03:e6:4a:1a:ce:
0a:83:22:10:89:aa:93:d8:58:d4:47:54:cc:d9:80:57:5e:fe:
d8:b6:b2:92:1d:51:db:06:80:f5:b9:e1:1f:96:46:18:41:18:
d8:47:aa:fc:2d:95:0e:ed:de:45:5d:4a:e9:b0:88:d2:f0:8b:
86:49:e7:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpk8allaVXOg5D0Ok3nPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl
NWM5YjEwHhcNMjYwODE0MTkwMTExWhcNMjYwODE1MTkwMTExWjAzMTEwLwYDVQQD
EygwMGU4MDkwYzI3MTI1MTRiZTI4ZDRiMjJjODRiMzI1NWU1MDcxYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyD9t3tOhubNVKGyHnuqWzHw4BxN
aSNj8iqgq2q2OTzZOAeo9v2Le0WwguPa6hUBNZde9iP4zHQ+yfc35gIkeXbENBIQ
d0PiM04x70TZ4ZblDu5vB5GZFemDM7mm0vcLtc3kKSXWtc3NHbURZ86cak+mX7IH
OKaEAkMj2ssWQiTp3NL+OAtL4WVstzHIuQZSqLqxKAodgWT9Bpq3hr5gdXLt+Cwk
CKofGtUAVf64qVL5nAIRgw5UzVmDmMkwou7b+7n1raA3n7nkJIHsRtFhpmEqdK/6
fIMyFpylX8I3Pe/iP8STRoPyNzDXKep9p/ATK3Oz5MivLNdhKe3MKf1IiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADoCQwnElFL4o1LIshLMlXlBxr8MB8GA1UdIwQY
MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct
M2RhMDUzODhlOWFlLzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl
LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmVxQQGX
RooD5+0gRdh8rNuY5itIj98uUhKmpK57s9YgikrBBycuKYvBMGDP8sjEcsCsHSh7
fh/CahrQaUfteC7AjgTGmLSYirOuIRiGYAxgS2pD2PSOZvrUTxZis+8mZG9be1SO
knAJ0sy6wkMy8A0Y9TdNSWj/mKG7ugWLBOalcPYm9sINq6lEus68v5Ddarg3rg8w
8HlSW3JDN89jccU4WCkekXXDmNfzwOXOCUt5LrjefT9YrKmZTCe/UrexjQPmShrO
CoMiEImqk9hY1EdUzNmAV17+2Laykh1R2waA9bnhH5ZGGEEY2Eeq/C2VDu3eRV1K
6bCI0vCLhknnKA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:38 2026 by rpki-client