Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: BK2hw3OSUC8CeOjWeZEaQHGIgOqGCHwcCLCsbVrA+jM=
Subject key identifier: 7C:7B:FC:07:C2:79:EB:52:4B:6F:3F:80:47:84:04:91:F7:78:E3:AE
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 01A06E70A99F9DDA4A15D9B5BD586363CE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 1A3C
Signing time: Fri 04 Sep 2026 22:01:12 +0000
Manifest this update: Fri 04 Sep 2026 22:01:12 +0000
Manifest next update: Sat 05 Sep 2026 22:01:12 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: df8WQVTp9G8WwPbKlAvZqlPETmtUXAOw/nbm6znwcow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:a9:9f:9d:da:4a:15:d9:b5:bd:58:63:63:ce:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Sep 4 22:01:12 2026 GMT
Not After : Sep 5 22:01:12 2026 GMT
Subject: CN=7c7bfc07c279eb524b6f3f8047840491f778e3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:6b:af:a8:07:19:24:26:c0:d1:ba:62:86:
d9:25:da:16:92:25:8a:cf:3d:d1:22:5a:f4:3f:6c:
a5:57:49:84:2a:38:6d:c6:f6:56:a3:4a:db:31:61:
17:99:f7:24:b6:97:fd:84:8d:47:af:bd:a8:e0:5a:
7c:b6:ec:8f:00:40:65:f7:23:e2:69:8b:49:da:09:
a2:f0:3c:d2:2c:a2:d8:fc:14:17:b4:c4:45:e8:e8:
5c:24:d4:cd:1e:3a:87:4f:cb:ee:b5:53:7b:71:86:
86:95:50:13:b4:59:68:fa:52:97:4e:a7:72:e3:8e:
30:ac:bd:39:f0:17:38:44:02:56:f1:8f:e3:fc:90:
86:e4:3b:b2:cb:b6:a0:d2:d6:8f:5f:9f:da:39:d8:
16:c4:71:aa:10:c5:0a:89:b9:4c:49:ce:c8:21:75:
2a:38:94:88:80:88:c1:2b:c9:14:d2:98:53:1f:c4:
d9:c3:4e:77:6c:b3:35:0d:38:2a:0f:a9:39:56:9a:
ce:6d:9d:a6:af:2b:ab:5b:c9:78:e9:df:f3:ae:95:
ae:10:af:75:5f:07:0a:df:33:ed:b4:e4:cd:1c:e4:
ad:83:4c:47:3c:43:45:03:ad:41:4d:7a:48:6e:d7:
4a:1a:c6:66:4f:ad:d4:10:f4:cf:c5:56:b8:fd:45:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:FC:07:C2:79:EB:52:4B:6F:3F:80:47:84:04:91:F7:78:E3:AE
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c0:6c:59:a9:b2:fc:fb:ec:9e:63:a8:9c:89:6c:b9:8d:40:
28:ac:77:1d:bf:ca:99:c5:02:3e:2b:52:e1:e0:5b:ff:de:4f:
3a:c7:fa:43:00:9a:00:ec:00:f6:cd:9a:8b:c5:0a:16:19:fc:
1b:f9:bc:6d:39:6b:bd:83:b4:78:12:e3:f5:bc:ce:f3:e5:8d:
0c:f6:06:b1:9a:07:17:b5:b6:7b:bc:14:0c:ea:5f:54:2d:09:
25:82:2b:ef:d5:c7:d7:22:ca:64:51:a3:b4:39:1a:db:12:b3:
8c:82:ab:e0:86:97:45:72:a7:cb:a7:16:d5:62:bd:66:ea:cb:
8a:a8:c1:da:3d:17:2a:92:86:28:c8:a2:0a:1e:15:e8:b4:f2:
18:77:2f:fd:11:10:a3:f3:4e:3b:21:d4:bf:33:f5:b1:56:51:
be:ea:b9:f2:fc:63:0b:4e:83:dc:d1:b3:41:08:42:ff:a6:35:
e1:d5:32:bf:9d:7a:91:d7:05:20:a7:4f:43:03:cc:29:af:f8:
06:7f:6b:55:5e:0e:79:1c:54:85:36:44:14:96:5d:6e:06:01:
6c:a4:c6:2d:b7:fd:8e:94:1d:e9:09:c8:b4:85:92:57:99:14:
5b:8b:42:b5:7c:b6:db:d1:8f:c6:4e:c2:d6:e1:57:5a:1e:86:
3a:d9:26:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:19:53 2026 by rpki-client