Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: rTxB6YU859owYnLGwHi3aDmxWqL3djicsBGR+hqm/yc=
Subject key identifier: 0A:C6:71:EE:42:14:AA:DC:30:45:1D:EE:1C:1A:CF:54:04:45:7F:A1
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019DB16A8E87E8B17DC99506870AC7C8A020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 18D1
Signing time: Tue 21 Apr 2026 19:00:43 +0000
Manifest this update: Tue 21 Apr 2026 19:00:43 +0000
Manifest next update: Wed 22 Apr 2026 19:00:43 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: USq8Cbj2Zda9PqZM2mtqnSJdx0qbaSEtAR8JMfR/bgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:8e:87:e8:b1:7d:c9:95:06:87:0a:c7:c8:a0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Apr 21 19:00:43 2026 GMT
Not After : Apr 22 19:00:43 2026 GMT
Subject: CN=0ac671ee4214aadc30451dee1c1acf5404457fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:ee:e1:2b:db:53:f7:6e:dc:dd:97:f5:14:
65:9b:36:e3:b3:66:7e:9c:03:b2:3d:cb:09:10:c9:
25:bc:bc:3b:ce:bd:36:38:4e:e2:3e:59:be:a9:dd:
5b:83:b2:9e:f2:0e:17:a6:b5:99:96:9a:0c:82:74:
fe:4a:dd:93:30:88:37:b8:cd:e9:a2:e1:fb:7c:08:
3b:c8:c7:5a:2b:c8:4d:e6:4c:30:d1:41:55:91:f1:
f4:f0:21:88:27:bc:a3:a1:4a:c7:04:c8:b6:a5:60:
0f:32:d2:f5:ed:ef:a2:c7:5a:bd:b0:dc:71:61:9e:
37:8a:8d:a6:7e:1e:06:66:38:42:90:4c:14:6f:b2:
06:0e:7e:2f:bd:cf:26:2e:d5:fa:ef:82:e2:f4:1e:
73:00:7f:ac:2f:1d:b5:53:ec:b4:00:83:66:c5:5d:
84:05:40:67:57:63:f5:46:b0:45:8a:d6:5a:86:0e:
4b:e5:00:35:c5:8d:83:be:29:72:98:03:ae:40:42:
0f:7f:20:2f:6f:a0:a6:8a:1f:13:f6:61:e9:c4:ea:
e8:75:27:d5:48:86:5b:8b:25:91:b2:11:aa:21:a1:
10:0d:7a:21:2a:7d:fa:f9:97:9d:91:85:42:73:bf:
6a:7d:17:a7:f4:5b:77:7b:76:b1:a5:9d:e7:77:0d:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C6:71:EE:42:14:AA:DC:30:45:1D:EE:1C:1A:CF:54:04:45:7F:A1
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9d:83:40:89:60:be:7d:0d:93:56:f6:08:80:eb:09:b2:bf:
ca:09:60:9c:86:ad:0f:44:55:89:b3:84:28:fb:15:51:ed:6b:
79:ba:c2:11:7c:02:47:0a:4f:6e:84:a5:3d:f5:58:b4:8b:14:
0a:65:b2:de:31:f9:ed:9c:8e:1a:27:07:ae:55:c5:60:f8:8e:
20:76:a2:33:64:d3:91:ab:fb:59:e1:b4:96:84:f0:3f:13:29:
c0:ec:8a:8a:5b:0b:23:ad:51:6e:fd:a7:99:da:fb:98:6e:ae:
6d:b6:1e:51:1b:61:4b:37:18:fc:69:e9:0f:79:16:79:07:5d:
5f:8b:dc:a9:6f:67:83:da:9d:c3:8d:ad:05:82:9e:02:5d:09:
15:e8:11:7c:c5:15:47:33:fd:06:aa:00:bc:92:dd:b6:2e:3b:
e7:37:a0:50:7f:df:29:9f:db:b1:bb:59:83:3b:f7:de:ba:4b:
48:78:6c:eb:e0:13:fb:72:df:20:c9:2a:5d:c7:c6:40:78:96:
91:9f:03:c9:11:4c:9f:16:8c:41:85:62:5b:52:b9:32:6f:e9:
e0:66:e4:1f:d6:f7:ac:c1:db:b9:e7:88:ba:fb:40:b7:45:b3:
cf:0a:76:9e:83:21:1c:bb:50:00:b3:92:81:60:00:87:84:83:
53:72:d0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:36:01 2026 by rpki-client