Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: e29K1aK+v+7/7oGrFJcxG4Ns5DHggvZjCNY8SU+GGLI=
Subject key identifier: A4:C1:E2:02:FB:75:B4:37:1E:F7:4E:0F:F6:C4:76:27:48:F4:81:83
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019CC7BE17A576248C05BCAB7BF735A1129E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 1858
Signing time: Sat 07 Mar 2026 10:00:49 +0000
Manifest this update: Sat 07 Mar 2026 10:00:49 +0000
Manifest next update: Sun 08 Mar 2026 10:00:49 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: XIQmsOW8akmMANxBGqzqubFdxvj11soJLQO3uzY7aKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:17:a5:76:24:8c:05:bc:ab:7b:f7:35:a1:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Mar 7 10:00:49 2026 GMT
Not After : Mar 8 10:00:49 2026 GMT
Subject: CN=a4c1e202fb75b4371ef74e0ff6c4762748f48183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:4c:00:01:20:14:80:92:41:7f:09:8b:1f:
78:71:c9:53:a9:1b:7f:06:7d:f8:ba:a6:57:df:9e:
54:2e:8d:33:44:62:9f:e6:84:01:c5:df:46:3e:5c:
ea:a6:95:57:ab:07:d1:88:40:b1:85:68:e6:30:18:
1a:a8:cc:2c:59:69:92:52:3e:4c:da:48:13:30:72:
ee:89:74:9c:7a:2d:74:2d:d0:ae:ea:50:6e:43:83:
50:a7:88:b4:d9:b7:8d:b0:ff:90:ef:06:71:95:34:
be:ed:69:6f:da:b4:65:ad:04:9e:f4:31:5e:78:ac:
54:ed:9a:0f:1a:58:87:84:f3:98:53:1c:7d:24:24:
19:ce:09:5d:1c:cd:a0:86:74:e4:d7:ed:f9:63:cf:
e8:00:d8:cd:c9:51:0f:43:99:2c:e5:aa:3f:85:59:
d5:70:23:5b:ba:2a:87:07:de:0e:53:74:9f:53:87:
73:c5:d9:a2:f2:8e:79:8b:5e:ee:f6:e6:dd:38:d9:
33:1e:91:07:c4:1f:11:3f:3c:c6:e0:28:ed:97:2b:
6f:c1:1a:e2:f5:8a:46:1d:e4:cc:d5:69:d8:9a:eb:
28:0f:56:4e:52:41:5f:a8:cb:27:82:27:9f:16:69:
3a:12:6e:90:2b:d5:48:4f:31:12:e7:09:30:97:5a:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:E2:02:FB:75:B4:37:1E:F7:4E:0F:F6:C4:76:27:48:F4:81:83
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:99:91:9c:de:cc:7a:c8:6c:f3:24:a2:1e:a3:4e:c0:84:bc:
9a:8e:fa:f4:48:0b:0f:b1:43:7c:87:1f:89:cc:d0:d2:e7:f0:
24:27:9d:f3:ed:ff:c8:84:74:27:c4:f8:06:df:05:2d:cb:1f:
60:65:91:d2:86:23:50:b2:4f:31:f4:9e:ae:ad:89:4e:70:0e:
55:eb:a5:9d:97:11:c1:b5:ab:c8:b0:96:93:46:7b:bc:f8:bf:
0b:29:3e:fb:63:bc:d0:35:8f:34:4d:5b:4a:42:06:4c:d9:f5:
6a:64:bf:27:ce:a4:ce:37:df:41:c7:eb:0a:49:72:3b:15:85:
4b:b7:dd:de:0d:10:03:af:93:4a:fa:31:8a:3f:02:6e:50:f3:
3d:6f:42:ca:c2:fe:8a:1f:30:0f:70:7e:42:0d:e2:76:0e:91:
b9:4d:40:a7:00:62:6b:0e:96:f4:7e:01:7b:a1:4a:d1:84:1f:
84:7f:33:1f:09:43:f1:8f:c4:18:00:e5:23:82:9d:82:de:d1:
de:51:90:3f:6e:b1:e9:28:17:23:bd:02:4d:4b:95:eb:7a:9e:
d4:30:e8:1e:4a:61:6e:71:36:61:97:1b:15:42:c2:21:57:5d:
d8:fa:3f:65:5c:ce:00:ca:d5:a6:18:f6:6c:32:05:70:6c:fc:
4c:84:0c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:24:13 2026 by rpki-client