Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: lgePEdBA0B0xgNYtZ4ILYU+pqJd7oovjQY0uD53c3VY=
Subject key identifier: 1C:0E:0D:FD:3E:09:98:D3:0D:2F:37:78:4C:59:FB:DF:8B:71:B7:D2
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 01A16B6CFEA083E7F777FFA3ECB79CEAC49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 1ABF
Signing time: Sat 24 Oct 2026 01:01:07 +0000
Manifest this update: Sat 24 Oct 2026 01:01:07 +0000
Manifest next update: Sun 25 Oct 2026 01:01:07 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: 1uDsB3aoZUbIS8e/dIVWOTFnfHbvZ3ZzTu4LBxiJDzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6c:fe:a0:83:e7:f7:77:ff:a3:ec:b7:9c:ea:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Oct 24 01:01:07 2026 GMT
Not After : Oct 25 01:01:07 2026 GMT
Subject: CN=1c0e0dfd3e0998d30d2f37784c59fbdf8b71b7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:22:8c:e0:f7:37:dd:04:34:e4:89:69:96:
00:1d:fe:28:53:34:a2:73:95:6f:ba:b0:10:4c:b8:
d7:c9:0c:35:af:03:3a:a4:00:ad:cb:cb:3e:10:94:
25:b5:bb:34:f5:4e:31:e0:da:22:9b:6a:0a:ea:7f:
37:a7:4d:06:db:89:d4:e9:bc:97:f6:65:f6:1b:a0:
06:88:39:be:ec:e6:22:0a:03:5b:da:c1:fc:3f:e4:
c4:85:bb:df:53:4b:58:92:a2:ce:e0:fa:ef:ef:e6:
2b:b9:7a:2e:fe:1b:a9:e3:ba:3f:83:7e:7b:bb:05:
2b:49:a9:fb:c3:f2:be:73:31:96:52:6c:02:f8:ff:
b7:f4:c8:ec:0e:72:6d:93:6c:83:1e:31:65:4c:60:
d7:69:bd:93:a8:0a:ec:4c:80:30:fa:82:e9:17:35:
cf:ee:d6:68:63:27:57:5a:9d:39:e6:e9:6d:75:e3:
6a:dd:99:88:89:76:f1:92:6f:8f:25:25:5e:f5:b7:
01:a1:09:9c:ba:49:ae:bc:81:33:64:a9:30:e9:c5:
73:b6:49:41:3b:be:90:d2:19:53:5e:d8:3c:08:47:
2e:f3:16:04:bc:7b:31:58:1f:2f:1a:74:57:32:b2:
ea:a1:2b:0b:1a:66:e5:95:05:25:2a:85:77:a8:4f:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0E:0D:FD:3E:09:98:D3:0D:2F:37:78:4C:59:FB:DF:8B:71:B7:D2
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3a:ac:01:48:59:51:2f:4a:eb:aa:5e:4f:b6:74:9d:9d:7c:
08:05:b4:81:94:3d:38:65:dc:b0:e0:94:d8:09:02:4d:58:06:
dd:80:2d:50:b7:d5:ee:ff:05:aa:e6:e2:ae:fa:b0:ab:1f:0e:
31:18:eb:3a:16:7a:67:d0:d6:db:bf:ac:0e:f2:6e:a7:6f:81:
d9:00:6c:7e:9a:51:20:1d:97:80:ac:ad:67:1b:4e:07:47:24:
f8:5f:17:cb:c5:e2:b9:2d:7b:a7:63:21:94:17:ef:e7:c8:e7:
8c:1b:11:7a:5b:fa:33:08:f7:dc:9a:8c:fa:44:e0:be:e4:56:
b3:93:37:45:92:84:6d:88:9b:6c:4b:6d:37:d5:23:f6:d9:d3:
c1:85:c9:55:19:34:4c:71:4a:c2:50:06:f6:ef:fc:f8:71:ec:
bf:f7:88:93:9c:e4:1b:27:b9:f1:38:2e:e9:2c:6a:ca:78:14:
42:1e:f7:67:c8:2c:60:82:d3:72:66:bb:81:61:20:f9:a7:bf:
4b:a5:8e:f3:58:b1:a4:a3:72:e2:cb:4d:f2:8a:97:59:c2:3d:
34:23:f1:4f:af:6d:23:3f:d5:e5:6d:11:31:73:64:cb:7c:47:
3f:1c:cb:02:11:89:f2:a6:e1:f1:7c:2d:06:84:db:20:be:05:
12:d7:d4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:03:57 2026 by rpki-client