Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: 40UkvfWe5Mhj3tUlKIWSgxTOr7/YNsJInWvScMAR7Js=
Subject key identifier: 9D:B7:0C:95:F4:14:98:A6:48:AD:3C:61:45:0F:75:0C:88:AE:31:75
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 01A002820743A9580CDBC0EC622A4B00957D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 23:01:10 +0000
Manifest this update: Fri 14 Aug 2026 23:01:10 +0000
Manifest next update: Sat 15 Aug 2026 23:01:10 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: qqQGEwgOEPqirKnbQtZ8swkGGYZ0SGm1NNPjFCfSf9Q=)
2: OdGR8q1DrtzqKp7QM4_79Vzq8kI.asa (hash: zT68GbPzl5dNyGUc+5uD6uYA3pHmfcM0MnvrZ31HnjA=)
3: iuE68_Zu0uK275nJpb_6tInq2NE.roa (hash: vi8Q6eX9dc3jErUuvQfc1dJyq7p1p41pFgY91fJ0bdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:07:43:a9:58:0c:db:c0:ec:62:2a:4b:00:95:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Aug 14 23:01:10 2026 GMT
Not After : Aug 15 23:01:10 2026 GMT
Subject: CN=9db70c95f41498a648ad3c61450f750c88ae3175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:fe:81:42:c4:1c:d9:55:2f:68:d0:75:47:
66:41:d4:f4:7b:ba:8c:a2:3f:35:84:52:3b:1b:9e:
3a:93:06:88:bb:be:e6:2c:fd:9b:4b:58:99:a2:0d:
bf:30:e7:9c:2b:89:71:d3:b5:98:d9:20:9e:af:80:
b1:82:a2:23:b3:16:bb:93:08:47:ea:95:ab:fe:9b:
5c:65:e9:0b:cc:df:c5:e9:31:64:ca:7f:8c:0a:e1:
92:3f:b4:f3:4e:36:c7:b9:03:13:e2:25:c6:51:39:
63:f9:38:d5:5c:3e:a7:71:e5:02:ad:06:1e:e3:65:
54:61:d1:84:19:70:b2:8b:ae:20:15:37:c4:05:68:
79:ff:46:e7:dd:eb:58:cd:5a:1e:df:25:e5:a2:49:
48:8e:03:a0:82:7d:70:58:09:d2:1a:02:37:93:88:
a1:46:e4:1a:45:73:45:b6:28:bc:e0:0b:ed:0f:47:
70:93:26:64:13:5e:23:57:75:38:57:f9:ff:77:98:
95:5e:a6:ae:15:84:34:93:c7:a4:7e:64:cc:9d:ee:
8e:f5:b3:12:80:2a:96:ff:77:20:18:f9:a5:af:c5:
80:31:9b:c2:76:3a:8a:a2:d5:f8:ef:2a:68:60:0b:
5e:a3:ec:f5:bb:d4:d5:9d:0f:75:bb:74:35:25:c4:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B7:0C:95:F4:14:98:A6:48:AD:3C:61:45:0F:75:0C:88:AE:31:75
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:62:cc:46:2c:eb:d9:d0:61:61:b8:5c:7a:21:9b:29:6a:0f:
cd:97:8e:97:ec:2c:30:ca:93:0d:9d:4c:b0:9b:34:a5:d4:03:
11:b2:dc:03:be:53:9e:ec:70:e9:bf:80:05:b6:60:57:b5:89:
82:f8:36:0e:5f:56:91:5e:3a:f7:c4:f8:2d:1c:8d:43:42:13:
9c:07:c4:b0:50:33:11:9a:a1:7b:53:df:5d:ad:0a:1d:4f:06:
8c:f1:bc:3e:e6:fe:52:47:a3:7a:e4:ef:39:ad:e6:d4:55:91:
ef:d7:8b:d8:13:cd:c9:e6:06:3b:8d:5b:db:47:6b:63:85:0b:
9a:f8:65:fc:c1:8e:e6:7d:b6:ec:21:f9:b3:ca:f7:cc:33:02:
15:23:21:dc:b1:50:0b:7e:fa:6a:ef:fd:46:9a:1d:bd:52:a8:
98:87:0c:e1:b9:ac:46:4c:11:5c:51:67:22:a7:c2:c6:14:dc:
90:8d:34:76:c1:f1:60:aa:e1:42:b6:bf:d8:f5:83:40:e1:6a:
d5:fe:47:6e:93:45:c6:12:a1:f7:e4:5f:b1:b5:14:ce:89:d2:
10:0d:20:5a:6d:d7:77:7c:2a:39:25:e4:19:0c:31:e8:cc:b7:
73:37:97:6b:f9:85:14:4f:c7:3e:29:17:04:f1:17:2e:75:dd:
ac:b9:78:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:08:10 2026 by rpki-client