Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
File: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft (raw, json)
Hash identifier: ySZ+XoC3b6rDUkKF6XFP+8HteMcyO+jaAL/bsWXPMkY=
Subject key identifier: E3:D3:D1:10:0A:2A:14:1B:56:F9:76:F3:A8:BA:39:42:3A:3F:6C:39
Authority key identifier: 6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
Certificate issuer: /CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Certificate serial: 019D382E980D1C6E25A87ABCD5BD2F94CEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
Manifest number: 161E
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: ZQDRmVSAS-VQjlQwPz6YndLHMAk.roa (hash: HlwMeTdyXew+ZhiKaF8HUzGdDR+H+dDeb0Vxy+YC2Vo=)
2: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl (hash: RSSaiaiewpV49bu+pqdvdcsWQVkm8twlL3pw1GB7DwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:98:0d:1c:6e:25:a8:7a:bc:d5:bd:2f:94:ce:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=e3d3d1100a2a141b56f976f3a8ba39423a3f6c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:57:68:ef:c0:a5:f3:f2:5c:e3:4f:bc:60:
3e:e0:61:52:4b:c5:52:b2:ea:62:3e:c0:92:11:f7:
8f:1c:bc:d5:99:39:a3:f8:19:63:03:0e:2d:82:f9:
a6:d5:1b:84:27:99:7c:c9:c0:ae:19:f1:ba:a1:b3:
e0:95:87:88:eb:8b:96:d9:f4:2a:dd:ba:0e:53:c2:
37:1b:75:61:d3:a4:8d:91:2b:ce:3b:6a:31:5d:97:
66:46:1e:78:8c:fe:58:05:1e:95:fe:7b:6e:54:ff:
50:18:b6:6b:bd:9a:85:e0:29:9b:56:81:1b:8b:e2:
27:69:0d:4f:f8:74:ee:6f:3e:ba:ea:0f:66:8c:de:
f3:56:9a:bc:1b:9d:52:75:bc:b9:98:c2:19:21:7a:
ff:e6:cc:9f:16:1b:de:d8:32:c9:d9:ed:13:69:98:
b3:fd:d3:d5:05:e5:41:f4:58:55:47:d1:c9:b2:46:
64:7b:29:02:04:8c:74:1a:41:b3:9c:71:69:93:97:
df:80:a1:82:ac:23:df:9c:15:e1:b2:07:57:14:12:
70:d7:04:63:72:af:b7:38:c7:01:9f:53:39:26:18:
15:4a:5c:e5:af:3b:29:35:6b:7f:42:92:8b:77:06:
1d:da:a8:89:42:74:76:52:0b:3d:79:d8:5d:7e:93:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D3:D1:10:0A:2A:14:1B:56:F9:76:F3:A8:BA:39:42:3A:3F:6C:39
X509v3 Authority Key Identifier:
keyid:6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2a:09:da:b7:84:43:e2:92:34:b2:e8:c6:cc:09:ba:0a:86:
02:90:0c:b4:53:43:ff:e5:f3:66:96:7f:db:d8:81:6f:d8:3c:
56:21:c7:20:e4:a6:c6:1c:e8:e9:8a:e8:82:51:91:0a:15:14:
3f:6f:06:b8:3b:a9:06:14:65:b6:cd:d3:d3:5c:2b:82:38:c4:
de:3d:0e:b3:47:39:a0:39:18:9e:36:9d:7d:75:c9:8b:ba:0f:
aa:e9:44:d1:56:78:3b:7c:7e:42:d4:67:74:47:62:93:e0:a9:
01:0b:0f:3c:39:9a:a3:cf:c9:ea:ae:03:f6:12:31:98:b8:ae:
4f:f5:ef:e5:0d:25:dc:e9:01:e0:f4:9b:a7:d3:43:48:76:75:
05:e4:cb:ec:c8:ba:80:df:40:13:05:64:66:f5:61:9e:cb:58:
47:79:93:e2:b8:fa:ee:fc:15:d4:b3:bc:6d:12:90:14:47:ee:
a8:30:65:c8:84:71:82:dd:c3:de:e8:d6:0a:eb:7c:90:e7:0c:
a7:05:ab:91:f5:64:11:8c:45:b2:fb:39:dc:61:d5:2e:3c:9d:
80:d2:b3:c5:9a:3d:14:c0:2b:4e:ab:56:76:1b:f1:11:b5:8f:
05:06:8f:40:90:12:84:a6:71:e5:4d:b0:ec:93:e5:ff:18:e8:
0c:6c:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:56 2026 by rpki-client