Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
File: bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json)
Hash identifier: 6lHH8W+HmjlwWOo/6VTdCllJY6mldDel/dtkY+ePWyk=
Subject key identifier: E2:BB:60:10:C1:73:87:D5:E3:32:47:08:4C:02:D0:F8:40:AC:40:35
Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
Certificate issuer: /CN=6d88c66485bb603441745746f9f886a2a6a15a36
Certificate serial: 019D3AC18C8417E69885671DA23516FE6C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
Manifest number: 029D
Signing time: Sun 29 Mar 2026 18:00:56 +0000
Manifest this update: Sun 29 Mar 2026 18:00:56 +0000
Manifest next update: Mon 30 Mar 2026 18:00:56 +0000
Files and hashes: 1: Mtbpc8IAHFgMQsyAgfqJUFJrUrA.roa (hash: V1h3AXSZTLzIGDiJuS9+hhy8lWgG1T0e2v4+3MPHxvM=)
2: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: dI5eYp6ChUlY9JLYgfYOxyBxsVhVFq33MawCiWsXG04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:8c:84:17:e6:98:85:67:1d:a2:35:16:fe:6c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36
Validity
Not Before: Mar 29 18:00:56 2026 GMT
Not After : Mar 30 18:00:56 2026 GMT
Subject: CN=e2bb6010c17387d5e33247084c02d0f840ac4035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:aa:b4:52:9e:6c:29:3e:ca:f9:4d:ce:98:
b7:82:2a:d3:dd:d2:a8:c2:51:28:40:ff:af:e1:0d:
7e:76:a8:ac:73:8e:76:94:a8:bb:c0:68:8b:8b:82:
93:91:7c:0b:46:34:07:16:ba:25:bf:67:26:48:25:
e0:ae:90:e8:8f:9f:58:8d:12:a6:e5:e8:a8:cd:b5:
12:06:44:6d:8e:2f:68:db:1b:9a:43:27:d7:5d:f2:
21:f1:83:1b:e7:1b:3d:37:c3:21:ae:49:8e:c2:1f:
ef:fe:7f:94:7f:48:20:1d:54:e6:18:32:46:f5:71:
9e:08:99:eb:59:e6:b7:28:28:bf:7f:27:f5:ec:18:
78:07:19:89:7d:ee:a3:45:83:f3:92:c2:eb:c8:4e:
c7:b1:27:7e:98:55:d2:f4:63:6b:60:f8:4f:23:aa:
6e:21:11:f3:45:b5:5d:99:f9:d2:e1:2a:c8:3f:4e:
d0:bd:a2:e6:4a:b6:94:20:52:36:94:04:1b:64:aa:
ac:b0:ad:f7:82:6e:59:9c:b0:32:1b:9c:4e:24:db:
6c:82:c5:ec:90:f0:a1:b2:a3:b7:2c:a8:db:64:13:
2f:32:67:28:5d:9d:9b:c5:3a:2e:ad:65:b2:1f:ed:
7d:fe:94:2c:45:e1:7d:ca:9e:33:d1:cb:48:5e:d8:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:60:10:C1:73:87:D5:E3:32:47:08:4C:02:D0:F8:40:AC:40:35
X509v3 Authority Key Identifier:
keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a0:dc:f3:91:21:f0:7a:ab:43:74:18:05:13:9e:16:ff:8c:
b1:9e:0f:2c:b0:f7:33:74:5b:da:e1:8a:e7:d7:a0:1d:39:64:
53:5e:13:60:63:36:90:fe:54:33:7f:6e:0f:1f:6e:8a:48:3e:
7f:19:1e:fe:0a:18:84:4b:8d:76:0f:83:b3:c8:47:f2:f6:b3:
07:2d:ff:65:34:d9:9d:86:ba:b9:12:9f:d5:bd:19:14:31:b2:
8a:75:ce:44:05:81:4c:12:bf:1e:d9:84:ae:41:9c:37:18:d7:
d0:a5:88:4b:26:1d:86:e4:d0:7c:c7:a3:cf:b8:a4:db:78:ac:
f6:82:0d:9e:ad:db:ca:13:1f:78:e7:7b:86:af:37:0e:bd:1d:
15:61:1f:58:32:22:73:7b:1f:d9:25:ca:a4:a5:74:27:45:8f:
96:75:35:2b:4b:9c:24:14:fb:40:cc:d7:52:b5:60:a1:cd:cc:
94:52:1f:31:4d:a8:50:e2:56:b8:6c:4a:47:88:3b:e5:6b:1e:
00:b4:9e:75:fb:1c:ea:94:f7:df:2e:f6:21:23:a7:a3:eb:5b:
8b:bb:b0:87:7e:bf:7b:7f:a8:58:fd:8a:aa:dc:b2:31:d3:ee:
4a:e2:b5:0e:7a:76:97:df:ad:21:0f:96:f6:8b:fa:97:12:14:
2c:5d:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:26 2026 by rpki-client