Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
File: by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json)
Hash identifier: 901YGrpPd0mJN4kw33/8ZZ9CiB6Gcuwb7hAMkw2qVPw=
Subject key identifier: 51:78:AA:3C:C9:58:92:5B:AE:F1:14:4B:59:ED:FE:FE:96:19:52:DC
Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Certificate issuer: /CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Certificate serial: 01A177A7A8386A0503EE86AD36EED6E4CF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
Manifest number: 1ABE
Signing time: Mon 26 Oct 2026 10:00:38 +0000
Manifest this update: Mon 26 Oct 2026 10:00:38 +0000
Manifest next update: Tue 27 Oct 2026 10:00:38 +0000
Files and hashes: 1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: JQtnexf+oWhu8VchDtBEiMKExd+EoERUVbEOaD6kPxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:a8:38:6a:05:03:ee:86:ad:36:ee:d6:e4:cf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Validity
Not Before: Oct 26 10:00:38 2026 GMT
Not After : Oct 27 10:00:38 2026 GMT
Subject: CN=5178aa3cc958925baef1144b59edfefe961952dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:58:1c:ef:17:1c:5a:5c:08:68:fa:d7:e7:
b5:d2:ab:1e:9d:c0:a4:e0:19:b6:1e:9b:2a:42:a8:
1a:44:54:5f:67:1c:1a:5a:4b:9a:24:9c:a7:6a:15:
6b:01:b7:30:dd:96:bd:7f:6a:b5:c2:f3:6c:e0:17:
ff:89:e4:63:70:dd:d3:2e:16:2c:d5:58:69:39:72:
90:93:7d:93:85:6b:48:ef:37:66:f4:4d:60:cc:17:
e6:96:6c:0e:c0:23:4d:83:22:d1:45:a2:5d:84:8d:
73:34:6f:1f:6b:44:c5:83:22:f5:2e:92:ce:13:79:
0b:26:00:ac:1e:87:68:4a:ab:ab:a5:41:f1:b6:a4:
ac:5c:16:5d:af:d4:23:fa:e1:28:96:74:05:89:a4:
65:ca:7e:84:b5:64:18:71:3d:81:98:69:ee:06:8d:
6b:d0:08:c9:8f:9c:a2:24:0c:4c:6e:be:d6:25:48:
3a:b2:3d:53:31:8d:f4:d8:6d:d3:9f:73:c9:9b:20:
39:e0:26:5e:f4:cc:44:a5:79:f1:8d:a4:7b:91:16:
8f:ef:5f:3b:6d:99:e6:0f:cf:09:ce:d7:95:f6:91:
4b:c5:54:e9:67:a7:13:e9:83:38:f6:dd:1d:cf:ac:
85:d1:5b:e3:4e:8d:8d:da:f0:28:f6:4d:5b:ea:b4:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:78:AA:3C:C9:58:92:5B:AE:F1:14:4B:59:ED:FE:FE:96:19:52:DC
X509v3 Authority Key Identifier:
keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:92:1e:0f:07:83:3b:77:9b:98:74:f9:74:d4:ec:e0:d8:0a:
c3:7b:c8:95:2e:c8:f4:0e:fd:cf:40:09:cd:4c:25:41:b2:09:
29:c9:09:7b:bb:f2:6b:20:b3:0a:8a:05:3c:95:94:53:37:ff:
93:a7:ec:fc:64:d4:cf:05:b6:18:cc:70:8e:2c:4d:f8:85:e2:
0b:f0:38:ca:c9:7a:99:b3:68:d5:19:33:74:52:8b:32:32:b3:
72:35:69:8c:84:c3:d1:6e:f3:55:22:6f:f1:e5:3b:ec:63:fc:
b6:97:4e:12:d4:4d:22:ac:95:df:7b:fb:c6:61:3f:f1:31:75:
66:6b:92:75:64:7d:56:fb:d8:49:b7:a4:d0:bf:ff:8c:58:f0:
ca:df:5c:27:31:b8:fa:1e:b9:61:52:69:62:49:06:26:3d:4c:
5e:b7:f1:5d:e0:e3:c9:ee:e0:c9:81:26:e5:99:5a:ff:a4:12:
d2:c3:a5:3f:39:b2:fe:2b:5d:e8:0d:80:12:ba:47:1c:5e:a1:
24:d4:5f:4d:0b:fc:b8:ee:86:fc:87:bb:e9:a7:fb:3e:b1:9e:
70:d9:55:6b:08:f2:c9:78:43:fc:41:0f:ed:fd:99:53:18:c6:
2b:32:77:57:c3:bf:e8:8d:2b:c5:0c:9d:76:21:73:93:3d:64:
ab:4e:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:51:02 2026 by rpki-client