Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
File: by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json)
Hash identifier: 1EQ6d4NzPzvJiC43ousBtZj0kXHziLxyEfZE/zFE598=
Subject key identifier: 17:E9:85:BD:19:FC:59:1D:72:93:05:E9:B4:9B:BA:9B:82:FB:D5:BD
Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Certificate issuer: /CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Certificate serial: 019FA07243ACFF969490DB746739E3B1E9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
Manifest number: 19CA
Signing time: Sun 26 Jul 2026 22:01:10 +0000
Manifest this update: Sun 26 Jul 2026 22:01:10 +0000
Manifest next update: Mon 27 Jul 2026 22:01:10 +0000
Files and hashes: 1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: l9MGZT0iNL1ww9ZB2mnJmpl6Xw0x5o5RYimlSQzbz/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:43:ac:ff:96:94:90:db:74:67:39:e3:b1:e9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Validity
Not Before: Jul 26 22:01:10 2026 GMT
Not After : Jul 27 22:01:10 2026 GMT
Subject: CN=17e985bd19fc591d729305e9b49bba9b82fbd5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:68:eb:83:b9:9b:32:53:fc:87:ef:f1:cb:
d2:d9:65:76:2f:22:37:03:a3:2d:b1:52:d9:ae:e7:
38:d9:82:a6:d4:0a:da:53:2e:16:7a:20:47:93:46:
e4:f3:d4:55:16:ac:26:a6:ef:1d:54:fa:7a:65:fd:
6f:87:3e:2b:e7:2e:bf:21:1e:4f:a9:c1:dc:16:fd:
c2:cb:6e:2f:6a:ab:e0:b6:29:c1:a5:2c:61:f4:1f:
54:e0:b4:23:8c:28:35:f7:2f:d0:3c:55:30:55:08:
0b:69:aa:0d:17:f4:ea:fe:30:60:1c:b9:0a:c2:1a:
c6:87:b8:49:33:f0:6e:57:0a:4d:4a:6b:66:6c:0c:
ba:2a:fd:f2:1c:33:b5:ba:b2:4b:35:87:43:b0:cd:
fc:5a:c6:64:68:2d:e2:39:1e:bb:45:9d:30:f7:ea:
df:d1:a6:50:19:5f:de:94:7b:86:92:d5:55:a6:a7:
b3:1e:78:ea:e5:2f:f5:f4:cd:c5:9e:eb:bd:fb:c6:
16:34:05:b2:a0:78:9f:4f:67:26:59:8a:e8:dd:24:
e5:31:29:a4:a4:a8:f7:c0:ec:22:c9:f3:e4:d0:5b:
9e:30:15:62:50:6e:61:d8:a6:36:e4:3c:64:c3:d3:
d9:3d:1e:36:d4:29:46:2f:d4:b5:c6:30:13:49:12:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E9:85:BD:19:FC:59:1D:72:93:05:E9:B4:9B:BA:9B:82:FB:D5:BD
X509v3 Authority Key Identifier:
keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:84:e7:00:f5:34:4a:89:12:6a:79:73:22:4d:be:f3:a1:
c6:ce:05:9e:57:ff:dc:57:9b:41:8c:7c:88:99:b6:b1:ca:81:
a0:72:36:3b:6a:2f:fb:31:a1:8e:cf:06:86:11:e2:64:a9:0d:
fa:41:1c:0a:16:3b:bb:ce:7d:53:3e:f2:24:47:61:a4:b6:10:
41:d1:4a:c9:ef:7c:e1:0d:5c:ee:2e:1c:b3:1f:b2:d5:1c:3a:
2d:a9:ed:6f:ac:d3:af:b6:6b:b4:c2:a3:00:1c:ab:d8:ac:da:
06:38:82:b7:72:5b:49:ad:46:e1:6d:2d:e4:02:70:e8:29:47:
a3:96:73:a7:22:0a:bb:d2:b3:13:08:76:00:e4:ae:52:a2:8f:
1c:39:bf:0c:4e:0c:e8:5e:e0:c8:66:a4:bc:73:25:ba:e5:b0:
eb:78:32:8a:74:4f:07:e9:63:4e:76:4f:57:02:18:2a:23:d2:
36:af:ca:67:3a:8c:39:15:f4:d3:c7:59:27:a5:9e:58:b9:cd:
1c:a4:8e:40:50:da:72:80:2d:61:f8:33:35:32:99:e2:96:69:
22:a3:69:78:6f:c1:7a:99:d5:cf:53:e2:28:15:b9:ae:ed:68:
25:73:7f:81:1e:11:46:09:70:54:9a:97:bb:ab:f9:b5:f3:7e:
06:ed:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:40:19 2026 by rpki-client