Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: aKQ7WFMNFpvJkJryG+6Co6gICcil6XGYIblS1SWSylk=
Subject key identifier: A5:5B:92:F6:41:29:34:C6:4C:1B:C6:0D:B8:92:7B:4D:32:AB:9A:4F
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 019E3072EB63DBC0EDD8C089CB0ADA3DDFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 0D7B
Signing time: Sat 16 May 2026 11:01:38 +0000
Manifest this update: Sat 16 May 2026 11:01:38 +0000
Manifest next update: Sun 17 May 2026 11:01:38 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: teeDxrZLEQV7Bxlpvk2gYufLwucun4YkLoL4xD74fv4=)
2: h1o3bXxvRbQ7S4dxypgO58cC3Qo.roa (hash: oJ/WKinJTQucsbv9/MhIQmZJikDgqhcaJReTCYd19W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:eb:63:db:c0:ed:d8:c0:89:cb:0a:da:3d:df:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: May 16 11:01:38 2026 GMT
Not After : May 17 11:01:38 2026 GMT
Subject: CN=a55b92f6412934c64c1bc60db8927b4d32ab9a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:1b:7a:0e:68:a1:77:26:22:de:4e:2e:05:
59:45:e5:9c:2e:ee:60:a6:db:d2:30:9d:44:d7:69:
df:83:f8:a5:7f:86:8b:28:9e:dd:81:6b:e1:c8:37:
71:3a:54:67:15:08:11:11:77:70:ed:65:ac:16:dc:
e2:7a:da:36:57:d3:b3:9e:5e:7a:67:e9:34:d8:0d:
c1:3c:b1:21:d1:1a:4f:f9:6f:d1:1c:d0:0e:1c:88:
fd:31:e9:fa:27:4e:b3:a0:71:5a:a4:4b:bc:3e:96:
07:26:81:f1:89:19:56:38:bc:0d:cd:37:ee:e3:90:
7b:15:13:dd:0e:4c:b8:02:b8:ed:bd:7b:61:8d:86:
7b:21:f2:a6:3f:ff:de:05:6d:6c:98:cc:1e:58:ce:
00:ee:65:e3:a8:4b:e7:20:45:a6:58:96:05:be:8e:
c5:00:26:c8:69:53:bb:8c:90:ad:48:d2:0f:d9:ff:
8e:39:b0:c5:6a:f4:1c:c2:a1:7e:81:78:1a:6b:4e:
e1:d5:a3:fe:81:87:4f:e6:47:d1:01:8c:b6:2c:52:
fb:1d:20:fa:f1:72:23:4f:d9:44:8a:01:fd:9a:a5:
2d:de:6d:57:47:74:f6:91:4f:51:8f:1b:68:b0:0b:
b7:80:a2:be:34:c8:a2:01:84:92:87:f0:4a:58:00:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:92:F6:41:29:34:C6:4C:1B:C6:0D:B8:92:7B:4D:32:AB:9A:4F
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e0:e0:d1:6c:7c:f8:2f:5c:89:ec:5e:a4:5c:4c:09:38:f0:
06:d6:9a:eb:cb:e3:0b:4a:bb:ee:8a:1e:8f:86:40:e5:61:62:
4f:73:c6:66:6b:19:df:52:5c:e3:70:54:84:b4:37:b2:2d:71:
d7:0c:82:80:e7:17:22:90:d6:f9:9a:05:f1:f1:62:17:80:76:
36:b3:b1:c4:a9:2b:84:99:09:5f:39:bd:b4:47:16:f2:60:e9:
b7:ea:11:3b:13:f4:75:cd:07:ea:2e:c1:94:83:65:a2:ab:54:
19:b0:39:f4:88:9e:fa:8d:c2:b7:ee:63:d3:70:ad:d1:4f:ad:
4a:a0:73:ad:51:07:e9:39:73:65:c9:55:94:60:e6:38:f3:66:
66:db:24:06:d3:73:a5:c1:e8:a4:b7:73:e8:81:eb:b6:aa:03:
9a:f4:64:9f:e3:54:c2:88:13:81:3c:a8:91:b7:fa:fa:14:c7:
21:5a:9c:00:47:ad:5c:b2:0a:d2:fb:4a:c4:5c:d4:ab:3b:9e:
4a:a0:02:3d:89:7c:70:a3:a4:94:e7:d2:00:2d:40:e9:d6:53:
4d:7b:e4:49:6b:34:e4:71:70:2f:3c:44:3b:1d:5a:bd:86:1f:
a6:47:14:31:76:f3:65:f9:2b:74:82:96:68:76:78:91:57:14:
8a:95:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:34 2026 by rpki-client