Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: iFYzG11ApFPoVlU6F2binZAEKSuiSi/OyyGgG1hSuN8=
Subject key identifier: 20:BC:2C:75:70:0A:4B:33:3A:F5:D0:DF:E2:53:2F:93:17:08:D5:E4
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 019F1830D899CD996C0D7B8D5FE1CA110AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 0DF3
Signing time: Tue 30 Jun 2026 11:01:22 +0000
Manifest this update: Tue 30 Jun 2026 11:01:22 +0000
Manifest next update: Wed 01 Jul 2026 11:01:22 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: Cwasf/Gyoc8NOPUP9ZzOz2KPRzjO06NkCl/8q4h9XGQ=)
2: h1o3bXxvRbQ7S4dxypgO58cC3Qo.roa (hash: oJ/WKinJTQucsbv9/MhIQmZJikDgqhcaJReTCYd19W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:d8:99:cd:99:6c:0d:7b:8d:5f:e1:ca:11:0a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Jun 30 11:01:22 2026 GMT
Not After : Jul 1 11:01:22 2026 GMT
Subject: CN=20bc2c75700a4b333af5d0dfe2532f931708d5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:66:77:ce:7b:74:28:d4:cc:76:3b:85:84:
9e:55:60:4d:1d:e8:e8:99:f5:ed:49:fb:40:1a:c3:
fe:43:b4:01:2e:0f:51:bc:e0:94:6c:8a:6d:aa:17:
40:9c:87:72:67:ee:d8:d7:5a:75:2f:1f:c8:19:4a:
b0:f3:a4:df:47:46:8e:06:99:37:fe:56:93:3d:52:
c7:6f:c9:11:69:6f:50:3e:77:ac:1d:c8:d0:a3:49:
c4:ad:90:96:09:6a:15:08:8e:09:2a:53:7a:eb:da:
be:e1:c7:c8:88:c9:e5:21:e4:db:4b:ba:59:b5:0e:
5d:f1:c1:93:79:d8:2b:99:8a:f6:c8:a7:c2:de:ff:
27:04:d0:c3:ff:0f:0d:c4:a0:4f:be:6b:dc:b9:cf:
4d:c2:d6:68:b4:0c:8d:cc:92:b8:47:e6:df:31:b9:
d7:a1:71:2f:22:b4:eb:28:9f:e7:ef:7b:0d:e2:76:
fb:3f:dc:bd:6b:1d:6c:26:35:fb:71:0e:52:7d:a3:
6d:7a:2f:4c:f0:67:a0:d3:62:cf:ad:4b:7e:d5:57:
62:ae:01:da:b0:ed:d2:e3:7f:45:e8:5f:ec:75:6b:
ce:e5:04:78:cc:5f:9a:6d:fe:96:7b:c9:e7:38:88:
82:9b:1f:a2:58:18:22:58:e0:4c:e9:fe:db:02:ff:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BC:2C:75:70:0A:4B:33:3A:F5:D0:DF:E2:53:2F:93:17:08:D5:E4
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:97:9f:28:f1:0d:dc:1c:e9:8b:9b:c7:bf:36:8e:c9:76:f2:
38:9a:6e:e7:4a:b2:bf:eb:d8:6a:61:b8:c7:5f:a2:9c:fd:af:
a0:c0:f6:2e:f5:07:c9:f7:a7:c2:48:3d:f9:e8:68:a2:1f:47:
07:57:df:22:1b:92:a6:6e:bb:07:bc:45:70:b9:89:7b:20:be:
6f:1e:09:63:47:3f:0f:e0:34:d2:34:a8:88:e3:4d:17:7a:04:
17:11:7f:36:1b:da:03:3e:bd:a6:12:56:e5:3f:e4:64:f9:db:
3c:48:c3:d2:83:07:2d:23:99:e6:51:01:08:70:c7:25:83:d6:
e0:21:df:2c:c1:c8:11:7d:71:0e:1c:ab:41:4f:ae:d6:de:1b:
36:ad:12:91:72:ec:48:06:c7:c5:2b:45:87:8c:86:1d:86:f2:
51:e5:c8:00:73:df:28:80:8b:61:ce:42:98:79:61:f9:98:be:
5f:28:a5:76:d2:6b:02:16:02:a3:4d:25:eb:46:68:23:26:96:
f0:29:88:15:e2:71:b8:da:79:39:9d:d2:e2:77:40:6a:77:71:
d8:ab:89:30:78:dc:10:f1:b6:4d:f5:bf:fa:ec:00:e6:62:68:
1e:43:d3:3a:b6:4b:ca:5e:76:9e:aa:3e:67:de:27:fc:a3:f1:
82:02:f4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:20 2026 by rpki-client