Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: uV9xBcUikWfV8wMjUySpCRw0hph13KRE1dWrLZhfABE=
Subject key identifier: 61:C5:00:02:A8:61:DA:3D:D5:EA:43:0D:C0:1A:4E:0C:FB:6E:0C:28
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 019D39AF7D61A8E37900BDC56991B884D62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 1333
Signing time: Sun 29 Mar 2026 13:01:35 +0000
Manifest this update: Sun 29 Mar 2026 13:01:35 +0000
Manifest next update: Mon 30 Mar 2026 13:01:35 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: oJC3WRRdKB0xMPkDKjQ4Hxf5hp2NC2O64LTCzK/QeGA=)
2: SiNcv5rEzJRHrI-5CcZKLsJRvo8.roa (hash: 9lI/4TESgDTXpDMmIm3+fdqNLdl35fFEfVNTkxEHqEI=)
3: hO6sJjGenFnuYxmlzduMju3aiho.roa (hash: 8vgjyujnab6/ES53s2lNNZgYv3hfnctmecpj5jiZlkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:7d:61:a8:e3:79:00:bd:c5:69:91:b8:84:d6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Mar 29 13:01:35 2026 GMT
Not After : Mar 30 13:01:35 2026 GMT
Subject: CN=61c50002a861da3dd5ea430dc01a4e0cfb6e0c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:66:94:65:55:f7:cc:15:ed:09:63:fe:55:
42:b3:64:47:71:aa:19:8c:f5:9c:a5:ff:21:cc:91:
b9:a8:c0:2c:9f:99:b7:10:b6:e0:bd:90:f0:32:6a:
4e:cc:32:b0:81:87:9d:9f:50:6d:a3:f0:5b:21:b0:
ed:10:72:ec:90:69:c0:d5:17:07:45:fd:9b:40:cd:
78:2f:34:19:a1:47:00:c8:b3:68:bb:53:6b:34:2f:
56:77:02:60:40:f3:d2:71:fe:84:18:d8:e7:b8:b2:
f3:c0:6f:6c:cf:65:19:b2:fd:fb:cc:39:df:6f:56:
ff:ab:c2:36:83:0c:d4:e4:fc:1c:af:9d:14:1b:35:
5d:fd:c0:fb:4b:a7:de:db:9a:e3:1e:6c:95:34:60:
e8:3d:e1:b6:e3:e3:9b:82:8a:0c:f7:bb:0e:cb:63:
36:e1:db:89:33:47:67:3e:ff:72:74:5c:16:d7:23:
fd:6f:60:73:23:f2:1d:ec:c6:36:1f:56:2a:b7:86:
47:c9:f9:80:1c:9d:d6:89:14:d6:be:72:ba:9f:0d:
6d:a2:83:2e:b3:99:92:5c:b9:b8:c8:0c:2c:79:b9:
b7:69:38:eb:4c:40:ed:8b:33:60:94:1b:3b:a8:e9:
90:6b:f3:ee:5f:5b:8a:72:af:a5:16:13:87:c0:d9:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:00:02:A8:61:DA:3D:D5:EA:43:0D:C0:1A:4E:0C:FB:6E:0C:28
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ea:47:c3:94:08:15:34:d0:61:5b:2c:5f:e3:8d:a4:69:7e:
aa:e4:83:5e:ab:23:f2:59:36:94:73:bd:ad:0f:9c:86:b8:d7:
15:e9:df:94:d7:71:b6:af:7f:c7:ec:91:08:85:a7:25:5a:4c:
3a:6c:2b:9d:f2:b5:7c:93:02:0f:0c:c3:47:3e:cf:52:98:eb:
c1:6b:72:3e:e7:97:dc:4c:aa:b6:f1:00:17:42:28:dd:d7:ce:
5f:2c:88:d0:22:91:26:4b:a1:46:84:48:be:2f:ff:63:54:92:
a7:11:16:53:bc:58:d8:82:d9:a6:6f:39:70:8a:60:75:78:51:
bf:b5:99:f4:73:f8:ef:7b:80:4b:a8:04:85:1d:95:89:ea:00:
f7:c5:32:2a:f2:f2:15:54:a8:c7:75:3a:1c:49:53:b7:92:99:
03:8c:aa:b3:b5:da:05:5e:2a:10:4f:dd:6f:a6:4b:e6:98:2a:
8c:bb:29:8f:4b:0d:bc:ef:0e:4f:b0:50:d2:d1:b8:06:74:4b:
c5:f8:21:d9:89:08:36:e2:b7:54:98:4a:13:00:82:4d:7d:7e:
04:09:69:21:1c:0d:38:d3:28:39:66:1f:e0:1d:57:ba:e1:36:
af:e6:ef:30:6a:bb:3a:65:c0:20:8f:34:ce:64:57:4e:2d:e7:
86:5e:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:29:41 2026 by rpki-client