Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier: gkNQLej7QPC8eNvv6wQNJrUiyyu4yMJQCPLRySR0KeY=
Subject key identifier: 59:D2:8B:D4:D5:7A:F5:11:20:B1:D0:2E:62:EA:65:D2:D0:C8:D8:E7
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 019D39E55819B0E5E6B17E9E50A72103B2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 14:00:24 +0000
Manifest this update: Sun 29 Mar 2026 14:00:24 +0000
Manifest next update: Mon 30 Mar 2026 14:00:24 +0000
Files and hashes: 1: JfKoDtrhJ-i-G9aVy_3EyZTHhdQ.roa (hash: YvPO7VlYOdBTaEg9nBYo6BImKnaR242b+DsMusahNWM=)
2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: YDf0wi2ydlf8eLO6mMO0Xq65HLVhYDEnLoX3OeAUiwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:58:19:b0:e5:e6:b1:7e:9e:50:a7:21:03:b2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Mar 29 14:00:24 2026 GMT
Not After : Mar 30 14:00:24 2026 GMT
Subject: CN=59d28bd4d57af51120b1d02e62ea65d2d0c8d8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:37:d4:55:41:17:52:0e:fd:ff:c2:80:04:
32:df:34:f8:99:ae:eb:2a:68:e9:03:01:92:a7:a7:
22:6e:94:fe:69:8a:0e:6c:a1:49:00:69:79:fb:4c:
a5:dc:ba:33:4f:bd:0b:13:87:24:de:5d:d2:50:5c:
b5:1c:d2:e5:e5:15:71:05:fe:d5:3f:19:a8:09:de:
25:6d:00:0f:fe:d9:78:4b:8b:bd:eb:c6:66:f4:01:
59:ba:e3:b4:63:c2:52:ba:ac:02:34:66:ec:53:74:
27:e9:4f:58:66:ce:a3:18:2c:3e:20:3f:df:36:88:
7b:dc:34:7a:4d:ae:54:5e:f2:e4:7b:4e:27:bf:07:
9f:4e:d2:94:ba:94:5b:6e:a6:5c:9f:a2:fc:87:07:
a3:39:f2:e4:54:27:76:cd:a4:04:64:cf:68:8d:7f:
98:12:b8:25:e8:b5:cc:5e:4d:3d:d9:d1:b5:f7:e4:
ba:8e:80:05:09:d5:fe:fa:f7:d4:e9:e3:7a:7c:66:
e1:06:03:ed:18:06:6d:46:cc:fd:2e:ce:16:08:60:
6f:08:e8:a1:73:ad:3c:f4:b7:6d:2f:15:a6:2e:5d:
4e:41:f8:4a:b0:00:04:56:3c:e6:3e:42:64:23:56:
93:8d:e8:3e:14:12:4f:f4:db:03:e9:d3:54:39:70:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D2:8B:D4:D5:7A:F5:11:20:B1:D0:2E:62:EA:65:D2:D0:C8:D8:E7
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:92:f4:8d:07:60:b1:4f:22:9e:59:76:20:95:89:d7:8c:d4:
8a:a6:08:00:dd:eb:35:59:aa:e7:24:9a:ae:ba:d1:94:62:cc:
cd:a0:d0:08:8a:34:c2:7a:53:5a:eb:85:c7:e2:94:e8:58:b9:
5a:e5:bb:7b:d3:77:3c:ee:e4:f6:93:c6:53:2f:3d:46:42:96:
01:9c:bb:da:df:a7:78:48:b6:48:ae:1a:a0:40:50:cb:09:24:
8c:7b:c2:df:7d:b3:76:17:a1:7d:d2:d0:6f:5d:fe:03:f4:c3:
f5:8e:a0:46:1f:af:28:53:25:a2:40:b4:39:8c:5d:62:95:5c:
9d:9c:e4:25:af:69:95:34:09:2d:b9:cc:e0:db:c1:15:14:92:
ca:f3:fe:25:0e:8a:a4:41:64:0f:d0:60:24:d3:96:0a:0d:88:
05:6d:d6:79:3f:38:17:ef:3c:74:7b:83:23:63:57:3b:81:e0:
9a:42:b8:14:be:50:d9:a7:24:f4:38:18:12:3d:cb:82:bb:69:
ef:c8:27:89:77:45:b5:35:87:0b:3f:c0:a9:ac:af:06:36:2c:
29:aa:3b:13:66:fd:40:43:d4:18:05:60:c9:75:88:5a:12:92:
38:00:f6:b2:f9:ee:e4:e1:bb:41:97:67:ab:d8:01:75:5b:38:
99:d0:f6:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055VgZsOXmsX6eUKchA7KrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5
YWE5YmEwHhcNMjYwMzI5MTQwMDI0WhcNMjYwMzMwMTQwMDI0WjAzMTEwLwYDVQQD
Eyg1OWQyOGJkNGQ1N2FmNTExMjBiMWQwMmU2MmVhNjVkMmQwYzhkOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomI31FVBF1IO/f/CgAQy3zT4ma7r
KmjpAwGSp6cibpT+aYoObKFJAGl5+0yl3LozT70LE4ck3l3SUFy1HNLl5RVxBf7V
PxmoCd4lbQAP/tl4S4u968Zm9AFZuuO0Y8JSuqwCNGbsU3Qn6U9YZs6jGCw+ID/f
Noh73DR6Ta5UXvLke04nvwefTtKUupRbbqZcn6L8hwejOfLkVCd2zaQEZM9ojX+Y
Ergl6LXMXk092dG19+S6joAFCdX++vfU6eN6fGbhBgPtGAZtRsz9Ls4WCGBvCOih
c6089LdtLxWmLl1OQfhKsAAEVjzmPkJkI1aTjeg+FBJP9NsD6dNUOXCbJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnSi9TVevURILHQLmLqZdLQyNjnMB8GA1UdIwQY
MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt
NDNkYzJiNWVlYjViLzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi
LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpL0jQdg
sU8inll2IJWJ14zUiqYIAN3rNVmq5ySarrrRlGLMzaDQCIo0wnpTWuuFx+KU6Fi5
WuW7e9N3PO7k9pPGUy89RkKWAZy72t+neEi2SK4aoEBQywkkjHvC332zdhehfdLQ
b13+A/TD9Y6gRh+vKFMlokC0OYxdYpVcnZzkJa9plTQJLbnM4NvBFRSSyvP+JQ6K
pEFkD9BgJNOWCg2IBW3WeT84F+88dHuDI2NXO4HgmkK4FL5Q2ack9DgYEj3Lgrtp
78gniXdFtTWHCz/AqayvBjYsKao7E2b9QEPUGAVgyXWIWhKSOAD2svnu5OG7QZdn
q9gBdVs4mdD26A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:23 2026 by rpki-client