Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File: bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier: 4WtN++PKBdb6oU81fH450cxFI0Z1M2d+HAV1FJlDdNw=
Subject key identifier: 34:4F:BE:28:60:F7:19:F7:AE:E7:1B:9F:3A:3D:54:14:CC:A2:F5:1A
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial: 019D382DFD590DBEDC991DBD22BC7D64F314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number: 12E5
Signing time: Sun 29 Mar 2026 06:00:31 +0000
Manifest this update: Sun 29 Mar 2026 06:00:31 +0000
Manifest next update: Mon 30 Mar 2026 06:00:31 +0000
Files and hashes: 1: Nppx-_HytezaO7OOnUHi3r0aYuY.roa (hash: EooK0hyWHN5rfWystpxx1iBOSlykoNCoHvC6SpxnsDQ=)
2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: dn0rnpv4drqQvrcIB+3LVZkD9q0G15DelhtC5AnZJiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fd:59:0d:be:dc:99:1d:bd:22:bc:7d:64:f3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Validity
Not Before: Mar 29 06:00:31 2026 GMT
Not After : Mar 30 06:00:31 2026 GMT
Subject: CN=344fbe2860f719f7aee71b9f3a3d5414cca2f51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:76:55:07:41:38:60:3d:bf:f8:72:62:82:
20:15:4b:4c:a3:c8:d8:41:29:5b:db:54:5d:3f:3a:
42:f8:d0:44:d4:69:cc:4c:98:90:ca:6c:0f:c7:13:
f8:97:9a:ef:cf:fa:0c:c0:7b:e0:c6:46:a3:b7:27:
f2:da:c9:42:fd:4d:c4:4a:f8:ac:a2:fa:33:d3:0c:
6a:c4:dd:34:64:be:d5:28:44:7b:d9:1f:f4:da:8b:
61:4d:b0:cc:03:5b:dc:f8:9e:73:f4:9b:7e:26:33:
c0:29:21:f6:7f:aa:e2:19:01:00:d2:6b:47:4b:6e:
e2:0a:40:19:b3:0c:65:53:67:0d:65:8a:c3:21:cd:
4b:70:6d:aa:c0:a8:0f:1c:02:93:7c:1e:bf:43:57:
19:a6:c6:66:95:1c:01:e6:41:54:15:79:9c:b0:70:
6b:70:44:c9:48:46:21:36:38:15:98:64:dc:d4:db:
53:8f:3b:cd:d0:06:33:2c:ad:3e:63:ec:4d:04:ad:
72:4e:1b:38:48:04:d1:4a:db:04:81:db:d0:cd:70:
84:e1:03:df:e0:dd:ce:19:15:05:97:c3:ea:be:58:
4b:42:92:9e:d9:f1:dc:ce:28:6d:ff:71:a2:e3:bf:
69:4f:5a:07:42:42:10:d0:4e:1a:54:67:d3:66:c4:
0f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:BE:28:60:F7:19:F7:AE:E7:1B:9F:3A:3D:54:14:CC:A2:F5:1A
X509v3 Authority Key Identifier:
keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:89:6e:29:74:44:97:58:7b:1a:82:04:4b:7e:f1:ef:21:71:
68:29:ee:6a:4d:b8:2b:3c:fd:cb:dc:08:5d:05:f9:3f:7d:bf:
c1:ba:e7:b1:32:da:85:aa:56:87:e2:36:1f:0f:85:53:70:58:
95:39:97:9c:0c:af:b7:f9:78:3d:84:8e:d3:1c:56:5f:50:0c:
50:56:1f:4a:07:d6:2e:85:81:85:4c:65:bb:53:92:e7:a3:28:
41:cb:ba:d1:ed:54:8d:13:ab:3c:e6:56:fe:75:41:7b:a6:18:
be:21:04:82:10:f1:9b:c2:ea:12:7d:4a:8c:78:ab:8d:80:38:
52:e8:cb:7e:9f:41:0e:51:15:13:a5:59:07:38:ba:bd:69:d2:
7d:5e:c5:88:01:67:c7:73:e5:8e:d5:b8:a4:8d:83:eb:68:09:
f5:a5:f6:32:b7:a0:f3:da:cc:ac:5b:79:40:79:ec:ee:73:ce:
93:b7:6a:b0:98:df:09:36:1d:79:ab:9a:dd:1f:17:02:ed:03:
bb:3e:14:df:77:33:ce:e1:ef:f3:92:8a:91:1b:af:50:41:96:
0a:05:d2:ec:d4:38:0a:e2:25:c3:a9:b3:53:83:58:f4:0e:2d:
29:93:ea:aa:20:ed:2c:e9:61:de:42:38:f4:9e:0d:2d:a7:79:
0b:8b:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:40 2026 by rpki-client