Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
File: BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft (raw, json)
Hash identifier: XcDf7FfTcOOTCKzuRjNU6Onz7yGmC8z0aEuYhzK8wGg=
Subject key identifier: 88:72:62:3C:AB:2C:66:21:01:E2:B6:43:DF:40:AA:02:76:84:BA:14
Authority key identifier: 05:8C:12:14:07:C2:48:16:BD:76:C6:8C:0A:BC:33:26:E1:27:1C:20
Certificate issuer: /CN=058c121407c24816bd76c68c0abc3326e1271c20
Certificate serial: 01A0404EA78E19F9BB59CBD1082C7099D1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYwSFAfCSBa9dsaMCrwzJuEnHCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:31 +0000
Manifest this update: Wed 26 Aug 2026 23:01:31 +0000
Manifest next update: Thu 27 Aug 2026 23:01:31 +0000
Files and hashes: 1: BYwSFAfCSBa9dsaMCrwzJuEnHCA.crl (hash: u0giABoRH/Eq1w6IjI2QGdXk1HJQvYhRt2PvoUk4Gvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYwSFAfCSBa9dsaMCrwzJuEnHCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:a7:8e:19:f9:bb:59:cb:d1:08:2c:70:99:d1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058c121407c24816bd76c68c0abc3326e1271c20
Validity
Not Before: Aug 26 23:01:31 2026 GMT
Not After : Aug 27 23:01:31 2026 GMT
Subject: CN=8872623cab2c662101e2b643df40aa027684ba14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d9:c5:d5:e7:08:8f:40:15:8b:11:74:1f:0a:
48:e4:7c:6d:74:b6:99:c6:82:09:55:72:7f:94:e0:
55:b7:9a:b7:9d:5b:64:0a:78:bf:df:6c:3c:a1:56:
63:58:54:64:e8:75:9b:e1:0d:2e:df:f1:ed:c7:a2:
2b:51:41:fc:4b:ce:02:e8:59:37:33:e7:c9:eb:ce:
8a:9e:e0:f1:82:47:99:cc:da:50:aa:4a:3f:25:27:
1f:c9:3a:42:90:11:f9:43:2f:27:45:60:6f:be:30:
f8:cd:da:6d:04:00:3e:29:8e:e5:c1:fa:37:d0:8c:
80:45:7f:3e:54:53:4b:3a:b0:6a:0c:c7:05:de:31:
78:23:9c:c9:e9:9a:73:46:64:6e:a7:61:c7:31:f0:
53:2e:57:85:5d:e4:fe:c4:12:b8:ae:dd:b0:20:cb:
e8:2c:b7:66:27:a9:be:58:80:72:d1:3b:63:0f:af:
55:bc:d3:ff:7f:e8:5f:46:e9:f7:44:f8:ea:d3:e8:
cc:f3:a0:69:c7:33:84:eb:b3:c7:2b:c0:be:87:1d:
51:ed:89:8f:f2:3e:76:69:2f:12:23:37:be:b1:5c:
da:38:53:fa:9a:02:21:57:42:c6:6e:7a:e6:a9:ca:
84:92:b1:58:ed:1b:e4:ba:01:38:b2:22:c8:d6:36:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:72:62:3C:AB:2C:66:21:01:E2:B6:43:DF:40:AA:02:76:84:BA:14
X509v3 Authority Key Identifier:
keyid:05:8C:12:14:07:C2:48:16:BD:76:C6:8C:0A:BC:33:26:E1:27:1C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYwSFAfCSBa9dsaMCrwzJuEnHCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ad:b2:1a:79:0c:10:16:0c:b5:7b:6b:f7:cc:24:ee:b3:23:
89:f7:9f:a5:58:50:8e:df:cf:47:39:3b:d4:10:ae:ab:18:95:
cf:ed:57:4a:58:f8:68:d3:e0:4f:fd:75:a4:45:64:d0:bc:f9:
92:4f:e7:1d:6c:f1:3a:9d:63:ff:83:1b:b8:a9:8e:bf:fa:78:
a4:a9:7e:0b:28:f8:d2:1a:ca:07:a4:8b:ed:38:c1:87:ae:fd:
d7:ce:67:54:c9:53:37:44:14:39:d8:8c:7c:87:b6:55:f5:f3:
93:26:d4:21:48:e9:2a:09:64:10:15:be:65:0b:ea:d2:48:0f:
a3:bb:e9:a6:84:28:39:02:17:9f:0e:72:ee:01:b7:60:25:49:
28:b0:4c:04:bf:4f:be:ee:f9:af:ea:e7:b6:99:1e:aa:78:2d:
e4:57:4f:cb:71:21:ba:93:94:bc:61:0c:c7:46:bf:d5:29:43:
43:15:4f:aa:05:c5:51:7e:2a:b5:0b:1e:21:59:c6:33:fe:48:
bb:c4:b2:30:18:75:3d:93:87:08:1f:2a:d1:41:ee:bc:ba:68:
67:79:c1:ad:76:f8:26:12:b2:89:80:42:d9:f7:90:57:b2:66:
de:2d:14:cf:09:f8:68:eb:16:32:d4:f4:c9:ac:c6:b1:b2:3f:
1b:59:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:22:44 2026 by rpki-client