Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
File: BkYy7w6lXgDeU3azwIR2mrZykew.mft (raw, json)
Hash identifier: SVV6PPiQvvmS6nApAbHXTREimy1wiqpBCTaEfyGNEHc=
Subject key identifier: 1B:20:D9:4C:5D:38:E9:F2:9D:35:E3:94:DE:F0:EA:3F:1B:69:3E:D4
Authority key identifier: 06:46:32:EF:0E:A5:5E:00:DE:53:76:B3:C0:84:76:9A:B6:72:91:EC
Certificate issuer: /CN=064632ef0ea55e00de5376b3c084769ab67291ec
Certificate serial: 01A03F3B90E25143BC017BD05D23F1337775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
Manifest number: 0157
Signing time: Wed 26 Aug 2026 18:01:03 +0000
Manifest this update: Wed 26 Aug 2026 18:01:03 +0000
Manifest next update: Thu 27 Aug 2026 18:01:03 +0000
Files and hashes: 1: BkYy7w6lXgDeU3azwIR2mrZykew.crl (hash: USuNAI5GqAHBc69P9v1N4fBMzWtcvz8M7xoRnFqmWDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:90:e2:51:43:bc:01:7b:d0:5d:23:f1:33:77:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064632ef0ea55e00de5376b3c084769ab67291ec
Validity
Not Before: Aug 26 18:01:03 2026 GMT
Not After : Aug 27 18:01:03 2026 GMT
Subject: CN=1b20d94c5d38e9f29d35e394def0ea3f1b693ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:e6:6f:3c:26:89:2c:57:5b:38:a1:2c:3b:
da:fb:46:ef:4b:23:9c:43:0d:e0:1e:55:65:3b:97:
68:65:77:05:28:10:d3:ed:38:a0:08:1e:cf:72:00:
eb:35:fe:c2:5a:32:0d:cc:b5:42:b8:f7:e5:3a:4e:
ec:1a:d1:d6:c1:c8:49:46:ee:c9:a0:db:e4:a6:10:
9f:25:93:6f:35:07:04:75:7d:93:de:22:c6:16:89:
66:ff:9d:ab:be:59:62:6e:fb:d3:5d:81:a7:d1:e5:
00:7f:c7:9f:19:48:06:2b:4c:36:ae:7e:4f:44:70:
d5:9d:1a:a4:76:90:a0:2f:e0:35:6d:4c:ae:07:89:
92:26:da:5b:88:6f:a1:1b:e3:94:d7:2f:df:58:50:
71:77:77:3c:97:ce:88:cb:84:02:f2:eb:d3:43:9d:
ee:4a:88:e3:64:bd:85:5b:34:b5:73:a2:b0:58:ce:
6c:07:38:f4:6d:d7:24:5a:98:6c:34:a0:d3:7b:ac:
8c:56:6f:e7:5d:0d:3d:10:e6:0c:e5:b8:68:1d:f6:
3c:39:28:4d:3f:1c:a1:3d:91:04:a0:ea:84:ac:9b:
d7:3d:e7:d4:7e:55:9b:ee:5f:a5:8b:eb:a2:d7:3a:
cb:b8:cb:6f:28:82:5c:3c:bc:30:ed:29:2a:a5:2a:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:20:D9:4C:5D:38:E9:F2:9D:35:E3:94:DE:F0:EA:3F:1B:69:3E:D4
X509v3 Authority Key Identifier:
keyid:06:46:32:EF:0E:A5:5E:00:DE:53:76:B3:C0:84:76:9A:B6:72:91:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f0:e4:ef:b8:2f:44:5a:11:a3:6e:a0:8b:ba:70:de:a3:2d:
33:6d:6a:a9:24:b6:a6:a4:7d:be:58:00:6a:d6:05:b2:34:40:
e4:1e:cf:7a:5d:4c:50:75:95:60:32:34:92:f9:69:25:5b:41:
b8:be:7b:64:22:ba:db:84:10:13:5e:0b:18:8f:fc:41:fc:15:
49:b2:f7:32:39:02:be:c5:b8:b8:c0:d6:45:39:d9:34:1d:e5:
5d:54:6e:91:37:82:b7:78:7a:4a:43:66:62:05:85:85:ff:54:
e9:7c:56:90:53:4f:bd:55:57:7b:ae:44:38:5b:50:33:5b:7c:
75:a8:b2:2b:99:46:23:3f:ca:e6:4d:2a:3d:c1:e8:ed:0c:7e:
f3:a1:39:72:08:ee:49:98:65:2e:fb:87:f4:3f:b8:b7:fa:46:
35:5e:77:cc:57:5a:89:3d:f1:1d:60:a5:57:04:66:74:5f:c4:
54:75:9c:61:06:b8:86:ee:1e:83:cb:43:8a:fa:66:fd:30:e8:
3f:c8:ae:fd:dd:6e:b7:79:a6:e2:6b:49:da:55:0c:70:70:13:
09:1f:fc:23:53:a0:0c:8b:7a:91:f2:77:a6:b0:f7:55:38:b3:
5f:ef:fc:26:c1:57:e4:96:fb:40:14:a6:9a:e4:a1:b9:51:f6:
83:69:63:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:22 2026 by rpki-client