Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File: _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier: yEz1P1bKrz9UjTbyVm+YYa+lNQIKV0KlSHvnTYLQApA=
Subject key identifier: 34:EA:94:49:7D:C6:EE:62:11:CF:45:60:C8:EF:61:25:F0:62:70:6E
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial: 01A175B9BDCBE55B1DD948EEE77699918B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 01:01:09 +0000
Manifest this update: Mon 26 Oct 2026 01:01:09 +0000
Manifest next update: Tue 27 Oct 2026 01:01:09 +0000
Files and hashes: 1: W51aSCH5iLe_5vEXYpA2X4F2HE8.roa (hash: ZbZbQYSFnkBpfEvsfFoB6giW5sjyWzNWyKbHcpK0sVE=)
2: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: mzU9H10jLQhAvel2XbFQLH+1mtTWZdqnDH2HJlJABHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:bd:cb:e5:5b:1d:d9:48:ee:e7:76:99:91:8b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Validity
Not Before: Oct 26 01:01:09 2026 GMT
Not After : Oct 27 01:01:09 2026 GMT
Subject: CN=34ea94497dc6ee6211cf4560c8ef6125f062706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:ed:c0:90:e6:79:70:fc:66:04:67:17:db:
48:9b:ef:a2:12:6c:2c:27:39:57:6f:58:22:c0:23:
a5:b3:0d:ec:c5:1d:8f:bb:ef:c4:eb:93:06:27:6c:
95:dd:93:d6:73:ae:1f:dc:2b:71:ea:e8:83:8e:01:
45:2b:ce:e9:7f:63:4f:4d:04:81:aa:dd:bf:06:20:
27:20:96:64:7c:46:de:7b:94:46:9a:ee:5e:ce:ec:
01:fc:17:4d:a6:40:fb:a3:b9:64:50:42:36:b2:27:
7b:80:69:e9:8d:65:08:03:ab:cd:bd:a2:93:e9:e2:
4f:78:ae:ca:75:36:07:1a:22:12:36:33:55:dc:42:
59:52:c1:c5:d6:ab:4b:f9:10:db:75:05:a9:04:e4:
8e:43:aa:04:54:e4:2f:b9:f1:22:ae:b7:58:61:60:
dc:55:3c:ee:3d:38:3a:e2:f6:8e:de:f1:2b:07:11:
b9:4a:9b:90:15:04:2c:cb:54:95:e4:86:d6:14:ca:
2f:b2:ce:dd:c3:b2:b3:03:e5:2a:99:99:a4:67:d7:
3c:62:e5:fb:0c:87:df:9a:2a:6b:86:2c:e4:13:58:
80:6f:b0:3d:14:85:0c:81:2c:16:2b:6f:5a:a3:83:
39:24:55:1e:b0:83:45:fa:6c:62:d4:4b:47:1f:19:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EA:94:49:7D:C6:EE:62:11:CF:45:60:C8:EF:61:25:F0:62:70:6E
X509v3 Authority Key Identifier:
keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:02:8c:7f:a6:7c:38:06:c3:10:ef:bf:f5:d9:62:ff:de:f6:
a1:2e:4b:14:22:9d:a4:84:d5:c2:95:2e:b9:00:4c:61:f7:16:
4e:6e:fa:76:02:64:be:a3:0a:84:12:3d:54:9a:58:59:ee:8b:
60:4c:88:29:b8:19:32:36:43:63:23:e0:a3:f8:b4:fa:19:91:
4c:7e:3e:fb:1b:8b:bd:9e:78:bc:a9:fb:65:c3:db:b8:03:ea:
7b:94:f9:a8:92:0e:17:52:16:d9:24:45:2a:38:79:a8:75:38:
83:20:5f:c3:17:ef:ae:2b:e6:05:cb:07:d3:16:eb:5d:c0:20:
b6:8f:61:4b:02:54:83:cf:4e:fa:f2:17:b6:0e:3d:8d:03:4d:
48:13:d3:42:6b:54:c9:51:23:a7:32:71:3a:98:06:94:c4:b1:
ea:3b:c3:3c:08:35:2e:78:29:de:35:d8:8e:cd:ad:65:2b:05:
ef:c7:d6:d2:9a:ea:e6:1f:a5:f0:d6:3f:46:b1:07:e5:6b:56:
7c:69:c0:be:0d:1e:96:ee:8f:4c:c2:ab:53:29:06:db:51:25:
33:af:23:67:fa:03:8a:5f:6d:e3:3c:fe:3b:1e:5c:9b:ae:94:
69:97:89:2e:9c:75:52:81:5f:33:a8:5e:ba:43:51:8c:9d:ba:
d6:fb:0c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:38 2026 by rpki-client