Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: oXQo+vXGEYqyiyIZVbZYg+jPrJNovpINl1d6ztDoj70=
Subject key identifier: 28:FA:90:8F:88:EC:2B:77:44:3A:95:B0:2C:07:1F:8D:63:F2:23:DC
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019E88A303CFF4BE2851EF18CF55A18227C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 149D
Signing time: Tue 02 Jun 2026 14:00:45 +0000
Manifest this update: Tue 02 Jun 2026 14:00:45 +0000
Manifest next update: Wed 03 Jun 2026 14:00:45 +0000
Files and hashes: 1: IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa (hash: o2L90zF16GoErXoUlB+6z8RKE6i50ZTOjxl70b94zb4=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: F1ZfQhik086M2GlSMRwDnQv2QTmQAgCsyOkcYZPMFqM=)
3: hwijRhZ95zu2fzBu0boOesOms6U.roa (hash: HDiWzBkayEcGgyJWBbNXaqDrPFIhI/bMMXg8al08Sh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:a3:03:cf:f4:be:28:51:ef:18:cf:55:a1:82:27:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Jun 2 14:00:45 2026 GMT
Not After : Jun 3 14:00:45 2026 GMT
Subject: CN=28fa908f88ec2b77443a95b02c071f8d63f223dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1b:5e:8d:d1:2d:76:1e:92:cb:f1:8c:5d:aa:
f9:fd:45:44:4d:7c:22:fa:a4:c0:22:ad:a5:25:c6:
06:79:05:bf:b4:b9:e3:12:38:c3:90:70:d3:89:5b:
9e:02:23:50:b4:c2:7b:e8:65:2c:0b:89:6c:db:d0:
f1:97:7d:20:0a:ff:17:35:58:1b:b0:4f:fe:4e:28:
69:80:c3:b0:c4:be:af:30:6f:d2:8d:f5:bf:7f:df:
ac:9a:07:8d:d4:e5:66:c4:dd:c0:60:83:4f:6f:6e:
d1:58:bd:93:86:87:05:06:07:04:87:f2:06:60:8a:
0b:6b:a3:6f:24:31:1b:4e:ae:96:5b:7f:8f:b5:f9:
4e:ca:02:af:b6:28:dc:14:12:da:d3:b7:35:73:27:
f2:88:af:ef:56:9f:ae:d4:c9:5b:af:79:2c:c3:32:
73:e5:74:69:4c:4f:50:bc:3d:29:b7:22:4f:e8:e7:
82:22:ed:4c:ba:a3:0c:d2:ba:65:47:e3:84:49:65:
f2:eb:13:1f:aa:4e:a2:27:82:47:02:6f:cd:a1:1d:
4f:90:63:3b:2b:f8:bc:02:c6:28:09:b1:57:fc:d5:
73:94:4f:88:b5:2f:c6:06:cf:c2:d1:ee:d8:24:1a:
87:49:2f:b8:cd:b1:30:29:5f:ac:81:58:1d:f1:96:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FA:90:8F:88:EC:2B:77:44:3A:95:B0:2C:07:1F:8D:63:F2:23:DC
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:91:bb:47:ad:10:79:da:b9:18:6b:34:2a:44:c4:de:09:5d:
1e:58:43:74:4b:b7:9f:27:90:4d:49:e7:db:25:41:74:03:5d:
a3:6f:02:ea:4f:45:f8:17:22:04:c4:40:b5:f1:5e:d6:52:a1:
6c:08:ab:4d:0e:4e:bb:63:ad:9d:2d:dc:57:7d:41:33:bb:c3:
59:17:ba:0d:2a:00:e8:9b:89:a7:59:37:f4:ee:67:f1:4b:c6:
f0:17:20:ab:56:e1:a5:c3:10:4e:37:0a:1e:59:ce:b9:05:a8:
31:3c:45:12:23:78:07:c6:0c:15:f5:bb:98:32:91:d1:b7:fb:
97:99:4c:12:1f:46:a4:88:f9:5e:cd:1f:71:f2:79:38:32:e3:
f7:8d:7d:a1:fb:9b:c5:6e:fd:ee:01:d8:cf:a1:42:47:f5:8d:
31:2a:8e:95:e9:8d:df:b0:79:0b:18:3f:1c:25:4c:9e:87:3d:
ba:5c:dd:b0:58:6e:b3:66:a4:ac:3f:68:14:2d:86:56:b9:ee:
cb:2a:c2:24:dd:39:c8:04:f3:4d:ea:41:0e:54:45:59:fd:49:
08:ca:e8:ca:fd:7b:e5:01:7a:29:fb:8c:e3:49:d5:35:35:c8:
32:1e:47:1a:66:cd:c3:9a:9f:60:e4:ac:0b:1f:e9:6b:c4:7c:
b8:f0:4b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:13 2026 by rpki-client