Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: Xm5wdJL6FIHP39brRG3tgyhrPF4K1KjxAaImbHFPBUQ=
Subject key identifier: DE:87:1F:B3:33:01:2F:1F:24:A6:18:E0:C4:FF:4E:90:BF:20:21:A2
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019D37F72B8F4E74B5238901604B60ADE905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 13EE
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa (hash: o2L90zF16GoErXoUlB+6z8RKE6i50ZTOjxl70b94zb4=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: EDPN4vKA/YIi/DSfeqWd/QV8cpJvtvI1NXXsCnE22lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2b:8f:4e:74:b5:23:89:01:60:4b:60:ad:e9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=de871fb333012f1f24a618e0c4ff4e90bf2021a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:a5:db:1c:75:f7:07:a2:bf:8c:e1:c5:e2:
a7:6f:b1:c1:12:74:af:15:ba:d9:6a:22:a5:ff:84:
75:ef:61:1b:aa:4a:55:fa:64:14:f4:19:6b:c2:23:
d4:d7:a2:26:4a:15:91:fb:a2:80:56:94:0f:95:0b:
74:12:3d:84:87:54:31:bb:ce:45:af:78:ac:f6:8c:
aa:01:28:84:ab:0c:58:93:5a:f2:f0:9c:fc:76:72:
93:60:a6:ce:c6:35:89:60:86:40:53:4d:89:7d:0c:
a8:58:53:24:44:0c:29:5a:60:60:ec:2c:72:b3:da:
72:ff:95:06:aa:6e:92:59:62:3e:f7:11:52:12:62:
8c:c3:d1:d0:52:64:d7:e7:db:a3:4a:26:a0:18:c0:
4d:79:e8:c2:97:b6:21:c4:c2:9a:09:a6:80:67:be:
2c:c1:cd:89:ad:1f:9b:23:8e:bf:78:a0:5e:2e:15:
f9:bd:98:5a:60:ba:ef:10:6a:54:aa:57:66:7f:fd:
8c:b9:f5:40:18:d8:d8:5e:b7:5c:57:1a:e5:b1:28:
8e:9e:a3:23:8a:50:05:bc:84:63:74:17:60:ab:af:
f5:06:4d:03:4f:61:76:ac:45:1a:61:59:2f:a8:71:
3e:fb:01:94:92:d7:f0:81:ea:a4:f4:44:03:9f:b1:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:1F:B3:33:01:2F:1F:24:A6:18:E0:C4:FF:4E:90:BF:20:21:A2
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:48:83:5d:42:a4:be:06:74:51:0a:6f:b8:52:96:32:b7:54:
0c:d1:f4:40:f1:d4:04:52:6b:48:67:8d:1a:b5:a8:23:51:84:
12:dd:51:3a:fa:e4:d0:ba:7a:20:7d:08:e7:cf:ae:67:f7:0b:
dd:d4:17:3c:9c:0b:79:94:42:a3:67:57:8b:97:db:dc:29:08:
19:d3:d4:77:9e:bc:4e:7e:99:87:97:bc:3d:98:d9:66:a6:15:
32:ae:b6:cc:1b:d5:a7:f9:59:30:31:86:5d:cb:4b:7e:f2:74:
bb:26:fa:39:55:70:6c:6a:68:5b:3f:f5:da:43:68:00:79:12:
13:26:4f:f2:eb:ed:25:2b:6e:c8:be:16:ff:8c:2e:5a:9e:45:
74:f3:64:c9:63:df:34:41:f6:0d:de:35:6f:d1:3b:e9:93:16:
4a:c6:65:7b:89:6f:af:03:fc:4c:09:67:3e:23:2b:f6:5c:7a:
b7:65:0c:84:41:be:f5:10:5c:ff:ec:59:79:6e:92:94:b5:9e:
f4:c3:4d:5d:b9:2a:bf:64:78:6c:66:47:05:1b:36:de:9c:33:
87:8f:95:7f:f4:25:12:a1:05:b3:c9:6c:c9:26:60:97:c3:a6:
95:68:32:a4:1a:d6:ce:45:b8:72:1f:7b:5a:86:1c:68:7f:a8:
b7:05:55:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:46 2026 by rpki-client