Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File: ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier: Lb2++/+4PztSqwAeeK25+xjvILPsez0DZL7V1S8jzvw=
Subject key identifier: C4:78:1F:BF:0B:07:5F:35:C8:41:03:E1:FF:F6:50:61:D0:87:8A:4F
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer: /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial: 019F178BC7EED9871680A9A79F3C32969795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number: 089D
Signing time: Tue 30 Jun 2026 08:01:04 +0000
Manifest this update: Tue 30 Jun 2026 08:01:04 +0000
Manifest next update: Wed 01 Jul 2026 08:01:04 +0000
Files and hashes: 1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: e5XqTAKl9RADCWrfYCBk8tpzGXLeRtUTzKEmJV/Q9S0=)
2: SvlrZHFg845ZhN1Rz3nRAlL1Haw.roa (hash: QGEa378gKuRJuCW4Gpo84qPKj3oloBziyCo0m8Zc5kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:c7:ee:d9:87:16:80:a9:a7:9f:3c:32:96:97:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Validity
Not Before: Jun 30 08:01:04 2026 GMT
Not After : Jul 1 08:01:04 2026 GMT
Subject: CN=c4781fbf0b075f35c84103e1fff65061d0878a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:13:6c:88:21:e7:85:06:d1:b0:90:85:42:
8c:37:19:d7:ef:b9:ae:fd:4d:dd:be:15:8d:c3:68:
17:c2:31:50:be:13:0a:02:94:77:8c:7d:87:37:1d:
7f:b9:2b:df:6c:6b:3e:4a:0e:20:94:73:23:df:2e:
6b:50:27:75:4a:97:5c:eb:fb:41:0d:98:b1:d6:e5:
a4:a0:e4:18:87:b5:a2:67:4a:49:f5:6f:59:3c:d4:
97:0f:da:6d:4e:23:5f:95:85:1f:b8:f7:03:d5:01:
aa:3a:78:5e:28:c3:f7:5c:e2:60:03:da:ad:36:d1:
b2:47:22:ad:21:2a:b3:83:10:f3:a8:b5:1b:8d:4c:
c3:3b:30:78:bd:47:49:dc:4c:db:9d:ea:b5:ce:e6:
d8:9b:41:34:b2:da:70:af:d8:4f:9a:6d:32:c6:8f:
47:bb:93:4d:01:b1:24:dc:da:15:d1:db:d1:33:7c:
9f:90:55:29:7d:6f:00:7f:3e:db:80:56:59:ac:fd:
2a:ce:8b:6d:bf:1f:bd:4c:ea:68:e4:9b:65:19:26:
49:7c:63:f0:81:0d:c5:0d:3b:50:34:f0:9c:87:4c:
e4:b8:de:25:e8:76:70:a4:a1:63:e1:02:fe:55:a0:
9a:b3:eb:34:3f:3c:53:46:4f:d3:a3:a5:a4:48:fc:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:78:1F:BF:0B:07:5F:35:C8:41:03:E1:FF:F6:50:61:D0:87:8A:4F
X509v3 Authority Key Identifier:
keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d8:db:84:51:bb:98:34:59:45:5c:2f:e1:7e:ba:ca:4d:d2:
be:a1:05:7a:46:ac:2a:a3:3c:6e:50:85:9a:18:25:f9:a7:97:
f6:65:8e:46:30:4e:bb:bf:c1:a0:87:29:87:8d:37:ca:ab:28:
12:9e:03:de:ac:99:11:21:3b:13:f3:4e:9e:31:48:bc:f3:34:
db:58:97:ce:bf:c4:a0:ac:c3:b6:61:79:b7:88:a3:35:e8:e7:
cb:c0:12:59:21:65:bd:9a:e0:15:f0:91:c6:7c:89:7a:1c:be:
94:5c:e3:95:24:ec:8d:d1:a1:ca:2b:a4:b7:02:8c:a0:f6:06:
cb:aa:55:35:bd:26:60:30:03:72:98:03:5d:90:4f:57:bf:8a:
57:85:2d:30:47:c6:25:1f:0f:c3:9a:c1:d2:51:98:c9:5b:2a:
95:6b:94:e2:f1:d2:b9:dc:a1:19:c6:6f:f3:24:fb:a2:96:bf:
70:4b:45:e4:f8:0f:d3:60:b9:c6:5f:b8:d0:56:88:f6:da:66:
cd:c6:4e:24:fb:8f:74:7d:04:69:5b:54:2b:c4:46:47:b7:64:
7e:94:c3:d8:7a:c7:85:b1:ae:09:a6:5b:dc:6e:d5:43:d7:23:
d5:ed:ab:0b:33:30:52:71:ef:b6:26:1d:b3:d5:79:4e:7d:e7:
3b:7e:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:36 2026 by rpki-client