Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File: ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier: h1I/Dv3h/WxWBVptIDBjRxAETL2iTlZjRZG/5SOltfA=
Subject key identifier: B6:C2:A8:4B:D4:CC:76:38:D3:65:1F:EB:6C:86:1E:31:AE:C2:D1:72
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer: /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial: 019D389BDCD3B48291F7DCB58AE032AE839C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number: 07A5
Signing time: Sun 29 Mar 2026 08:00:31 +0000
Manifest this update: Sun 29 Mar 2026 08:00:31 +0000
Manifest next update: Mon 30 Mar 2026 08:00:31 +0000
Files and hashes: 1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: 6ZKKhWZiEKWSuTJWyqpjGGbUK7/MHl3dc4u7GahO+IU=)
2: SvlrZHFg845ZhN1Rz3nRAlL1Haw.roa (hash: QGEa378gKuRJuCW4Gpo84qPKj3oloBziyCo0m8Zc5kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:dc:d3:b4:82:91:f7:dc:b5:8a:e0:32:ae:83:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Validity
Not Before: Mar 29 08:00:31 2026 GMT
Not After : Mar 30 08:00:31 2026 GMT
Subject: CN=b6c2a84bd4cc7638d3651feb6c861e31aec2d172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:bc:fb:fe:04:ac:07:2a:d8:0f:4d:bb:fb:
ad:03:86:ee:45:ec:eb:41:f8:88:a3:2d:5d:bd:52:
34:41:f9:39:d1:bc:ae:9d:35:69:7c:79:e7:dd:e6:
46:57:b5:05:05:a8:37:26:26:57:a9:69:e9:54:9b:
0d:ed:22:32:1e:85:80:f4:ff:63:f5:c3:e5:8c:4d:
41:07:d2:19:c5:0c:71:ce:65:4e:39:53:44:6e:a8:
f8:9c:e9:28:22:6a:9a:3d:88:be:ef:26:20:d2:66:
23:3d:6e:f0:bb:bb:9f:36:7e:85:e1:45:35:57:e6:
f3:ac:f5:02:b5:23:7e:94:16:f1:a5:07:74:f1:65:
9d:5a:10:0a:8d:40:b5:31:be:3e:7d:c2:16:60:eb:
09:c2:07:a3:0e:32:ee:88:a9:fa:83:8b:20:79:b7:
7b:60:aa:f7:4d:8b:4a:88:6c:e9:50:76:70:86:1a:
b3:05:c1:a9:da:bd:0f:03:22:ab:9c:c3:08:98:3f:
f9:5a:5f:61:29:ce:31:c8:97:89:d8:94:80:13:70:
59:b2:49:c6:bf:ce:14:f7:c2:60:91:9c:ab:f6:c5:
ff:dd:19:6d:15:5d:26:32:38:e4:9b:1f:26:f2:a9:
ce:79:3b:8b:60:92:0a:6b:6c:63:67:79:d9:63:4d:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C2:A8:4B:D4:CC:76:38:D3:65:1F:EB:6C:86:1E:31:AE:C2:D1:72
X509v3 Authority Key Identifier:
keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:da:0f:24:5e:8e:a9:9a:eb:44:bb:45:3d:81:83:15:ac:59:
06:dd:30:49:46:bf:a8:4e:60:12:4c:ef:f1:1c:b9:7d:70:1f:
70:9d:03:15:a2:4c:71:68:39:3e:c0:af:dc:13:da:b6:88:fd:
db:22:61:14:96:3d:a9:b5:de:30:ab:0c:e1:01:49:f2:a9:a5:
b0:5e:2c:e5:a8:16:ab:2d:53:4c:60:84:92:c3:87:36:75:79:
7c:b1:6d:01:da:fc:0a:27:86:08:ef:c7:f7:af:ce:e1:6e:bb:
c6:5c:47:de:ea:16:42:1e:89:49:18:9a:99:28:95:db:8f:a7:
67:ab:73:19:79:39:63:a5:45:f9:4e:d3:b9:65:15:6a:8d:bb:
99:93:43:cc:bb:86:8b:ea:28:aa:c7:d1:4b:a4:cb:de:68:a2:
91:98:9a:ad:35:0b:3f:7f:45:bf:04:58:0b:47:ba:3a:a5:a7:
d2:51:81:61:ed:3e:b5:7c:81:75:03:18:68:21:ff:b8:6e:2a:
46:03:fa:28:eb:86:d9:bb:c3:bb:f9:39:c3:7a:e9:8f:eb:3b:
b2:63:e3:ee:9d:c3:25:c2:98:6d:e9:88:6a:3e:7a:4e:c5:59:
f1:7b:61:e4:be:4e:3f:c9:f5:4c:e5:a1:f9:d6:a2:cc:6f:c5:
87:61:a2:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m9zTtIKR99y1iuAyroOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjllMDQ1OWFhOGVhMWZkYjE2MGU0MDI0N2ZlMWQ3NjBh
ZTdjMGQwHhcNMjYwMzI5MDgwMDMxWhcNMjYwMzMwMDgwMDMxWjAzMTEwLwYDVQQD
EyhiNmMyYTg0YmQ0Y2M3NjM4ZDM2NTFmZWI2Yzg2MWUzMWFlYzJkMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VO8+/4ErAcq2A9Nu/utA4buRezr
QfiIoy1dvVI0Qfk50byunTVpfHnn3eZGV7UFBag3JiZXqWnpVJsN7SIyHoWA9P9j
9cPljE1BB9IZxQxxzmVOOVNEbqj4nOkoImqaPYi+7yYg0mYjPW7wu7ufNn6F4UU1
V+bzrPUCtSN+lBbxpQd08WWdWhAKjUC1Mb4+fcIWYOsJwgejDjLuiKn6g4sgebd7
YKr3TYtKiGzpUHZwhhqzBcGp2r0PAyKrnMMImD/5Wl9hKc4xyJeJ2JSAE3BZsknG
v84U98JgkZyr9sX/3RltFV0mMjjkmx8m8qnOeTuLYJIKa2xjZ3nZY01SEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbCqEvUzHY402Uf62yGHjGuwtFyMB8GA1UdIwQY
MBaAFAcp4EWaqOof2xYOQCR/4ddgrnwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEt
NjRlZGQyN2M1ZDdhLzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEtNjRlZGQyN2M1ZDdh
LzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdoPJF6O
qZrrRLtFPYGDFaxZBt0wSUa/qE5gEkzv8Ry5fXAfcJ0DFaJMcWg5PsCv3BPatoj9
2yJhFJY9qbXeMKsM4QFJ8qmlsF4s5agWqy1TTGCEksOHNnV5fLFtAdr8CieGCO/H
96/O4W67xlxH3uoWQh6JSRiamSiV24+nZ6tzGXk5Y6VF+U7TuWUVao27mZNDzLuG
i+ooqsfRS6TL3miikZiarTULP39FvwRYC0e6OqWn0lGBYe0+tXyBdQMYaCH/uG4q
RgP6KOuG2bvDu/k5w3rpj+s7smPj7p3DJcKYbemIaj56TsVZ8Xth5L5OP8n1TOWh
+daizG/Fh2GiaA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:22 2026 by rpki-client