
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
File: byhVbwoxXBallRWO0VmiXqpkOEg.mft (raw, json)
Hash identifier: Y1RON69oP2i1Cxn210Lmew7LUeOcuHp4DArkWELFoKM=
Subject key identifier: EE:8D:1E:35:C6:1A:DD:A6:C6:4E:B4:1B:01:BA:0A:31:49:F2:D0:62
Authority key identifier: 6F:28:55:6F:0A:31:5C:16:A5:95:15:8E:D1:59:A2:5E:AA:64:38:48
Certificate issuer: /CN=6f28556f0a315c16a595158ed159a25eaa643848
Certificate serial: 019D3940D25BFB8145C80349FB6BAC89D81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
Manifest number: F9
Signing time: Sun 29 Mar 2026 11:00:42 +0000
Manifest this update: Sun 29 Mar 2026 11:00:42 +0000
Manifest next update: Mon 30 Mar 2026 11:00:42 +0000
Files and hashes: 1: byhVbwoxXBallRWO0VmiXqpkOEg.crl (hash: OKVUzrMgJDo5cb7XwAfw3OdMDuE5g9hJsDmNwt7BH2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d2:5b:fb:81:45:c8:03:49:fb:6b:ac:89:d8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f28556f0a315c16a595158ed159a25eaa643848
Validity
Not Before: Mar 29 11:00:42 2026 GMT
Not After : Mar 30 11:00:42 2026 GMT
Subject: CN=ee8d1e35c61adda6c64eb41b01ba0a3149f2d062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:3e:f3:69:11:29:da:8d:7b:0f:ea:8e:d6:
85:69:86:0a:27:11:e4:c8:1b:14:75:f8:0f:7a:b8:
dc:9b:05:b4:7a:9d:8d:73:4b:a2:fe:8c:f2:43:c3:
eb:c4:0d:0c:f9:a6:b2:d9:a6:51:8c:75:82:67:06:
f3:b0:90:05:12:f4:da:6c:6d:a6:3e:49:3b:a9:27:
31:8d:6e:ad:90:84:86:6c:39:32:67:65:a5:2f:39:
2a:7c:43:3e:1a:d2:28:85:6a:78:42:58:98:3b:f1:
5e:de:4c:36:03:32:d5:4b:af:6c:06:76:1f:52:1d:
a2:3e:b2:ca:e2:8e:a0:62:fc:67:5f:42:1b:c8:4b:
11:8f:cf:27:9e:cf:25:39:eb:ca:07:49:76:7d:d1:
92:13:ef:7b:e3:f3:62:99:25:d2:7e:02:50:2a:b4:
7a:b8:60:a8:85:9e:ca:37:a5:2d:04:ee:47:2f:4d:
cd:1e:eb:db:68:8b:6e:8d:2b:59:df:ff:42:62:a9:
76:94:23:91:bf:6e:2b:02:7a:35:c8:52:45:a9:20:
23:2f:32:6c:4c:18:43:e7:3b:a3:45:e4:be:04:c7:
82:d7:0c:1d:b2:7c:57:12:5e:cb:6a:6c:43:10:71:
4d:df:e7:70:7f:2a:ec:01:af:06:cb:cd:5e:e2:bf:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8D:1E:35:C6:1A:DD:A6:C6:4E:B4:1B:01:BA:0A:31:49:F2:D0:62
X509v3 Authority Key Identifier:
keyid:6F:28:55:6F:0A:31:5C:16:A5:95:15:8E:D1:59:A2:5E:AA:64:38:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:88:7f:c5:de:3f:49:39:af:14:dc:fe:56:ac:32:66:72:a8:
fc:22:c9:5f:e4:d5:5e:ba:79:46:18:68:c7:c5:d8:bf:28:af:
1b:c0:4f:17:76:c3:37:52:ad:e6:d0:75:89:fe:58:60:20:3c:
8c:65:a1:74:4e:5a:4f:1c:6e:55:c1:14:56:83:1a:8d:27:9d:
5e:d1:72:cf:71:48:cb:ae:f4:be:30:63:9e:f8:7d:40:d8:b1:
66:66:da:ec:2a:e4:45:f6:97:10:ae:02:30:e2:f7:96:62:38:
70:f7:65:87:f6:ca:00:80:03:af:e0:e0:89:04:67:37:8d:a7:
e9:66:86:23:97:84:a3:5d:00:2f:bd:76:bb:2f:c1:a1:dd:1d:
ba:fd:4d:87:4d:5b:e2:e6:45:80:9f:54:e1:c6:06:bc:03:08:
2f:52:85:8e:eb:04:9f:2f:62:e4:ab:2a:12:de:53:25:74:a4:
6c:f5:61:ee:99:1b:07:56:f9:37:61:8e:57:cf:99:ea:d8:f8:
95:f6:89:e5:98:ce:b7:2c:41:18:f7:6a:37:cb:cc:41:6d:6c:
57:d2:17:94:49:b1:1b:9f:78:ca:f0:16:91:10:4c:16:eb:de:
4b:7c:99:88:6b:70:e2:12:88:48:a6:40:10:66:0b:93:b5:98:
34:65:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:22 2026 by rpki-client