Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier: g1f1DBh829zR0h6WCtnhBXJY6mc2cynK5U1J+q0VG8E=
Subject key identifier: FF:F8:84:46:E1:C3:BE:F5:40:DD:AA:B0:19:93:0D:64:DD:04:C5:E1
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial: 019CA945F6A0CF893482855848BE9045B994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number: 1010
Signing time: Sun 01 Mar 2026 12:01:00 +0000
Manifest this update: Sun 01 Mar 2026 12:01:00 +0000
Manifest next update: Mon 02 Mar 2026 12:01:00 +0000
Files and hashes: 1: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: lBx8GD7Ar++TGY6wpwyRfvD8+i6O6wRI8s2lkY+xCEU=)
2: iNHmZBm96p22r1v1NNf0vUA5CNU.roa (hash: W3eGIa/whnFHaDnHwnO2+GYR1xjT6RdNQB1XA+AY4TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:f6:a0:cf:89:34:82:85:58:48:be:90:45:b9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Validity
Not Before: Mar 1 12:01:00 2026 GMT
Not After : Mar 2 12:01:00 2026 GMT
Subject: CN=fff88446e1c3bef540ddaab019930d64dd04c5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:34:c2:5c:7c:f2:b8:63:d6:25:e8:ca:0b:
b6:ae:58:b3:71:3e:a3:33:b0:8f:90:94:53:59:58:
d4:78:bd:1f:17:e1:12:89:53:18:b3:7a:a8:ac:34:
67:2d:e3:56:84:15:a1:65:3d:06:fd:5d:f6:8d:fa:
ef:53:8a:32:2d:95:7f:eb:3e:f9:2e:fd:2a:3e:7d:
ac:2b:d4:a2:6b:94:72:5f:66:63:2f:99:72:69:d3:
9b:ee:1f:ae:b0:3f:41:8d:34:08:bf:88:99:00:46:
13:a4:cd:9b:39:e1:d8:0a:fe:53:88:d4:97:49:fe:
0b:ca:8e:6b:ab:d9:71:1e:b1:fa:0a:13:2d:c2:0d:
a6:b0:65:84:26:3f:84:5b:a0:30:80:13:66:65:00:
77:bb:31:d9:7c:ac:8d:04:27:b6:c0:5c:c4:b9:b2:
39:11:29:0a:1c:7f:2f:e6:dd:ff:0f:2e:db:d0:5a:
b0:0d:53:97:36:07:36:8c:51:f4:d8:d9:58:2d:79:
19:1b:54:5b:f1:e5:84:e9:b0:8c:78:96:72:76:c3:
20:e2:bb:5c:7f:84:71:a0:3b:6a:9b:6b:86:aa:57:
ea:63:97:38:1f:30:74:6a:51:7b:09:b2:c1:14:7d:
32:bb:47:48:59:be:b9:d3:7f:1c:f1:40:ab:23:a5:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:84:46:E1:C3:BE:F5:40:DD:AA:B0:19:93:0D:64:DD:04:C5:E1
X509v3 Authority Key Identifier:
keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:58:5b:84:7f:17:78:8f:79:cc:2e:6e:dc:ef:9f:ff:74:
89:bc:2f:20:1f:18:4b:22:83:84:91:84:bd:f6:cb:e4:1b:04:
4f:70:db:d1:68:44:9b:a3:1a:f9:ed:8d:00:56:57:74:47:c0:
71:78:38:54:8a:44:1d:5e:16:82:a9:af:2e:3a:52:2b:18:c1:
62:2b:bb:cb:aa:de:fe:2a:65:41:01:f3:e7:24:7b:02:99:4d:
0d:e0:e5:08:46:a3:92:f4:81:7d:75:71:29:4e:5d:e1:57:82:
09:3e:5c:e9:7b:bd:c1:f1:cf:9f:8a:a7:ef:26:12:06:06:de:
02:67:a6:99:8b:17:13:63:8a:d3:9b:75:45:f5:b8:c7:52:b4:
d6:d1:4a:f9:a7:11:78:63:5f:fa:3c:df:ac:75:92:3c:95:2c:
7c:07:7d:29:be:83:62:a1:61:89:ec:ee:a9:91:87:a5:cc:f8:
d3:f7:b1:cc:f8:01:ee:e0:e6:ae:06:5d:04:f3:20:0e:c0:5a:
a2:4b:26:14:9e:e9:ab:45:3b:43:a6:08:be:7d:34:df:04:0d:
83:0f:8c:57:fd:19:50:d6:30:9c:36:bd:0f:b4:83:1e:2f:5e:
d3:f4:fb:09:17:b4:17:0b:23:55:f0:fb:ab:9c:57:5b:14:4c:
2a:ad:7a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:24:32 2026 by rpki-client