Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: hNzIKllCFWV4rFfbaL6n9fo9rwY7vBTN2B92/3xWi1I=
Subject key identifier: C8:FB:47:44:55:EB:1B:49:CA:0B:61:05:59:B3:64:0A:1A:9F:5B:37
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 01A0C47CB05A3E93DB8D60839DC66A028EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 199B
Signing time: Mon 21 Sep 2026 15:01:40 +0000
Manifest this update: Mon 21 Sep 2026 15:01:40 +0000
Manifest next update: Tue 22 Sep 2026 15:01:40 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: VaNdvFVKohhR+wTMeDZaRjaj82rf2Zh8f/Oqs7pwjRE=)
2: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (hash: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:b0:5a:3e:93:db:8d:60:83:9d:c6:6a:02:8e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Sep 21 15:01:40 2026 GMT
Not After : Sep 22 15:01:40 2026 GMT
Subject: CN=c8fb474455eb1b49ca0b610559b3640a1a9f5b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:ab:e8:3e:1c:83:61:6c:42:b1:59:cf:08:
1a:94:e3:78:b9:67:b8:f3:56:6a:83:2e:c8:76:61:
64:9a:89:c1:24:ca:e4:35:fb:3c:78:06:20:72:60:
a6:07:4b:85:94:f1:ca:40:c0:a8:a7:71:a8:dc:16:
9e:5a:15:ab:33:70:92:fe:42:35:26:db:2b:d7:84:
7c:f2:52:ee:69:f3:62:87:66:7e:4b:f4:b0:12:a5:
70:3e:49:25:1e:e8:bb:b6:e4:7d:77:7a:cf:56:ec:
ff:3b:21:42:71:e4:9f:be:09:5f:38:be:f4:1e:7a:
67:34:e6:6b:a4:4c:c5:b0:60:fa:27:e5:58:4e:fa:
10:b6:85:b8:a4:c1:f1:14:3d:4f:7a:a0:91:32:a6:
80:db:df:63:79:88:83:e8:19:13:bd:0b:7a:3d:8a:
df:61:6a:b9:77:61:6e:f4:a5:3c:ee:9c:b0:f0:7a:
93:17:11:e2:e1:47:a3:dc:72:83:0e:95:ab:7b:4e:
eb:0d:33:b7:82:ef:60:0f:ed:c7:4f:fe:62:7f:70:
6f:b7:f6:7a:4a:88:40:68:be:90:ef:70:9b:9f:c0:
82:bd:ed:10:df:82:f0:2d:6f:2c:15:20:94:6c:c6:
bd:b4:b2:97:66:85:6e:89:96:4e:ca:37:2a:77:f1:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FB:47:44:55:EB:1B:49:CA:0B:61:05:59:B3:64:0A:1A:9F:5B:37
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fd:cf:45:6a:e7:85:b0:89:25:58:86:31:ab:fd:3b:7a:c5:
db:28:7a:3a:94:46:7a:c4:e9:4b:0f:c7:04:39:d7:89:b8:99:
59:54:9b:99:ae:18:ab:e5:83:f6:ee:26:31:38:9c:44:df:ba:
82:18:b7:7d:90:c4:db:a4:de:2a:e1:cf:70:16:84:cc:d7:3e:
bd:d2:2c:6c:62:ec:00:da:5b:93:11:fa:b9:85:7f:11:cc:d4:
c4:50:9d:b0:86:c3:eb:ed:b6:5f:f0:b6:22:ba:40:87:84:2a:
8b:0e:4f:3a:4e:a5:73:e3:f4:52:ea:b8:61:63:90:06:be:22:
c9:af:66:ff:01:e4:c8:ad:39:6a:a9:76:9e:15:98:e8:5a:4c:
cb:f1:4f:f7:d9:5f:3d:56:aa:81:82:05:0b:03:58:9b:98:89:
12:6f:f6:de:5d:fd:03:31:e6:2e:88:20:2f:2e:29:20:a7:54:
84:bf:f8:29:c6:ed:b0:18:af:4b:d7:53:9a:94:10:ce:b8:3d:
61:1c:b7:9c:6a:45:22:19:26:ed:b5:72:a6:3b:1e:a8:70:d3:
66:1e:96:84:e7:17:ea:f2:39:54:86:9e:b8:bd:d9:75:c8:41:
3c:4a:de:2f:4b:f5:d5:b9:33:f0:21:a8:4d:08:59:37:e2:4a:
5b:2c:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:24:30 2026 by rpki-client