Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: TgpGFEQokGXrEzQG2+3MrJMBDk29JmNTEk0FyvFEk3Q=
Subject key identifier: E5:20:21:A5:C6:8F:A6:05:ED:3D:56:0E:7A:D5:39:3B:22:89:B2:02
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019FA89A03F41257573F59CF75EAA89EB338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 1908
Signing time: Tue 28 Jul 2026 12:01:33 +0000
Manifest this update: Tue 28 Jul 2026 12:01:33 +0000
Manifest next update: Wed 29 Jul 2026 12:01:33 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: NGcSKUCnvHBWL5WUdi2x9eR8wSCmXrCKVZnt1zJ70p8=)
2: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (hash: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:03:f4:12:57:57:3f:59:cf:75:ea:a8:9e:b3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Jul 28 12:01:33 2026 GMT
Not After : Jul 29 12:01:33 2026 GMT
Subject: CN=e52021a5c68fa605ed3d560e7ad5393b2289b202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:4a:c1:01:ed:8b:e9:27:ff:33:6b:05:72:
a7:04:8c:31:41:a3:72:ca:bb:d3:d0:6f:c4:4f:22:
a9:f9:1a:b6:8f:bf:ac:cd:02:80:a6:da:14:70:ea:
68:69:f6:5d:c8:6b:f9:2e:c0:5c:14:6e:9d:e0:aa:
96:65:81:b6:3e:d1:d4:76:fc:b1:50:38:a4:59:85:
00:f1:47:e4:41:fd:35:4c:b6:47:3e:13:58:e2:b6:
59:fd:1a:ef:f1:e7:0a:f6:2d:ff:24:7b:88:60:5a:
9b:51:f4:82:00:67:9b:4e:56:b1:57:48:d2:02:26:
9a:a6:fc:3d:e0:3e:23:93:2d:ca:13:04:7b:c9:0a:
31:93:eb:d2:3a:76:04:17:47:cb:d8:6d:80:38:fe:
a6:9d:fb:ee:11:7f:ce:45:3e:c5:cd:b4:9b:39:95:
f0:70:1a:9a:78:8c:0e:ab:38:e9:89:1a:fb:45:39:
98:34:c1:5e:4b:62:26:52:95:10:00:a9:d5:9c:61:
c9:a5:41:c3:90:2c:12:da:e6:db:52:25:00:d0:ee:
01:00:5b:d9:2e:d4:b4:56:ae:4c:d3:0b:2c:0a:19:
18:96:46:d1:8e:e5:e7:73:b1:d8:f1:b5:bd:fb:a3:
19:15:b7:53:3f:e9:1d:dc:07:18:4f:7e:83:c4:86:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:21:A5:C6:8F:A6:05:ED:3D:56:0E:7A:D5:39:3B:22:89:B2:02
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:66:1e:a1:2e:26:85:ca:a3:06:91:81:b3:1a:85:e5:c5:5e:
45:be:02:8a:d4:11:88:fb:2b:38:28:a3:33:87:d7:4c:2c:46:
2c:bf:ea:dd:38:30:e1:89:1f:58:91:84:15:c2:d9:bb:7b:16:
b3:2a:a6:46:b4:63:3d:de:70:a7:13:2f:43:f4:f6:fb:54:7a:
5b:7f:92:2b:48:50:2e:34:49:a4:0e:06:1e:e3:fd:5a:08:94:
56:4e:72:e5:9f:c1:3b:d0:55:ce:af:89:e4:ef:8b:fe:14:83:
1d:37:7d:07:8d:07:71:df:0a:76:ba:af:55:0d:a6:4a:da:d0:
1d:51:bd:1f:03:43:dc:f0:21:49:42:ab:44:a4:3e:41:11:97:
5e:b6:ae:01:57:46:5d:e3:2d:d8:4a:95:37:c3:7d:9f:02:63:
c8:59:7c:8b:d6:0c:79:1f:74:79:13:a1:a1:98:63:cf:4d:9d:
ba:bf:79:0a:44:2d:be:d9:15:4c:3f:6c:9a:67:7e:48:80:54:
1d:10:40:db:7c:56:57:a8:5f:95:12:92:ed:4a:24:e4:ba:7e:
7d:57:16:b0:af:d2:2d:03:c5:94:c0:06:d1:3e:b6:cc:22:bc:
18:5c:c5:80:35:c1:9f:c8:1f:8d:a8:9b:e5:0f:21:8e:55:f2:
78:72:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:18 2026 by rpki-client