Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: mi+oJu5fQFfeb03hE+Xcp93OLwqS2a554MhoWMdAqhQ=
Subject key identifier: 4A:4B:7C:18:EE:95:E0:EA:35:3E:FE:E7:98:18:F9:50:A9:29:E2:F3
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019CABD969153B5AEBD2246908BA2DDFE26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 177C
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: sIrGALdVMc8pZj+r/N+ZIwvjcTcV6AfpRUysOFmPGV4=)
2: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (hash: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:69:15:3b:5a:eb:d2:24:69:08:ba:2d:df:e2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=4a4b7c18ee95e0ea353efee79818f950a929e2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:f8:51:2d:76:cb:f5:6f:1f:f1:c9:15:9c:
a9:b9:e9:73:ce:3b:10:bc:8c:d9:71:9b:7d:a1:3e:
ec:68:81:3a:3c:dd:6e:14:5e:6d:aa:75:5c:75:83:
54:9c:f2:5e:26:b1:f8:da:e1:73:fc:21:96:86:6a:
94:22:c6:3c:5d:34:f9:f8:62:ea:fa:39:9f:ff:a2:
18:24:f1:9b:04:81:aa:5d:30:7e:35:b4:0f:9f:38:
28:09:bb:9e:b7:a7:f0:a4:0a:0f:83:7d:2b:11:d2:
57:5f:a9:66:66:c6:18:dc:01:f2:0d:ca:58:d5:18:
91:6b:b7:a0:3c:fd:fc:dc:16:e3:b8:7a:72:62:23:
fc:3e:de:b0:fd:d5:53:29:ab:b8:be:99:fd:10:7c:
de:c8:2c:71:b5:5c:e0:15:19:e6:cb:44:0e:94:0a:
d0:24:aa:8a:76:a0:57:06:d3:80:61:fb:38:31:b2:
2a:31:c0:76:9e:19:18:10:d4:8b:18:92:7e:18:61:
fe:77:0d:84:0c:0a:19:54:69:37:e2:30:18:e5:66:
da:2f:ae:54:9c:8f:02:d5:f0:cb:ff:cb:40:77:8c:
46:1a:1d:b7:18:d3:71:15:46:b0:75:bd:73:8f:c7:
19:3a:51:3d:7e:97:ed:75:19:93:98:94:40:b1:fc:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4B:7C:18:EE:95:E0:EA:35:3E:FE:E7:98:18:F9:50:A9:29:E2:F3
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:72:47:26:da:0b:4c:15:3a:ac:b7:a1:db:bb:3d:1a:e7:
ac:f9:3e:9c:4c:7c:eb:31:ad:9f:ee:04:38:66:df:ba:69:c2:
f6:cf:73:21:be:21:fd:91:87:90:f0:94:26:df:e6:4d:e9:49:
4c:d4:de:1b:42:6a:39:65:d6:de:45:09:43:da:17:4a:c9:41:
ba:22:20:85:f2:23:be:8c:16:87:28:c0:62:c5:cd:63:02:1c:
97:77:4a:dd:7d:a0:95:72:ee:4b:bb:82:20:c5:b1:9e:0f:51:
36:10:9d:bd:06:6f:3f:76:0c:5a:f7:3b:f2:14:e5:3d:13:15:
fe:f5:2c:b3:b2:f3:67:07:f1:70:5e:a3:6f:e4:14:7b:03:06:
5c:e8:17:23:69:47:5d:55:3f:0e:f3:51:be:4f:6e:57:09:7b:
c0:24:3e:ae:3e:b2:1b:be:aa:2c:37:fd:52:56:d3:5a:f8:c0:
ca:59:13:aa:c5:d6:8e:b7:c7:d7:e7:02:00:da:a3:b7:f3:be:
72:68:ac:d0:28:28:79:c4:b1:a5:13:53:8c:96:cd:ff:d2:a8:
34:05:3b:03:83:6f:63:5c:67:ff:1a:33:00:d6:62:e5:f5:76:
61:ab:93:77:29:fc:ea:ef:23:8d:44:a7:5e:10:53:fd:b1:58:
0a:31:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:34 2026 by rpki-client