Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: JjnphLVZoMqBqqwcNY5VjlejDAq0wKoBxasY0R3rQ7Q=
Subject key identifier: 43:66:E4:54:B1:7B:89:67:A2:49:67:2F:1D:8B:D9:B3:CC:58:BA:CF
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 019CAAFD490F08A6E8E3F278568EA8C4CF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 0E00
Signing time: Sun 01 Mar 2026 20:00:51 +0000
Manifest this update: Sun 01 Mar 2026 20:00:51 +0000
Manifest next update: Mon 02 Mar 2026 20:00:51 +0000
Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: JRU0oZdtLM0aP8qOel4GvjInud8+9n+KkC30mGkYOWM=)
2: aM81JrdxO-yRrVlKdRuDInz7Xik.roa (hash: m45p2Y1vKc3tda0x+KiQ3qLXf93450FPSTY5dkd5d+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:49:0f:08:a6:e8:e3:f2:78:56:8e:a8:c4:cf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Mar 1 20:00:51 2026 GMT
Not After : Mar 2 20:00:51 2026 GMT
Subject: CN=4366e454b17b8967a249672f1d8bd9b3cc58bacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:41:c7:a8:ee:63:69:b3:de:07:2a:3c:03:
52:09:55:ae:62:f4:2c:d2:36:f4:fc:bf:3d:31:e6:
11:14:62:04:ad:89:52:29:d0:2a:17:8d:dc:8a:3c:
88:06:96:1e:a7:6c:4c:19:33:3f:15:06:9d:76:a5:
5a:9e:7c:6c:d3:59:ff:df:c5:ff:4a:99:39:f1:6c:
20:9d:cb:13:c5:ae:7f:23:eb:d5:2b:9e:d6:af:b2:
ce:f8:70:70:73:88:30:2c:ad:bd:70:c9:e7:48:bc:
97:fc:95:d0:73:03:4a:51:29:13:cf:fa:18:15:2a:
fd:cc:00:9c:2c:60:3d:16:6a:e9:b0:5b:34:48:be:
27:a7:9b:24:73:2e:00:31:08:44:e4:b8:e0:d5:26:
49:f7:13:fa:20:06:25:57:11:da:56:5a:f4:35:b4:
32:e5:55:12:0c:88:a5:f1:43:d1:5f:cd:f3:b8:72:
e8:07:0b:25:5f:17:bd:e2:e2:89:44:95:55:f5:8c:
0e:98:c8:ef:64:fa:5f:f3:b5:db:47:62:17:c1:f2:
1c:5b:e3:54:b7:05:07:06:a2:80:12:76:de:2c:48:
4c:32:1b:73:96:6b:c8:33:84:b4:9b:89:6a:16:49:
bc:52:6b:37:68:0b:ad:65:64:ee:72:c8:cf:00:18:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:66:E4:54:B1:7B:89:67:A2:49:67:2F:1D:8B:D9:B3:CC:58:BA:CF
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ac:49:5c:da:9f:b8:38:c8:54:3d:2d:79:b7:38:e9:88:13:
fb:30:73:28:d6:41:cc:a5:72:f5:78:18:06:06:db:78:27:0c:
a9:42:b8:b3:20:78:80:81:36:5e:a5:43:44:4f:fc:b9:e8:33:
79:4f:cc:ae:1e:da:0d:41:a2:c4:09:62:f5:31:0d:c1:78:9f:
87:2b:23:f2:14:65:14:7f:9a:94:3c:ea:9e:1a:e6:82:8b:04:
27:0f:25:4f:63:68:5a:a8:a5:2d:6b:87:80:12:0b:d0:22:9b:
d6:91:4d:ae:e9:16:b2:35:a8:b7:8b:b8:18:12:c8:e9:58:0f:
95:ec:e0:57:43:4f:35:45:66:cc:62:80:9e:b6:ae:6d:1d:02:
3b:3b:74:28:65:71:04:9e:a9:1f:b6:c7:88:5e:73:4e:46:cf:
6e:12:aa:2e:e4:fd:54:02:c0:55:9a:bc:ed:de:bd:7b:5b:0f:
b5:e6:54:0e:51:6a:91:d4:d6:b9:6f:84:60:8b:f8:91:0d:52:
c9:01:bc:cf:55:f6:76:cd:69:a8:f6:f1:da:62:b1:36:fb:86:
7f:e9:c7:73:bd:9b:ce:a0:71:8a:54:3b:df:11:a3:26:06:bd:
7e:27:ae:b2:92:67:a8:69:7c:45:b8:7f:c1:67:41:89:45:1d:
72:a4:11:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/UkPCKbo4/J4Vo6oxM+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl
NWM5YjEwHhcNMjYwMzAxMjAwMDUxWhcNMjYwMzAyMjAwMDUxWjAzMTEwLwYDVQQD
Eyg0MzY2ZTQ1NGIxN2I4OTY3YTI0OTY3MmYxZDhiZDliM2NjNThiYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6lBx6juY2mz3gcqPANSCVWuYvQs
0jb0/L89MeYRFGIErYlSKdAqF43cijyIBpYep2xMGTM/FQaddqVannxs01n/38X/
Spk58WwgncsTxa5/I+vVK57Wr7LO+HBwc4gwLK29cMnnSLyX/JXQcwNKUSkTz/oY
FSr9zACcLGA9FmrpsFs0SL4np5skcy4AMQhE5Ljg1SZJ9xP6IAYlVxHaVlr0NbQy
5VUSDIil8UPRX83zuHLoBwslXxe94uKJRJVV9YwOmMjvZPpf87XbR2IXwfIcW+NU
twUHBqKAEnbeLEhMMhtzlmvIM4S0m4lqFkm8Ums3aAutZWTucsjPABjf4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENm5FSxe4lnoklnLx2L2bPMWLrPMB8GA1UdIwQY
MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct
M2RhMDUzODhlOWFlLzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl
LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvaxJXNqf
uDjIVD0tebc46YgT+zBzKNZBzKVy9XgYBgbbeCcMqUK4syB4gIE2XqVDRE/8uegz
eU/Mrh7aDUGixAli9TENwXifhysj8hRlFH+alDzqnhrmgosEJw8lT2NoWqilLWuH
gBIL0CKb1pFNrukWsjWot4u4GBLI6VgPlezgV0NPNUVmzGKAnraubR0COzt0KGVx
BJ6pH7bHiF5zTkbPbhKqLuT9VALAVZq87d69e1sPteZUDlFqkdTWuW+EYIv4kQ1S
yQG8z1X2ds1pqPbx2mKxNvuGf+nHc72bzqBxilQ73xGjJga9fieuspJnqGl8Rbh/
wWdBiUUdcqQRLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:12 2026 by rpki-client