Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: KidOXi0VOVlNo/xrA/xZna9UZr+DlkWwdRRGJJhVoWM=
Subject key identifier: 91:67:46:CD:F1:AF:8A:61:75:59:DB:60:18:0C:BD:B6:A8:6E:5D:ED
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 01A0C369A9E42236E40B3637BD3E69A1D8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 1021
Signing time: Mon 21 Sep 2026 10:01:16 +0000
Manifest this update: Mon 21 Sep 2026 10:01:16 +0000
Manifest next update: Tue 22 Sep 2026 10:01:16 +0000
Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: ttNCs2DRB+ogB8E5j95fT6iMR3/IslWpDUu+Xml0GFI=)
2: RnW8mw6auGzAwgGJMMkeUw4UtZI.roa (hash: aQYLaHfotglpolPiwXg2/L/hTTGuu2mTWfrCqJ8SGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:a9:e4:22:36:e4:0b:36:37:bd:3e:69:a1:d8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Sep 21 10:01:16 2026 GMT
Not After : Sep 22 10:01:16 2026 GMT
Subject: CN=916746cdf1af8a617559db60180cbdb6a86e5ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:f6:74:31:aa:cf:82:96:a6:fa:57:5c:15:
23:11:c9:cf:d9:0a:0e:08:32:44:d2:41:8c:cf:e0:
f2:ba:9f:3b:04:03:15:c4:f1:2f:ba:75:dc:ae:ed:
e1:06:6b:79:3f:62:99:e9:a4:f1:b4:a9:3a:81:31:
ee:71:03:f6:40:1d:2c:6c:49:5b:f8:77:28:52:d0:
e9:97:41:dd:f5:3d:fd:fb:1f:45:0c:15:55:dc:e8:
2d:52:1b:5c:92:4b:79:ac:af:3c:6d:ba:02:ff:a9:
e3:2b:a8:38:43:3b:fc:83:0d:91:c9:63:67:6d:e3:
d2:9a:68:19:04:c3:3d:90:87:ba:c9:3b:e4:96:c8:
8b:09:f6:e8:6d:20:b7:de:b7:28:6f:f1:7b:a9:c0:
81:35:0c:27:c5:83:51:59:f5:5b:57:1a:a9:c0:6b:
d9:85:d0:19:60:5c:a0:2c:4d:77:c7:43:c8:04:9b:
35:d9:ce:bd:97:d5:a2:31:52:98:0d:aa:20:5c:27:
fc:e3:0d:4e:ec:e2:3b:a9:7c:55:31:f2:04:a4:8b:
93:a0:bd:58:da:7c:48:54:0c:97:01:86:ea:c2:a9:
f5:69:3f:d2:8b:2a:6a:cb:cc:c0:df:cb:a9:77:37:
80:ed:b5:b2:1c:8f:aa:a0:04:10:ba:c0:d6:28:69:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:67:46:CD:F1:AF:8A:61:75:59:DB:60:18:0C:BD:B6:A8:6E:5D:ED
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e2:02:95:57:9b:63:c2:61:72:85:f1:42:76:ae:72:49:1c:
b6:28:21:7a:c2:e9:a2:ff:34:71:be:53:bb:f0:cf:2a:56:05:
9c:94:f3:c2:ee:5d:15:7e:81:87:8a:39:e7:fe:0f:5b:bb:b0:
82:8d:8d:2e:72:af:d3:38:a4:65:e9:ff:12:c9:d5:21:bc:49:
8a:c0:21:5c:42:20:6b:31:d7:d4:bc:38:ed:ae:d9:5b:28:ae:
2a:41:51:be:50:b3:d7:6b:6a:37:66:c0:df:28:8f:5f:b8:85:
e6:2d:5f:f6:e2:1a:01:17:8f:cb:bb:3a:dd:27:d7:f9:48:0b:
29:a4:26:af:a7:cb:cd:a7:91:47:0b:ad:7c:da:e6:40:50:ba:
16:c3:43:d7:89:fb:d7:70:56:08:98:32:53:98:1d:e9:bb:7d:
2a:b7:84:69:a8:b4:5b:3e:df:74:b0:6e:2a:a4:29:e5:f1:5e:
19:42:c5:af:1f:80:60:e9:93:82:57:d7:f8:7b:97:15:22:f0:
73:b8:17:66:11:9b:c7:98:16:01:98:18:be:0a:9b:0e:b5:7a:
a4:07:26:82:52:90:43:a4:fa:1f:6a:02:a3:36:15:9f:53:d7:
f8:ed:23:35:0b:d8:4d:c4:e7:88:93:05:5b:8c:c1:62:ae:d5:
07:d0:75:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaankIjbkCzY3vT5podj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl
NWM5YjEwHhcNMjYwOTIxMTAwMTE2WhcNMjYwOTIyMTAwMTE2WjAzMTEwLwYDVQQD
Eyg5MTY3NDZjZGYxYWY4YTYxNzU1OWRiNjAxODBjYmRiNmE4NmU1ZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/H2dDGqz4KWpvpXXBUjEcnP2QoO
CDJE0kGMz+Dyup87BAMVxPEvunXcru3hBmt5P2KZ6aTxtKk6gTHucQP2QB0sbElb
+HcoUtDpl0Hd9T39+x9FDBVV3OgtUhtckkt5rK88bboC/6njK6g4Qzv8gw2RyWNn
bePSmmgZBMM9kIe6yTvklsiLCfbobSC33rcob/F7qcCBNQwnxYNRWfVbVxqpwGvZ
hdAZYFygLE13x0PIBJs12c69l9WiMVKYDaogXCf84w1O7OI7qXxVMfIEpIuToL1Y
2nxIVAyXAYbqwqn1aT/Siypqy8zA38updzeA7bWyHI+qoAQQusDWKGmfFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFnRs3xr4phdVnbYBgMvbaobl3tMB8GA1UdIwQY
MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct
M2RhMDUzODhlOWFlLzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl
LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOIClVeb
Y8JhcoXxQnauckkctighesLpov80cb5Tu/DPKlYFnJTzwu5dFX6Bh4o55/4PW7uw
go2NLnKv0zikZen/EsnVIbxJisAhXEIgazHX1Lw47a7ZWyiuKkFRvlCz12tqN2bA
3yiPX7iF5i1f9uIaARePy7s63SfX+UgLKaQmr6fLzaeRRwutfNrmQFC6FsND14n7
13BWCJgyU5gd6bt9KreEaai0Wz7fdLBuKqQp5fFeGULFrx+AYOmTglfX+HuXFSLw
c7gXZhGbx5gWAZgYvgqbDrV6pAcmglKQQ6T6H2oCozYVn1PX+O0jNQvYTcTniJMF
W4zBYq7VB9B1Bg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:58:41 2026 by rpki-client