Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: bD1wEPfBrkj5Mrub92dAvakQCMU2d4e7SboK/y5r3cM=
Subject key identifier: 57:17:36:43:8E:44:24:6F:97:86:67:5D:0F:FB:1D:51:E9:D7:D0:04
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 01A0C557CC3CF7C6422CF2443591C3AC3152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 19:01:00 +0000
Manifest this update: Mon 21 Sep 2026 19:01:00 +0000
Manifest next update: Tue 22 Sep 2026 19:01:00 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: 9Ijb9zddoxanpsgcVmfCtX45SCDIeMuFBzhsqYUw38w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:cc:3c:f7:c6:42:2c:f2:44:35:91:c3:ac:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Sep 21 19:01:00 2026 GMT
Not After : Sep 22 19:01:00 2026 GMT
Subject: CN=571736438e44246f9786675d0ffb1d51e9d7d004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:9e:62:ef:4c:bf:69:70:e2:31:9e:f6:8a:
6b:8c:81:87:0a:c8:f5:f0:24:67:68:2f:77:b4:f5:
6f:8a:23:11:69:0f:fc:c3:92:9a:8e:91:e7:77:ae:
14:ba:d6:43:30:3e:ba:86:9c:85:8c:11:aa:97:ae:
7f:af:1a:a7:5f:76:59:12:5f:be:4a:0a:4d:c7:fc:
2c:32:b3:3c:69:60:a6:f3:24:6e:6b:9d:ed:de:96:
9c:03:a8:8b:05:4f:d4:36:18:b2:88:5e:47:92:bd:
32:b2:65:0a:5a:fa:4e:45:14:88:40:dd:4a:ce:38:
ac:19:0e:b4:83:69:07:e1:9e:14:8a:44:71:9b:32:
aa:11:dd:21:78:b7:d5:a6:d8:31:84:99:1f:ef:ab:
52:34:a5:13:ad:ee:0e:69:e6:aa:69:40:3a:a1:9a:
22:4a:80:7d:fc:b2:46:87:67:b2:00:26:cb:c4:a1:
8b:4e:df:a0:89:08:af:0d:c3:fb:9f:45:3f:ea:48:
1a:f3:d4:ad:7a:8b:ca:f1:62:30:37:4d:26:da:f7:
82:fb:7a:06:22:40:1c:7f:30:82:c2:b1:75:4d:54:
7f:18:32:67:62:91:8d:4d:21:68:ae:91:8b:27:85:
89:7c:3e:5a:c1:e2:d8:e0:9e:4a:d0:b0:54:fa:fb:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:36:43:8E:44:24:6F:97:86:67:5D:0F:FB:1D:51:E9:D7:D0:04
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:94:88:45:1c:e3:b5:56:60:87:cd:a2:36:7a:86:9f:c3:d9:
ca:66:27:90:3e:f9:91:fb:a7:3b:05:e6:a2:b1:32:cf:0a:b8:
83:27:cc:b6:85:cd:c9:34:6c:9e:9d:55:0b:ff:f9:54:75:6e:
51:e0:5b:69:96:ee:2c:48:3b:27:98:01:04:25:25:66:a8:85:
b7:06:09:71:a8:db:c0:63:02:bd:04:5d:fd:71:6f:32:13:bd:
3e:fd:3f:99:b9:db:c4:df:18:c7:6e:4e:28:a0:98:a1:f7:02:
06:5d:b8:8c:15:73:c8:96:c6:3f:3b:b5:dd:9a:c1:ce:70:b3:
bd:9c:99:96:ba:18:0c:a0:b2:51:04:31:92:93:4c:ec:87:a0:
df:0e:24:d7:dd:4a:8d:3e:8e:ac:53:90:21:75:d0:f8:28:1e:
97:72:f4:cb:9f:0b:bf:81:ad:5a:fb:1f:99:9d:f0:b3:8d:f2:
20:6c:7d:75:ff:f4:ca:09:83:26:13:82:0b:56:d4:ce:d7:1a:
cd:a1:8c:d9:1b:bc:a2:5a:92:c6:38:33:82:04:67:e7:c7:05:
4f:13:15:67:c4:79:ff:be:02:a6:9b:67:ef:dd:07:35:2e:33:
08:f5:1e:0f:2d:fb:0d:36:93:f8:0c:ba:c0:eb:ab:6d:e6:69:
f5:1d:04:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV8w898ZCLPJENZHDrDFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMmMwYzY2YjZiNDYxMmM4OTQ5ODAwZjA5MjkxY2FmYTM4
NjVmZDMwHhcNMjYwOTIxMTkwMTAwWhcNMjYwOTIyMTkwMTAwWjAzMTEwLwYDVQQD
Eyg1NzE3MzY0MzhlNDQyNDZmOTc4NjY3NWQwZmZiMWQ1MWU5ZDdkMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFmeYu9Mv2lw4jGe9oprjIGHCsj1
8CRnaC93tPVviiMRaQ/8w5KajpHnd64UutZDMD66hpyFjBGql65/rxqnX3ZZEl++
SgpNx/wsMrM8aWCm8yRua53t3pacA6iLBU/UNhiyiF5Hkr0ysmUKWvpORRSIQN1K
zjisGQ60g2kH4Z4UikRxmzKqEd0heLfVptgxhJkf76tSNKUTre4OaeaqaUA6oZoi
SoB9/LJGh2eyACbLxKGLTt+giQivDcP7n0U/6kga89SteovK8WIwN00m2veC+3oG
IkAcfzCCwrF1TVR/GDJnYpGNTSForpGLJ4WJfD5aweLY4J5K0LBU+vuZ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcXNkOORCRvl4ZnXQ/7HVHp19AEMB8GA1UdIwQY
MBaAFG8sDGa2tGEsiUmADwkpHK+jhl/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUt
MzkyYTc1MjQ2NGIxLzEvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUtMzkyYTc1MjQ2NGIx
LzEvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtpSIRRzj
tVZgh82iNnqGn8PZymYnkD75kfunOwXmorEyzwq4gyfMtoXNyTRsnp1VC//5VHVu
UeBbaZbuLEg7J5gBBCUlZqiFtwYJcajbwGMCvQRd/XFvMhO9Pv0/mbnbxN8Yx25O
KKCYofcCBl24jBVzyJbGPzu13ZrBznCzvZyZlroYDKCyUQQxkpNM7Ieg3w4k191K
jT6OrFOQIXXQ+Cgel3L0y58Lv4GtWvsfmZ3ws43yIGx9df/0ygmDJhOCC1bUztca
zaGM2Ru8olqSxjgzggRn58cFTxMVZ8R5/74Cpptn790HNS4zCPUeDy37DTaT+Ay6
wOurbeZp9R0EBw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:19:26 2026 by rpki-client