Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
File: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft (raw, json)
Hash identifier: 0za0aVySr5TReeYZfNr9SlBUGmuXAdtTQMpNpEL9Cbc=
Subject key identifier: 86:C0:A1:2D:BC:57:E9:20:32:63:35:5E:8C:4D:E9:58:D2:F2:4B:9E
Authority key identifier: 6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
Certificate issuer: /CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Certificate serial: 019CAB34368F2B3202DBD2005761A5AB625A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
Manifest number: 15D5
Signing time: Sun 01 Mar 2026 21:00:51 +0000
Manifest this update: Sun 01 Mar 2026 21:00:51 +0000
Manifest next update: Mon 02 Mar 2026 21:00:51 +0000
Files and hashes: 1: ZQDRmVSAS-VQjlQwPz6YndLHMAk.roa (hash: HlwMeTdyXew+ZhiKaF8HUzGdDR+H+dDeb0Vxy+YC2Vo=)
2: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl (hash: w3ulJ5m2kiJ+odPU94fVHTD9HS0kb/XACxbA+NPA21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:36:8f:2b:32:02:db:d2:00:57:61:a5:ab:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Validity
Not Before: Mar 1 21:00:51 2026 GMT
Not After : Mar 2 21:00:51 2026 GMT
Subject: CN=86c0a12dbc57e9203263355e8c4de958d2f24b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:b3:62:58:05:02:69:07:6b:e9:a3:3d:d0:
a8:3f:88:1d:fa:a4:c7:e9:aa:f3:57:b3:7c:ce:0f:
95:e0:9a:07:4c:11:28:17:31:53:90:a7:8b:93:65:
3f:ad:dd:c1:2f:8f:6d:8d:88:1f:b9:12:e1:cd:ac:
a3:96:f3:08:93:8a:fc:dd:99:09:8e:17:9b:42:37:
1a:2e:c3:91:ac:1a:56:24:40:f3:8c:b0:7f:af:01:
5c:f3:60:bb:65:4f:66:47:72:92:98:92:0b:1d:36:
ac:0c:c1:f9:53:26:3f:3e:e4:70:e6:45:f9:be:9b:
38:25:01:83:cf:58:6a:76:44:8e:9f:60:8f:87:55:
84:98:1b:70:7e:ae:e5:4e:51:cb:c0:11:78:15:64:
69:90:88:b1:eb:e8:38:33:ea:86:a9:0e:44:de:ba:
af:78:79:fd:04:5f:2a:e4:22:70:64:b4:2e:f6:d6:
ff:f8:c6:ce:87:01:8f:f1:f5:09:3b:fa:c2:ec:df:
d7:79:b4:83:11:a5:25:2b:38:a1:1e:93:f5:bb:d2:
6d:a6:3b:38:87:9e:53:49:53:c8:21:76:29:7c:de:
b4:85:33:b6:54:1a:08:40:45:a0:de:0e:0b:9f:70:
53:c0:11:d0:78:d8:9e:1c:55:e7:f3:fa:2a:ac:70:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:A1:2D:BC:57:E9:20:32:63:35:5E:8C:4D:E9:58:D2:F2:4B:9E
X509v3 Authority Key Identifier:
keyid:6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:ae:74:02:03:54:9e:39:1d:20:a0:23:fc:eb:be:5a:4d:
4d:09:9b:ea:46:64:57:e7:53:0a:3a:25:6b:48:5a:67:7b:2e:
ad:a5:e6:2a:91:af:9b:86:98:45:5b:39:f7:35:0d:0f:0e:6e:
62:ce:e0:93:3d:19:33:59:2c:0f:fd:fd:61:eb:a4:4d:de:4c:
5b:50:37:16:6b:34:4b:45:75:36:dc:e1:22:67:d7:89:2d:75:
46:b8:e5:70:d4:e6:de:95:bd:b7:cc:e5:53:12:f0:75:33:6c:
13:bd:d1:ec:b1:ba:8a:a3:b8:25:5d:5f:ed:67:c3:a3:88:e0:
ba:c6:bf:3c:b2:15:fb:83:e3:e2:50:cd:06:9b:f7:93:57:78:
04:d3:b7:40:1b:5d:d1:b4:6e:a8:ec:5f:3e:b3:1e:73:ac:ee:
6a:38:8b:fe:47:c6:33:a8:9b:13:59:7a:5e:c5:60:c3:97:33:
62:f4:f9:59:2b:2a:3e:13:9c:fe:3f:37:eb:ea:fc:c4:ce:61:
04:cd:1f:12:44:1d:bc:a8:24:93:82:89:a0:29:b9:4a:34:6f:
e5:7a:04:ce:7b:ed:ed:37:e9:31:81:4d:d5:08:c4:d7:26:32:
05:ad:fc:88:7a:8f:b4:0a:ed:4f:40:6c:2b:1d:4d:8d:b0:98:
de:dd:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:06 2026 by rpki-client