Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
File: bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json)
Hash identifier: fzLvJ/4ctZWqN2UfzeK6YakadomtO5HZCn2XperwCaM=
Subject key identifier: D7:42:D7:E9:D3:45:F1:4E:C9:DB:5E:56:32:9E:9F:5A:A5:83:C5:67
Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
Certificate issuer: /CN=6d88c66485bb603441745746f9f886a2a6a15a36
Certificate serial: 019CADC853C913BF7820BC49DA32FDF23A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
Manifest number: 0254
Signing time: Mon 02 Mar 2026 09:01:52 +0000
Manifest this update: Mon 02 Mar 2026 09:01:52 +0000
Manifest next update: Tue 03 Mar 2026 09:01:52 +0000
Files and hashes: 1: Mtbpc8IAHFgMQsyAgfqJUFJrUrA.roa (hash: V1h3AXSZTLzIGDiJuS9+hhy8lWgG1T0e2v4+3MPHxvM=)
2: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: zY3G5b6JAzBKjbB0pDYST5N+WeSeoNH/sZZKH1qEas0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:53:c9:13:bf:78:20:bc:49:da:32:fd:f2:3a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36
Validity
Not Before: Mar 2 09:01:52 2026 GMT
Not After : Mar 3 09:01:52 2026 GMT
Subject: CN=d742d7e9d345f14ec9db5e56329e9f5aa583c567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:63:68:80:58:07:22:e7:95:87:b0:29:72:
de:7b:b7:6b:22:64:d2:55:cc:16:4b:60:86:36:32:
d7:4e:ee:31:85:06:e7:ec:a5:5e:4f:c0:5f:30:04:
a1:ed:1f:66:1d:d7:6f:ec:1c:12:8a:4b:fa:31:e9:
75:3b:ae:48:71:1c:31:c0:95:c6:d0:e4:5b:a4:74:
71:ff:37:04:b9:27:ae:39:3e:b7:58:36:dd:d1:06:
6d:92:61:3b:b6:cf:b8:16:2e:27:10:9e:13:90:4a:
3e:35:df:2e:fe:8d:8b:9c:23:5a:08:45:66:27:ac:
8f:01:75:5f:0b:23:1e:47:c7:25:d1:11:3d:ff:c5:
2d:57:7e:a6:32:43:f5:89:7d:c9:2e:71:20:37:64:
60:c8:6a:87:f8:77:70:b6:87:00:ef:0d:aa:0f:73:
38:9b:83:9d:7c:cc:4e:76:e4:00:65:b7:67:e7:e6:
78:2e:ad:c5:53:4c:8b:be:eb:63:e2:30:12:1d:80:
0d:21:e4:fb:e2:48:a5:f3:cc:00:6b:a9:73:bb:f7:
e1:f8:dd:ea:70:a4:8d:7c:2a:ca:d1:25:e1:be:93:
27:30:f9:80:a8:32:c5:6f:14:83:89:fd:f6:59:b5:
7e:7c:58:b3:b2:e9:a5:42:ba:61:aa:c6:bd:3a:b9:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:D7:E9:D3:45:F1:4E:C9:DB:5E:56:32:9E:9F:5A:A5:83:C5:67
X509v3 Authority Key Identifier:
keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5d:63:05:bd:6e:81:81:83:fe:12:32:2e:fc:7b:e9:c5:2a:
d4:80:21:db:0e:a6:77:28:c3:30:04:fa:32:ec:89:bf:50:7c:
0b:19:7e:6b:9a:e3:af:60:79:57:08:10:2e:7e:25:b0:fe:b7:
94:91:5c:17:b0:4a:bf:a1:1f:59:9d:de:32:4d:c8:da:f5:64:
80:fd:bb:29:45:e5:6c:ae:29:8a:0d:6a:bd:48:3a:84:9c:bd:
18:e4:b1:32:a8:96:cd:4a:ab:c0:6f:7f:69:a0:b4:d3:5d:68:
21:f4:44:71:e9:c5:ab:9f:bb:a7:a2:17:fb:c0:e8:60:63:de:
68:7a:43:93:17:df:81:29:cc:02:35:75:2f:d4:82:6f:42:a3:
dd:0b:d3:5b:c3:9e:ec:db:7d:a6:59:a7:28:ff:6e:72:77:b7:
ef:d3:39:6a:c2:e1:fb:3b:3f:87:73:9c:7b:8d:62:87:3c:cc:
20:5f:a3:0b:bc:11:5a:83:e0:2d:7e:09:a1:31:4d:68:56:0a:
ba:fe:db:08:6a:d6:4a:b4:dc:f8:e0:93:2f:a6:0f:e2:10:8f:
3b:7c:7b:cc:f4:ed:b6:3c:ac:46:73:67:8e:a4:80:46:db:61:
92:d5:93:bc:a4:d5:90:ed:ec:89:42:b0:6a:99:17:68:9b:90:
69:d8:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:55 2026 by rpki-client