Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
File: bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json)
Hash identifier: b7kuev1XAUZGL0srwFzlXsR8A60CjRp0vbHY5XHuyOo=
Subject key identifier: 6E:1A:82:74:89:D1:59:B1:91:46:C2:21:10:5F:99:EC:03:EC:19:E9
Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
Certificate issuer: /CN=6d88c66485bb603441745746f9f886a2a6a15a36
Certificate serial: 019D9D3F97A0475B4795B0AB62EC640BD469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
Manifest number: 02D0
Signing time: Fri 17 Apr 2026 21:01:23 +0000
Manifest this update: Fri 17 Apr 2026 21:01:23 +0000
Manifest next update: Sat 18 Apr 2026 21:01:23 +0000
Files and hashes: 1: Mtbpc8IAHFgMQsyAgfqJUFJrUrA.roa (hash: V1h3AXSZTLzIGDiJuS9+hhy8lWgG1T0e2v4+3MPHxvM=)
2: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: yMNPyd1EdmGfwgiIB0rv2YH1WUfiA/9QnKETO41t/Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:97:a0:47:5b:47:95:b0:ab:62:ec:64:0b:d4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36
Validity
Not Before: Apr 17 21:01:23 2026 GMT
Not After : Apr 18 21:01:23 2026 GMT
Subject: CN=6e1a827489d159b19146c221105f99ec03ec19e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:26:00:05:15:17:49:9d:f0:7f:12:f6:08:
58:38:b9:1f:36:62:fb:70:42:78:26:45:59:e6:fe:
55:47:56:c8:2f:36:77:ec:ad:6e:fc:6e:df:13:cc:
f8:7a:50:91:60:32:48:49:ff:53:b9:0d:ba:8b:1c:
97:14:ed:93:47:94:05:71:ac:7a:fc:89:33:a3:f8:
0b:9f:1b:22:c9:3e:37:5c:7a:af:92:f3:97:b3:df:
98:f6:be:cb:3c:46:3e:1c:f8:d9:ca:26:85:27:a8:
0f:45:ad:72:7c:d1:82:a7:61:31:4d:ae:c5:a2:87:
27:60:be:26:78:52:cf:ee:84:6a:42:76:79:f6:ad:
3a:8b:2c:18:2b:26:59:d1:e1:d1:24:d6:ec:bd:46:
fe:e7:1a:2a:38:cf:b1:8a:5a:f4:72:3a:a1:ea:e8:
01:69:ec:08:76:dc:82:02:10:5a:f5:82:54:0d:80:
66:d7:33:d0:6a:c3:ce:4d:10:77:3a:5e:4a:6c:0e:
c4:de:f0:ba:7d:b0:d1:07:ac:57:c9:42:4c:b5:ce:
a2:44:84:5c:56:f4:8d:94:48:5f:7d:8d:d2:8a:65:
8c:46:60:3f:c3:91:e4:d7:35:f8:70:47:2b:32:f1:
37:19:5f:9a:e5:01:52:35:21:b7:3d:af:5e:ac:b1:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:82:74:89:D1:59:B1:91:46:C2:21:10:5F:99:EC:03:EC:19:E9
X509v3 Authority Key Identifier:
keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:84:e5:b3:4c:b9:5a:a7:38:40:4b:5d:9e:aa:1f:01:bb:b4:
7c:91:e9:04:ad:d6:1f:60:9d:c1:7e:54:3d:50:dc:94:64:7a:
0d:7d:af:3c:0b:52:95:a2:f3:bb:1b:c8:40:bb:89:0b:7e:aa:
2f:04:5a:74:dd:4f:b9:04:9f:db:85:9a:05:81:91:80:04:7e:
a1:9f:1a:d0:0c:82:94:be:3e:fb:e6:5b:1d:db:e5:a8:1e:5f:
49:e0:92:52:1a:dc:ba:32:7a:19:e2:df:76:6e:4f:6f:e5:1e:
9d:92:4b:c8:00:a8:a5:cc:8a:78:3e:de:2b:3c:1b:b8:f5:72:
d7:61:21:98:58:68:79:92:e6:4b:36:34:88:8d:3e:48:a1:3c:
10:65:70:5b:06:ad:b9:5a:0c:2a:6d:09:ed:49:70:fa:fc:1c:
c8:40:eb:3f:ac:c4:89:17:55:95:81:ef:04:dc:55:b2:2a:c0:
e0:15:3a:9e:df:b8:c8:63:2b:91:68:83:63:15:02:17:0d:82:
a7:69:7b:0e:26:65:fb:64:2d:82:2a:df:96:4e:08:af:f6:11:
bc:15:1d:21:77:a5:cf:d8:ec:a7:d4:55:45:52:83:59:7c:34:
b4:38:ff:00:19:99:77:e2:b5:8c:b0:f2:f1:cb:23:19:09:fa:
9c:73:26:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dP5egR1tHlbCrYuxkC9RpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODhjNjY0ODViYjYwMzQ0MTc0NTc0NmY5Zjg4NmEyYTZh
MTVhMzYwHhcNMjYwNDE3MjEwMTIzWhcNMjYwNDE4MjEwMTIzWjAzMTEwLwYDVQQD
Eyg2ZTFhODI3NDg5ZDE1OWIxOTE0NmMyMjExMDVmOTllYzAzZWMxOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+cmAAUVF0md8H8S9ghYOLkfNmL7
cEJ4JkVZ5v5VR1bILzZ37K1u/G7fE8z4elCRYDJISf9TuQ26ixyXFO2TR5QFcax6
/Ikzo/gLnxsiyT43XHqvkvOXs9+Y9r7LPEY+HPjZyiaFJ6gPRa1yfNGCp2ExTa7F
oocnYL4meFLP7oRqQnZ59q06iywYKyZZ0eHRJNbsvUb+5xoqOM+xilr0cjqh6ugB
aewIdtyCAhBa9YJUDYBm1zPQasPOTRB3Ol5KbA7E3vC6fbDRB6xXyUJMtc6iRIRc
VvSNlEhffY3SimWMRmA/w5Hk1zX4cEcrMvE3GV+a5QFSNSG3Pa9erLGZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4agnSJ0VmxkUbCIRBfmewD7BnpMB8GA1UdIwQY
MBaAFG2IxmSFu2A0QXRXRvn4hqKmoVo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84NjQ4YmYtODA0ZS00ZTQyLWEyMTIt
YjVhNGMyMjQzMmVmLzEvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84NjQ4YmYtODA0ZS00ZTQyLWEyMTItYjVhNGMyMjQzMmVm
LzEvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtITls0y5
Wqc4QEtdnqofAbu0fJHpBK3WH2CdwX5UPVDclGR6DX2vPAtSlaLzuxvIQLuJC36q
LwRadN1PuQSf24WaBYGRgAR+oZ8a0AyClL4+++ZbHdvlqB5fSeCSUhrcujJ6GeLf
dm5Pb+UenZJLyACopcyKeD7eKzwbuPVy12EhmFhoeZLmSzY0iI0+SKE8EGVwWwat
uVoMKm0J7Ulw+vwcyEDrP6zEiRdVlYHvBNxVsirA4BU6nt+4yGMrkWiDYxUCFw2C
p2l7DiZl+2Qtgirflk4Ir/YRvBUdIXelz9jsp9RVRVKDWXw0tDj/ABmZd+K1jLDy
8csjGQn6nHMmuA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:30 2026 by rpki-client