Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft
File: ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft (raw, json)
Hash identifier: A+3FWwAKVzuG38pCvo9Kuz5d697dnofY6gyN0qeLJdE=
Subject key identifier: 89:F3:DB:FA:28:A9:AE:D1:E3:E5:43:65:E3:15:D7:C8:A8:21:BF:6F
Authority key identifier: 07:22:44:B8:ED:D1:16:CF:58:A6:71:3E:F7:B6:6F:5D:3B:8F:4F:EB
Certificate issuer: /CN=072244b8edd116cf58a6713ef7b66f5d3b8f4feb
Certificate serial: 019FAA8851CBA43BB22ED4A38FD5CD484C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:28 +0000
Manifest this update: Tue 28 Jul 2026 21:01:28 +0000
Manifest next update: Wed 29 Jul 2026 21:01:28 +0000
Files and hashes: 1: ByJEuO3RFs9YpnE-97ZvXTuPT-s.crl (hash: eeEkfdNRwHAOlAM3lUJ2/eyv7SkyRwQInDUuyZUu3Jc=)
2: Ihlb6TMBZzdM2msP85mC6C7Tb9s.roa (hash: C2sKJQtjBRRMbWL99kznod9g3VbH4JLuuFtryMZLOS4=)
3: zUx63CcUp4baA3iUErZSKlbOHRc.roa (hash: heT/cGlUMpfy9RzMb4tH36LoY9pPNQCq8//toyP8e8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:51:cb:a4:3b:b2:2e:d4:a3:8f:d5:cd:48:4c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072244b8edd116cf58a6713ef7b66f5d3b8f4feb
Validity
Not Before: Jul 28 21:01:28 2026 GMT
Not After : Jul 29 21:01:28 2026 GMT
Subject: CN=89f3dbfa28a9aed1e3e54365e315d7c8a821bf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b2:20:23:8f:28:1b:e5:1b:68:13:1e:b5:2e:
eb:2d:fc:fc:a4:77:09:6e:11:7c:5d:38:3c:9c:30:
f0:fa:8f:c8:1a:33:98:f7:36:d9:f0:53:40:35:61:
84:15:82:d5:92:e4:0c:1b:db:b4:39:1c:7c:cc:47:
97:91:6c:7f:9f:56:0a:e6:63:e6:b7:4f:09:0a:98:
eb:fb:3f:ca:5f:a5:91:9e:e6:80:47:4c:c7:b5:a8:
0b:b3:d4:8a:a2:b2:a5:df:01:3e:5a:02:a4:a1:61:
89:7f:07:ce:f8:99:bd:88:f1:54:0a:26:65:bb:22:
69:66:01:53:67:56:42:3a:4b:67:5c:0a:63:d8:85:
d0:e0:90:58:29:39:81:13:96:f1:ca:37:1b:88:28:
04:3e:ff:e8:31:03:dd:8b:1b:ee:2c:65:25:69:de:
94:6b:09:b5:de:a7:d3:b1:f6:c0:7d:36:59:2c:a6:
1e:38:32:46:70:c3:13:d4:99:85:9f:a1:6b:9c:be:
3f:14:12:15:70:c5:8f:aa:2a:0d:3d:9a:30:5d:77:
65:e9:1c:e8:92:e2:b3:c7:40:ba:9f:87:ef:76:53:
a8:0b:34:45:0f:10:2e:3f:68:05:42:b9:56:29:62:
aa:6e:a9:ca:73:47:d1:3e:64:9f:d2:35:02:89:92:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F3:DB:FA:28:A9:AE:D1:E3:E5:43:65:E3:15:D7:C8:A8:21:BF:6F
X509v3 Authority Key Identifier:
keyid:07:22:44:B8:ED:D1:16:CF:58:A6:71:3E:F7:B6:6F:5D:3B:8F:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:23:45:bf:d0:83:1d:1c:a4:9b:38:fe:78:e3:e5:7d:1f:87:
97:d3:09:de:4a:56:19:03:ac:b6:89:86:88:3a:c4:56:b5:3e:
4d:80:bb:94:d2:c8:f7:37:1c:88:c3:35:0f:97:62:1e:ec:03:
ff:8e:27:5b:4c:ae:e0:cf:2e:bd:c5:50:1e:23:b1:fe:e2:e8:
7b:c8:1c:5b:74:33:d8:53:43:97:7f:91:b1:1b:40:35:c1:68:
d8:79:89:f8:49:1d:28:dc:d8:1d:6d:00:7d:7b:24:8b:90:e2:
59:84:83:ec:5b:44:ae:0b:47:77:1a:47:b2:e7:7a:c6:f5:13:
26:26:72:ec:7f:25:40:04:17:56:c6:52:3f:9c:88:d1:f8:9d:
ac:1e:11:0c:f8:b2:a1:d0:90:0f:cc:5c:fa:eb:93:af:a6:5b:
b9:01:1d:7a:4e:fb:d2:01:4d:90:6e:ce:64:54:58:8f:b2:5a:
5a:65:d8:09:fe:3a:fb:55:57:1b:6d:70:f4:1e:5c:d4:3d:70:
84:ac:9c:c5:f4:91:09:f7:0f:f9:3e:54:61:cc:9f:97:3a:7c:
94:8e:8a:9d:bb:0e:38:76:44:49:79:94:74:26:7b:bd:28:fd:
a2:89:b1:72:47:4d:6f:f1:60:0f:74:e8:38:d4:9f:00:27:1c:
30:a6:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:57 2026 by rpki-client