Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier: z7ZpPNPba0U383wugCabllru1sfb2geBhDx6wi8eS+k=
Subject key identifier: AB:C8:35:B9:C9:D0:FC:B2:83:2E:1C:6F:40:58:B7:65:84:D3:D4:AB
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 019CAAFD86851C461518613CC24A972671B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:01:07 +0000
Manifest this update: Sun 01 Mar 2026 20:01:07 +0000
Manifest next update: Mon 02 Mar 2026 20:01:07 +0000
Files and hashes: 1: JfKoDtrhJ-i-G9aVy_3EyZTHhdQ.roa (hash: YvPO7VlYOdBTaEg9nBYo6BImKnaR242b+DsMusahNWM=)
2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: gBpua9Q4/oIPLgEZDyHQZsU/ioU57m4ctzJG8qwmiJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:86:85:1c:46:15:18:61:3c:c2:4a:97:26:71:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Mar 1 20:01:07 2026 GMT
Not After : Mar 2 20:01:07 2026 GMT
Subject: CN=abc835b9c9d0fcb2832e1c6f4058b76584d3d4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:db:e7:01:23:19:e6:7b:81:91:f9:69:20:
8b:46:81:d2:89:5c:ec:44:61:e7:49:84:97:b4:2d:
d0:ca:8f:0d:e3:93:ae:fd:73:b9:29:54:1e:e1:18:
89:aa:3c:ab:6c:5a:7d:ce:af:e7:90:8a:77:8a:a7:
2d:e6:30:be:06:44:d9:59:e3:3b:10:45:d9:53:38:
08:5e:f0:5e:a4:59:f7:fb:4d:68:d1:77:c5:8d:bf:
59:36:68:eb:2f:a2:1d:a1:e0:a5:9c:42:54:ce:95:
d6:57:ef:a3:ab:7a:f8:55:61:f6:16:64:21:93:c7:
47:4b:46:a7:d0:03:0c:cd:d1:d1:3b:0d:e8:45:a4:
94:de:30:62:52:9c:0d:9d:bc:45:21:db:84:1c:5b:
80:45:5c:0a:71:3d:44:18:30:c8:27:89:cc:a1:d2:
6a:7c:92:99:0c:8f:99:ef:d1:21:f6:52:4a:46:15:
5b:d5:55:b3:7e:70:24:df:35:ae:3c:4c:ca:73:e0:
3f:fb:25:df:71:1d:a7:d0:00:20:9b:2a:49:b9:e7:
f7:cd:55:9f:9a:4f:b8:b2:8b:42:37:bd:29:11:6c:
5a:aa:f4:83:01:38:55:ae:d2:47:13:02:96:b7:b9:
5e:e4:5f:65:b1:46:03:e0:6e:da:5f:5b:07:6d:5c:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:35:B9:C9:D0:FC:B2:83:2E:1C:6F:40:58:B7:65:84:D3:D4:AB
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2c:a2:19:93:0b:61:2b:1a:70:48:d4:69:e0:e2:6c:dc:86:
16:31:27:00:63:d8:f9:a0:f6:b9:ca:5a:be:28:97:39:c7:96:
73:f3:7e:43:2e:77:d7:e4:40:64:5d:25:c2:c1:46:d8:65:a0:
9c:8d:22:7c:21:49:08:bd:99:00:85:8f:e4:72:1e:88:03:e8:
71:f6:54:44:71:15:5f:12:f3:65:0a:ae:42:cf:75:64:e5:06:
28:91:b2:ea:5a:66:54:b7:02:e4:3a:a6:d7:18:3e:cb:33:ff:
d6:17:c4:6d:14:61:d6:fe:4d:c9:5e:14:e4:cc:57:56:5a:1c:
da:1d:2a:4a:f9:cd:aa:e8:2d:8f:d7:2c:38:01:67:90:d0:e3:
6e:fb:cf:fb:ff:4f:03:4a:c4:5e:f2:a2:2f:fe:e4:62:7b:64:
20:a0:27:9c:87:b0:80:68:99:81:20:29:39:be:ee:12:4d:7b:
f1:c3:a5:7d:eb:ff:0b:39:84:c9:40:aa:b4:a0:a5:f3:ef:5b:
8d:5b:0f:7b:e3:1a:7d:63:1e:70:a0:70:91:06:90:6e:f9:14:
63:74:40:27:0e:f8:18:05:36:16:51:b6:5a:d8:f4:70:11:9a:
01:1c:4b:95:81:1d:ab:62:a4:60:d8:e3:93:3f:07:50:de:98:
71:54:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:30 2026 by rpki-client