Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: G8CPnBMnO+GnxPFKk0pPxR74STnBOCsnZsIxaj0DDVU=
Subject key identifier: 3D:E4:76:17:B1:B8:4F:F1:4E:AA:AE:3B:F3:77:F5:2D:2F:37:73:95
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 019CAA585E84D8530759CA0F059B5E5BE5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 157A
Signing time: Sun 01 Mar 2026 17:00:43 +0000
Manifest this update: Sun 01 Mar 2026 17:00:43 +0000
Manifest next update: Mon 02 Mar 2026 17:00:43 +0000
Files and hashes: 1: 0JPqCz5cVo8rTb1eJx0gidaWu88.roa (hash: SDGEZvOiOT/nixCGJaFSNPktvCrQB07+Pf6zV5KlOY4=)
2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: lrx1b95C2z484bekECHZanNSpYtanFqNNXyjtRVxd5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:5e:84:d8:53:07:59:ca:0f:05:9b:5e:5b:e5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Mar 1 17:00:43 2026 GMT
Not After : Mar 2 17:00:43 2026 GMT
Subject: CN=3de47617b1b84ff14eaaae3bf377f52d2f377395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:88:e8:21:1a:ae:f3:d4:be:97:e4:29:10:
35:74:25:e2:90:e7:7a:20:39:a1:ea:4f:b5:c8:15:
b7:03:5b:53:f4:c1:13:4e:c9:2f:c4:97:e7:71:f4:
86:e1:72:72:c3:c4:13:1b:b8:96:e0:a8:3c:8a:17:
13:3b:cd:5d:35:ae:bd:cd:03:db:43:dd:ce:d9:f4:
c5:6b:c5:e4:69:3a:68:f8:9f:dc:c9:27:90:b5:0c:
70:9a:be:ce:81:8b:c5:71:16:aa:d4:f8:74:f4:d6:
95:bc:fd:ff:cb:89:ed:e6:97:d7:18:09:09:ee:0b:
1f:64:cd:13:a6:17:01:d5:29:ec:6e:02:49:4d:b1:
ac:52:28:fe:b7:8d:93:ae:38:b4:ec:10:5e:09:38:
2e:a7:89:1d:9e:cd:a3:d1:f7:58:89:20:02:9a:d0:
c8:e0:08:b7:ba:42:49:13:88:dc:d6:a4:10:65:38:
65:c8:f6:d2:89:b8:46:22:21:30:9e:89:55:ca:7a:
46:fb:42:73:cd:dc:d4:44:b2:7b:6b:ec:b6:1c:1c:
3b:2c:89:9b:6c:7f:a9:aa:79:12:68:1e:26:83:b5:
ec:f3:53:9b:63:7c:1d:2d:7a:25:eb:55:03:9b:de:
a8:73:96:f4:ce:2d:24:f2:e4:b3:ef:61:7d:e6:16:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:76:17:B1:B8:4F:F1:4E:AA:AE:3B:F3:77:F5:2D:2F:37:73:95
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9c:c3:1f:bf:53:59:58:e5:81:30:77:c6:77:42:b5:ca:93:
a2:c7:2f:ea:58:b7:15:19:57:4d:39:45:24:a8:77:8e:5c:ef:
2a:3c:78:87:ad:e1:3c:73:50:f8:ae:dc:ae:79:04:62:c5:27:
43:76:a1:92:59:32:f5:1f:1e:6e:2b:f7:a0:5d:ce:5e:49:cd:
99:52:d0:df:81:bb:ea:6d:c6:28:80:b9:bd:3c:43:7f:9f:bc:
32:4d:da:26:48:c3:a0:40:d0:e2:1d:9e:ab:79:0a:fd:87:af:
73:ce:3f:8e:1e:60:bd:0f:3b:99:fb:8b:5b:9f:1c:80:47:3b:
00:8c:ff:dd:2b:32:a7:c4:0d:a4:d0:9c:e9:15:d8:08:4b:a5:
34:8a:5a:70:a3:55:29:65:d8:36:e7:6f:94:83:bd:b7:0f:d7:
7c:da:6e:8d:a2:f0:0f:ce:5f:a2:c0:d9:2e:8d:5a:54:3e:0c:
a8:16:e0:cd:95:09:c7:8a:60:29:48:06:e1:22:cd:04:37:8e:
a7:9c:7f:8a:34:cc:9a:b2:90:4a:61:a2:99:59:71:7c:dd:9a:
b5:5b:1c:9a:46:8e:38:bd:a1:1d:93:89:74:eb:bf:ba:65:98:
25:f2:6f:fb:6c:27:14:a0:03:ee:82:6d:f8:9b:a4:d5:1f:ea:
f1:3b:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:46 2026 by rpki-client