Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: 3nazzBxzs4V3MqHPZLcHfxlHEO3109sqZQ0Mu4Bg/3Q=
Subject key identifier: 7C:D9:40:40:7A:0B:D2:BC:36:09:1D:F9:B1:3F:94:DC:38:CA:17:A8
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 01A0C44477F6EDF98AA02FFCD5B4CA3F24CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 17A0
Signing time: Mon 21 Sep 2026 14:00:16 +0000
Manifest this update: Mon 21 Sep 2026 14:00:16 +0000
Manifest next update: Tue 22 Sep 2026 14:00:16 +0000
Files and hashes: 1: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: CPcPsFOOEEMpzyd/G8SHLRIsm9RtaXEXciV2f8rTvjU=)
2: T6YNdFIaF-czM-g1VhpOgA_jz2g.roa (hash: FtUCQo9ogO2LSRjNlogGTjSuxhZ4zAwyRhfB5dWUMs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:77:f6:ed:f9:8a:a0:2f:fc:d5:b4:ca:3f:24:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Sep 21 14:00:16 2026 GMT
Not After : Sep 22 14:00:16 2026 GMT
Subject: CN=7cd940407a0bd2bc36091df9b13f94dc38ca17a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:28:35:6b:b9:28:ad:6d:b2:81:94:64:2a:
c2:d7:db:b3:d4:9c:15:79:6a:93:a8:0f:d3:84:f6:
11:ff:71:e3:5e:89:70:59:9f:66:c4:6e:1f:74:87:
33:19:c4:bf:a6:5d:60:1a:be:aa:8b:3c:21:fb:74:
4d:16:cc:09:f7:96:03:30:f6:fa:8c:38:4d:6b:80:
34:96:b1:09:a6:82:35:b8:c2:92:37:d8:9b:c9:b8:
fe:ae:a3:1f:98:fb:45:d3:3f:3d:db:58:9b:b4:a7:
0f:4a:fc:6f:36:29:8b:57:ec:c3:2a:90:aa:53:2d:
86:12:bb:79:55:09:f4:b6:52:8d:b3:cb:f4:11:db:
2c:b2:72:11:bd:ec:16:34:ca:b5:82:32:f6:4b:0c:
cb:2a:22:ec:5e:13:c9:a9:34:03:ca:56:62:f6:ee:
7a:f3:81:a2:74:46:ee:97:b9:f8:45:77:4e:8e:0c:
f0:da:da:17:1e:22:ea:e7:25:d6:fe:bd:89:46:b9:
c3:ba:eb:9a:39:73:3c:16:48:ce:d3:41:cf:0a:3c:
a1:c2:c3:03:ff:7e:8e:cd:89:c1:57:af:ae:5d:78:
7f:e6:0a:01:d9:d8:84:2d:4c:89:3c:1c:a8:40:5c:
f9:d0:83:b0:43:1a:24:f7:92:72:ca:eb:98:2a:ae:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D9:40:40:7A:0B:D2:BC:36:09:1D:F9:B1:3F:94:DC:38:CA:17:A8
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ac:52:13:c4:ad:b0:ba:b7:a5:70:41:1b:5c:89:5e:ed:1c:
7c:79:4f:83:c1:55:f4:97:01:f8:a0:62:12:7e:9d:23:cf:62:
ce:37:60:4d:d9:33:00:b5:ff:fe:c1:e4:e3:48:4c:4f:f9:5c:
41:9a:be:f5:58:7e:e1:8d:c5:32:0f:3b:d4:77:71:30:fe:b4:
2e:8d:f1:1b:13:ad:b5:d5:64:55:fd:a7:d9:73:5e:dc:f8:47:
83:bd:98:66:3e:9c:d1:bd:69:25:99:e5:4a:f4:a7:28:21:81:
03:39:b5:8b:b3:ed:8a:b5:83:9b:08:24:a9:61:5c:2f:41:92:
06:ea:50:f7:a7:5f:e9:b1:e0:cd:ad:f6:c7:29:4b:32:79:a1:
48:67:a8:49:30:eb:75:1a:17:11:2b:c2:84:02:9c:af:05:f8:
be:da:ac:f2:bb:8d:0f:97:ab:07:d9:9e:76:3d:dd:d4:b0:db:
06:bf:e2:71:5d:71:86:b4:9e:dd:14:cd:cf:fc:25:6b:99:8a:
69:43:6d:c0:f4:0f:cc:98:57:fe:95:4b:0d:4a:aa:a1:19:f3:
c1:bd:cd:7e:40:6b:02:17:5e:34:37:65:9c:8e:c6:69:47:6f:
3f:82:10:63:89:17:47:3a:73:56:62:6e:dd:b0:90:ad:4d:b6:
f5:b4:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:18:02 2026 by rpki-client