Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File: bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier: IFgSR/yiIehql/6ZfXOD8vMEbNkhNArOsWQNU5GCex4=
Subject key identifier: 4D:D2:BE:CB:1D:4E:48:B3:43:85:97:4B:35:66:4E:12:48:1D:0E:D7
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial: 019CAB343E85EDD98373F6C9A8D1CE44E51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number: 129C
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: Nppx-_HytezaO7OOnUHi3r0aYuY.roa (hash: EooK0hyWHN5rfWystpxx1iBOSlykoNCoHvC6SpxnsDQ=)
2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: S3BvWMGaq58Ym/itj8AUqmZcGWQD35rov3BtaE399LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3e:85:ed:d9:83:73:f6:c9:a8:d1:ce:44:e5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=4dd2becb1d4e48b34385974b35664e12481d0ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:93:5a:bb:c4:50:d5:02:c6:dd:9a:8e:b7:
0d:db:d0:5a:0b:80:68:5e:bd:e9:67:4f:f3:38:86:
58:65:ca:f4:89:35:c5:17:75:1c:db:88:de:8c:a9:
1f:65:b8:ac:c5:12:7f:4a:d7:9e:4c:93:07:13:e9:
da:92:ad:5d:20:03:e2:0d:21:7a:73:92:3f:c1:a8:
eb:00:10:29:55:22:e6:2f:9f:4e:64:c4:d6:6a:ef:
32:3d:a7:48:cb:dc:43:32:b5:79:c7:89:8e:c5:2f:
db:30:96:b6:d8:15:3c:cf:29:0f:02:95:89:90:1c:
38:8f:65:3d:c0:37:25:9e:50:cb:65:fb:42:0a:9c:
01:07:e2:9c:5a:a7:29:a7:cb:25:fb:a6:49:00:96:
8b:a6:03:55:5a:df:ca:ec:a0:11:20:da:40:11:4c:
f3:ad:f6:fa:81:98:8c:d5:40:8d:5f:af:cd:18:37:
c0:91:15:42:ee:40:b3:ac:f6:22:67:87:7c:08:7f:
da:6b:eb:1d:ee:a0:ad:7a:3d:06:4d:ac:42:99:c1:
79:84:dc:a6:17:c0:ce:52:64:1b:72:04:71:7f:ea:
ce:d7:6f:a6:ff:d3:40:ae:f0:14:bb:e7:b7:a4:16:
5f:0a:2a:e2:f0:27:d1:54:7b:90:ce:a9:82:4d:4c:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:BE:CB:1D:4E:48:B3:43:85:97:4B:35:66:4E:12:48:1D:0E:D7
X509v3 Authority Key Identifier:
keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:75:f1:7d:06:2f:1a:47:11:c3:f8:4c:5f:8d:3f:88:73:c5:
11:a2:c9:14:9c:e5:58:b2:73:32:86:69:2d:17:2b:55:a1:a1:
75:4b:e6:4f:3e:2f:07:0a:e0:7a:72:b3:b7:14:68:37:8b:f9:
06:d2:9f:2b:92:e7:9b:ed:b6:22:15:7f:d3:15:6a:aa:1f:52:
d7:e9:e6:d5:63:3b:14:03:a4:cf:bf:4a:93:7b:44:21:55:f4:
5a:8a:1f:95:ca:28:fb:4e:e2:3f:9c:be:86:c7:14:94:28:0c:
a3:2d:bb:a7:a1:38:0e:fd:c7:b1:2c:cd:a1:2c:60:c1:b8:66:
19:7d:5f:71:50:64:71:c5:e6:5c:65:f0:27:b5:2a:f4:8c:a8:
dd:92:89:68:21:b6:ea:3d:3e:64:fd:24:5b:56:53:62:0c:22:
25:1e:ba:35:95:c8:9e:81:1a:2c:df:43:64:23:33:b7:6e:0e:
78:24:20:47:b2:d3:90:70:f5:89:22:67:3f:e5:41:b7:d4:cc:
f6:1f:06:12:0e:ec:35:fb:da:d0:fc:78:ab:b1:1e:54:53:59:
30:49:41:d4:47:71:d2:dd:79:78:b6:49:d4:a1:ae:4c:39:a8:
99:f7:66:3f:5b:d0:6b:e3:ad:ab:c7:5f:57:af:da:31:8f:77:
d1:63:ec:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrND6F7dmDc/bJqNHOROUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODQwYmY4ZjJlYTQ0NmE0N2RiNmM2MzM5MDY2NjdjNjNl
ZDg4NmUwHhcNMjYwMzAxMjEwMDUzWhcNMjYwMzAyMjEwMDUzWjAzMTEwLwYDVQQD
Eyg0ZGQyYmVjYjFkNGU0OGIzNDM4NTk3NGIzNTY2NGUxMjQ4MWQwZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhyTWrvEUNUCxt2ajrcN29BaC4Bo
Xr3pZ0/zOIZYZcr0iTXFF3Uc24jejKkfZbisxRJ/SteeTJMHE+nakq1dIAPiDSF6
c5I/wajrABApVSLmL59OZMTWau8yPadIy9xDMrV5x4mOxS/bMJa22BU8zykPApWJ
kBw4j2U9wDclnlDLZftCCpwBB+KcWqcpp8sl+6ZJAJaLpgNVWt/K7KARINpAEUzz
rfb6gZiM1UCNX6/NGDfAkRVC7kCzrPYiZ4d8CH/aa+sd7qCtej0GTaxCmcF5hNym
F8DOUmQbcgRxf+rO12+m/9NArvAUu+e3pBZfCiri8CfRVHuQzqmCTUw6hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3SvssdTkizQ4WXSzVmThJIHQ7XMB8GA1UdIwQY
MBaAFG2EC/jy6kRqR9tsYzkGZnxj7YhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xMjU5NTktNzQ2Yi00YTBmLTk2ZDMt
YzNlOGVhZGQwMGJhLzEvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xMjU5NTktNzQ2Yi00YTBmLTk2ZDMtYzNlOGVhZGQwMGJh
LzEvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnXxfQYv
GkcRw/hMX40/iHPFEaLJFJzlWLJzMoZpLRcrVaGhdUvmTz4vBwrgenKztxRoN4v5
BtKfK5Lnm+22IhV/0xVqqh9S1+nm1WM7FAOkz79Kk3tEIVX0Wooflcoo+07iP5y+
hscUlCgMoy27p6E4Dv3HsSzNoSxgwbhmGX1fcVBkccXmXGXwJ7Uq9Iyo3ZKJaCG2
6j0+ZP0kW1ZTYgwiJR66NZXInoEaLN9DZCMzt24OeCQgR7LTkHD1iSJnP+VBt9TM
9h8GEg7sNfva0Px4q7EeVFNZMElB1Edx0t15eLZJ1KGuTDmomfdmP1vQa+Otq8df
V6/aMY930WPskg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:35 2026 by rpki-client