
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
File: By-BXnwWB9C9Ozmfupo1P-xUQxU.mft (raw, json)
Hash identifier: +TBR2GapyCuyjyiAf2k+Q+TsXSQOd5nHaHWarR5PS0E=
Subject key identifier: E5:2D:31:BB:8D:2F:80:EA:9D:DA:00:AD:B7:D0:48:C4:FF:BD:43:F0
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Certificate issuer: /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial: 019CACB4F401FEABB1A95EEE671F0617AF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
Manifest number: 45
Signing time: Mon 02 Mar 2026 04:01:05 +0000
Manifest this update: Mon 02 Mar 2026 04:01:05 +0000
Manifest next update: Tue 03 Mar 2026 04:01:05 +0000
Files and hashes: 1: 0UcCLrH31OoiY9vn-H25YX85GRk.roa (hash: zsHhkNtCwbXR/M7zDVNWDz1iSQbLW5ZpHFri9xWmZ30=)
2: 39UtiwRanfdVAezzQQpEd13UB08.roa (hash: YxE7Edc+a6NH5tSiYV8kT6sjjgpdiQ4CkWE/R+15ILI=)
3: 6BtVcQ_ZYtduv1XLafyOLEJzY0k.roa (hash: Xu4eAyvLY8fcHbJYD67JsRTonGok8ykhcr1+fNZCbpw=)
4: By-BXnwWB9C9Ozmfupo1P-xUQxU.crl (hash: HefNF3lh2EVGV+qK1yi3pq3pMHiKTEWlIw7+jdNZUwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f4:01:fe:ab:b1:a9:5e:ee:67:1f:06:17:af:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
Validity
Not Before: Mar 2 04:01:05 2026 GMT
Not After : Mar 3 04:01:05 2026 GMT
Subject: CN=e52d31bb8d2f80ea9dda00adb7d048c4ffbd43f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:06:4f:53:5d:ff:4f:70:5e:73:dc:ed:0c:8c:
15:95:5b:cf:bb:2c:dc:c0:7f:01:eb:e6:14:74:03:
02:0b:9b:8d:90:8b:0b:dc:a9:40:14:55:5c:c8:d3:
cd:b0:64:b6:98:01:b1:8b:89:e3:4b:21:05:6c:8c:
0a:98:9a:7e:42:98:26:24:6e:6b:b8:10:6f:b6:3b:
e9:bc:db:46:1d:0e:93:43:18:62:79:2e:96:3e:9e:
d6:79:2e:38:9a:34:2a:99:6d:ff:78:ff:b7:e4:c8:
48:a9:21:ad:fb:7f:88:49:0c:1f:c9:cb:0c:ae:7c:
11:03:39:6c:f4:1b:80:10:cc:bd:74:c6:cb:e1:77:
bd:84:e1:c9:6d:75:ce:e1:ed:a8:96:3e:8c:a4:c6:
ed:3d:49:71:d0:6d:40:ae:aa:ab:e6:50:2c:eb:f9:
93:d3:87:d9:79:63:73:4b:de:bd:1f:9a:82:23:13:
87:8b:37:a4:11:15:91:a0:7f:5e:9a:49:ef:ce:1b:
fb:d6:1f:69:c0:ea:9f:45:dc:af:69:54:25:3b:83:
f9:69:5b:df:85:95:d7:6c:2f:f1:12:9d:96:f6:7a:
39:28:fd:d5:68:24:b9:01:7d:a4:89:18:26:2b:8b:
33:12:41:e4:30:1a:77:a9:96:78:fa:49:7a:40:e5:
3d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:31:BB:8D:2F:80:EA:9D:DA:00:AD:B7:D0:48:C4:FF:BD:43:F0
X509v3 Authority Key Identifier:
keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d5:45:5d:c2:0e:00:54:10:c8:05:a5:92:12:aa:a2:21:e3:
e7:3b:d7:2e:d0:e4:03:ec:52:2a:db:7c:b6:cc:47:bf:a4:be:
07:c0:a2:e3:c6:15:5f:23:43:f7:0b:c4:cc:0c:14:77:87:3a:
9e:ad:a9:e0:76:61:61:b1:0e:17:0f:53:b4:c8:2a:d9:bf:a9:
b7:24:83:43:5e:a8:05:0e:dd:c5:e7:e7:02:fe:27:7d:43:c4:
94:70:7a:bd:42:77:40:1b:fa:4f:05:3e:29:3f:32:74:80:29:
08:31:67:a0:2c:59:f8:59:bb:71:8b:d8:9e:02:a0:d2:a6:53:
9f:1a:2a:68:d1:0a:8c:37:ad:e4:83:41:cf:32:a5:bf:62:cd:
25:ba:8c:e1:eb:ca:b8:5a:47:55:2c:af:f0:50:44:a4:81:48:
64:06:5d:c6:f2:60:77:a6:b6:a6:28:3e:b1:84:4f:57:62:39:
01:0c:29:60:8e:7c:71:2c:e5:d8:05:f9:a7:36:c6:8c:c3:b8:
59:70:a3:8c:2d:95:56:d5:36:3d:56:d4:92:27:b5:79:a6:ae:
d2:1c:cd:cc:ee:5a:10:f3:f3:93:f6:b8:86:52:dc:b9:1f:50:
ee:cd:5a:87:32:9b:e2:a4:b1:ab:24:f8:ac:b0:9f:f0:a5:de:
70:f1:de:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystPQB/quxqV7uZx8GF69mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MmY4MTVlN2MxNjA3ZDBiZDNiMzk5ZmJhOWEzNTNmZWM1
NDQzMTUwHhcNMjYwMzAyMDQwMTA1WhcNMjYwMzAzMDQwMTA1WjAzMTEwLwYDVQQD
EyhlNTJkMzFiYjhkMmY4MGVhOWRkYTAwYWRiN2QwNDhjNGZmYmQ0M2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wZPU13/T3Bec9ztDIwVlVvPuyzc
wH8B6+YUdAMCC5uNkIsL3KlAFFVcyNPNsGS2mAGxi4njSyEFbIwKmJp+QpgmJG5r
uBBvtjvpvNtGHQ6TQxhieS6WPp7WeS44mjQqmW3/eP+35MhIqSGt+3+ISQwfycsM
rnwRAzls9BuAEMy9dMbL4Xe9hOHJbXXO4e2olj6MpMbtPUlx0G1Arqqr5lAs6/mT
04fZeWNzS969H5qCIxOHizekERWRoH9emknvzhv71h9pwOqfRdyvaVQlO4P5aVvf
hZXXbC/xEp2W9no5KP3VaCS5AX2kiRgmK4szEkHkMBp3qZZ4+kl6QOU9ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUtMbuNL4DqndoArbfQSMT/vUPwMB8GA1UdIwQY
MBaAFAcvgV58FgfQvTs5n7qaNT/sVEMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnktQlhud1dCOUM5T3ptZnVwbzFQLXhVUXhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMDc4MzQtNWZhMy00YjQwLWJiOWUt
NzVlM2NiYjA0YjYwLzEvQnktQlhud1dCOUM5T3ptZnVwbzFQLXhVUXhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hMDc4MzQtNWZhMy00YjQwLWJiOWUtNzVlM2NiYjA0YjYw
LzEvQnktQlhud1dCOUM5T3ptZnVwbzFQLXhVUXhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotVFXcIO
AFQQyAWlkhKqoiHj5zvXLtDkA+xSKtt8tsxHv6S+B8Ci48YVXyND9wvEzAwUd4c6
nq2p4HZhYbEOFw9TtMgq2b+ptySDQ16oBQ7dxefnAv4nfUPElHB6vUJ3QBv6TwU+
KT8ydIApCDFnoCxZ+Fm7cYvYngKg0qZTnxoqaNEKjDet5INBzzKlv2LNJbqM4evK
uFpHVSyv8FBEpIFIZAZdxvJgd6a2pig+sYRPV2I5AQwpYI58cSzl2AX5pzbGjMO4
WXCjjC2VVtU2PVbUkie1eaau0hzNzO5aEPPzk/a4hlLcuR9Q7s1ahzKb4qSxqyT4
rLCf8KXecPHesA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:05:21 2026 by rpki-client