Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: d8pz/kkCf6RpMbHBZQJ1DF+tM8Pq3H7wvMHVXv/ElnU=
Subject key identifier: 8F:83:F2:B9:2B:F4:06:5F:71:DC:FC:58:29:59:42:04:38:49:4F:22
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019D9A7503962409C55205C0A2A04C7B9E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 1421
Signing time: Fri 17 Apr 2026 08:00:53 +0000
Manifest this update: Fri 17 Apr 2026 08:00:53 +0000
Manifest next update: Sat 18 Apr 2026 08:00:53 +0000
Files and hashes: 1: IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa (hash: o2L90zF16GoErXoUlB+6z8RKE6i50ZTOjxl70b94zb4=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: ZFfzzP3aLKwCpXGW6QjJqTirKSr6wTrpRc3M1aJDi3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:03:96:24:09:c5:52:05:c0:a2:a0:4c:7b:9e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Apr 17 08:00:53 2026 GMT
Not After : Apr 18 08:00:53 2026 GMT
Subject: CN=8f83f2b92bf4065f71dcfc582959420438494f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:c2:62:a5:c9:83:f4:de:86:58:6a:a8:cb:
d4:9a:5b:fd:e6:dc:92:03:59:60:b8:14:be:01:e9:
51:6c:03:93:eb:3e:df:26:ca:6e:55:27:b1:e4:05:
af:cf:51:60:a3:44:1a:3b:56:8f:ef:64:00:66:45:
f0:39:32:aa:47:22:7e:f6:82:9e:b1:69:d2:24:ca:
83:38:10:7b:29:76:b0:3b:b8:2a:96:68:09:ac:df:
54:33:5c:ca:fe:e9:33:37:22:6b:4e:4e:ee:e3:00:
ae:de:9d:15:01:4b:2e:3b:af:7e:97:e4:fe:26:5e:
11:19:33:0b:c9:5e:01:25:92:c9:27:97:71:ff:f2:
d6:0f:2b:2d:51:e4:c0:d0:b4:28:53:df:f8:69:34:
c7:00:92:08:5d:f9:5f:64:04:73:78:42:93:ed:04:
2c:53:23:d1:85:3b:f6:05:b0:f0:a2:4b:3a:ce:e3:
fb:85:5f:c8:ff:f7:3b:11:f1:c9:35:0e:f0:d8:e4:
43:6d:1f:83:13:0b:1a:02:06:7a:9e:fa:6b:35:02:
f9:15:76:8c:35:8d:59:fd:3a:3d:60:eb:a7:80:ee:
78:2a:81:0d:ac:36:13:a1:87:c4:57:cf:a0:26:08:
8c:66:b0:1a:b0:6e:d5:98:c9:86:88:23:8e:3d:b7:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:83:F2:B9:2B:F4:06:5F:71:DC:FC:58:29:59:42:04:38:49:4F:22
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:3f:9f:b4:57:93:4c:f3:a1:fb:28:64:2a:80:5d:63:c4:
08:aa:39:56:f3:88:d5:43:bc:47:e4:0c:76:14:f4:3e:59:18:
e5:f4:a8:8f:22:87:a2:f6:6f:0e:84:b3:47:58:b3:dc:a4:b3:
42:6b:32:72:96:e5:28:06:2b:94:26:17:b4:06:fd:b5:7a:24:
37:63:b4:3c:fb:34:1f:11:ff:76:73:fa:1d:8f:c1:eb:79:1c:
3a:e1:57:ac:5f:e1:1b:06:1d:ac:09:f2:95:31:22:96:78:8f:
76:a1:97:7d:98:31:00:24:4a:be:20:ea:f5:18:3a:11:f9:55:
51:97:72:5e:91:49:75:76:7f:42:10:92:57:7c:39:77:9d:4e:
80:37:58:76:a7:9a:8d:1f:e7:4c:ec:10:e0:26:2d:eb:bc:a8:
21:24:86:ab:1d:c1:b3:45:0a:15:15:90:fa:91:f6:1a:65:b6:
53:db:1b:ea:f8:37:8f:c4:d3:f1:e7:1b:ad:d3:57:6b:91:c4:
3d:d7:60:21:05:83:62:74:c3:0f:52:be:7b:ef:ba:0c:f8:8f:
1e:34:9d:f5:18:7c:04:69:0c:be:1d:f9:74:e8:8d:2c:83:87:
47:71:34:a3:19:71:92:53:98:3d:f6:dc:56:fc:15:4f:8e:63:
ac:83:91:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adQOWJAnFUgXAoqBMe54sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODAyM2EzODE3ZDUwMjE1MWZiZDA0ODQ0YTdjM2MzNWVl
OTliNDMwHhcNMjYwNDE3MDgwMDUzWhcNMjYwNDE4MDgwMDUzWjAzMTEwLwYDVQQD
Eyg4ZjgzZjJiOTJiZjQwNjVmNzFkY2ZjNTgyOTU5NDIwNDM4NDk0ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbLCYqXJg/TehlhqqMvUmlv95tyS
A1lguBS+AelRbAOT6z7fJspuVSex5AWvz1Fgo0QaO1aP72QAZkXwOTKqRyJ+9oKe
sWnSJMqDOBB7KXawO7gqlmgJrN9UM1zK/ukzNyJrTk7u4wCu3p0VAUsuO69+l+T+
Jl4RGTMLyV4BJZLJJ5dx//LWDystUeTA0LQoU9/4aTTHAJIIXflfZARzeEKT7QQs
UyPRhTv2BbDwoks6zuP7hV/I//c7EfHJNQ7w2ORDbR+DEwsaAgZ6nvprNQL5FXaM
NY1Z/To9YOungO54KoENrDYToYfEV8+gJgiMZrAasG7VmMmGiCOOPbf7oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+D8rkr9AZfcdz8WClZQgQ4SU8iMB8GA1UdIwQY
MBaAFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEt
YjUwOTQ0OTEzYWJmLzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEtYjUwOTQ0OTEzYWJm
LzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq0/n7RX
k0zzofsoZCqAXWPECKo5VvOI1UO8R+QMdhT0PlkY5fSojyKHovZvDoSzR1iz3KSz
QmsycpblKAYrlCYXtAb9tXokN2O0PPs0HxH/dnP6HY/B63kcOuFXrF/hGwYdrAny
lTEilniPdqGXfZgxACRKviDq9Rg6EflVUZdyXpFJdXZ/QhCSV3w5d51OgDdYdqea
jR/nTOwQ4CYt67yoISSGqx3Bs0UKFRWQ+pH2GmW2U9sb6vg3j8TT8ecbrdNXa5HE
PddgIQWDYnTDD1K+e++6DPiPHjSd9Rh8BGkMvh35dOiNLIOHR3E0oxlxklOYPfbc
VvwVT45jrIOR9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:50 2026 by rpki-client