Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: 6CztJV1cSpt2wPV4ZAnpPvm9NZehTLrAYn/ALGmG/w0=
Subject key identifier: 94:CB:1F:A3:94:98:4F:BC:0E:08:2A:1E:69:54:E6:24:9E:E0:D2:26
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 01A0C331E42CC890B58EB5A5272441E740AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 15C8
Signing time: Mon 21 Sep 2026 09:00:21 +0000
Manifest this update: Mon 21 Sep 2026 09:00:21 +0000
Manifest next update: Tue 22 Sep 2026 09:00:21 +0000
Files and hashes: 1: BihTx85T_ESHb2zFBIoBZsH3gQg.roa (hash: /c4yJ2wjcspqKTfyrW9dw2FpqsUdzBSrrjQh7X8q2sc=)
2: WY-lTtSR4lgUnNhXebRStC-pRhw.roa (hash: /NGhP1km+JC9FCjg02M4Qh5LmgoXvpkQB9VUdDyzAsA=)
3: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: 7qqS3XM5NwKVUOAIlJ14IsmHiZJA8brcdtlHHUTM60w=)
4: hwijRhZ95zu2fzBu0boOesOms6U.roa (hash: HDiWzBkayEcGgyJWBbNXaqDrPFIhI/bMMXg8al08Sh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:e4:2c:c8:90:b5:8e:b5:a5:27:24:41:e7:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Sep 21 09:00:21 2026 GMT
Not After : Sep 22 09:00:21 2026 GMT
Subject: CN=94cb1fa394984fbc0e082a1e6954e6249ee0d226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:28:2a:3e:bb:49:44:d5:d2:1a:d1:ed:00:94:
52:f6:f1:03:00:93:6b:61:78:8c:d0:3b:6c:10:7d:
7b:65:1c:45:24:ee:cb:be:98:81:d2:72:1b:50:e2:
fb:63:2c:10:82:c3:63:2a:1c:90:87:07:c9:97:74:
f1:6f:92:95:c5:e0:f3:db:63:8f:69:8f:2d:e6:fa:
19:45:1b:db:5d:c0:8d:9c:29:21:26:7a:c4:31:5f:
24:27:77:64:72:ec:ea:1a:b9:53:9e:9b:dd:46:51:
a6:80:92:e7:c6:c4:e3:e2:ac:e7:35:db:36:4f:34:
1d:f8:5c:19:fa:14:16:2e:5b:80:81:7c:b7:3a:f3:
8f:98:62:46:86:f4:b4:a9:4e:e2:cb:eb:83:ee:ad:
f9:2d:c5:c3:83:fa:4c:95:9d:d0:bd:40:3e:1e:87:
86:6b:df:73:77:b4:14:0e:9d:ff:e7:ab:93:13:53:
51:29:d6:66:c4:3a:f0:4c:16:80:09:27:71:5b:92:
15:ce:52:1a:0a:f3:74:5d:aa:58:6d:82:c2:8f:7a:
a8:61:be:27:7e:86:1b:c1:f5:d8:e7:dc:c4:e3:e6:
44:9f:82:7f:8e:ad:f0:01:6d:13:ba:57:fa:86:7f:
8e:5f:bb:ad:d5:bb:f5:57:ff:6d:4c:29:ce:48:fb:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CB:1F:A3:94:98:4F:BC:0E:08:2A:1E:69:54:E6:24:9E:E0:D2:26
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c3:57:f4:51:9d:ad:fc:bb:3a:2a:ea:4c:5a:a6:6e:56:a3:
98:c1:b6:03:eb:fa:34:f2:50:e4:e6:1f:98:69:49:64:24:ec:
8b:08:a7:09:9a:ef:aa:66:64:46:7d:22:f0:7d:5a:57:18:1b:
50:19:58:a9:88:20:43:57:3f:e0:71:65:32:7a:42:73:75:3f:
a6:8f:68:ee:65:8c:bc:9e:71:f1:ff:15:06:c7:fa:55:72:b8:
ea:8e:92:00:6a:f8:96:ed:10:5f:95:1f:2b:04:54:a6:b6:93:
09:37:d8:dd:2d:b8:79:6c:09:1d:48:f3:7e:06:af:96:d7:5b:
6d:d2:87:03:f5:50:f1:10:ff:54:cf:79:77:1b:c3:32:47:e0:
bd:c0:6e:7e:65:ff:51:05:49:32:6c:7d:d5:6f:a0:e2:c5:e9:
63:75:71:75:55:3d:9f:21:4b:35:53:11:13:70:82:78:b2:c9:
83:45:0c:7b:dd:d5:a9:c6:05:66:3a:ef:b1:ca:fa:84:47:64:
5c:28:18:66:5a:c0:92:c7:ae:a8:65:02:fb:3e:bf:61:4e:f1:
0e:58:94:a0:3e:9d:24:13:0e:42:02:0f:73:b6:05:d8:86:2f:
63:aa:d9:78:73:42:fc:d6:34:b9:0b:02:f3:9c:ea:f5:c1:f4:
e2:d8:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:24:05 2026 by rpki-client