Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: za4wt1atdWPpajyG9rk8J0eZRXc+1C5uNfd9B4G5rKo=
Subject key identifier: A7:A0:16:BA:59:0D:29:93:00:AA:5E:C8:DC:26:99:C0:B2:24:D7:1F
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019CAAFD1A75576DB5123FC8596E4EABA414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 13A5
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa (hash: o2L90zF16GoErXoUlB+6z8RKE6i50ZTOjxl70b94zb4=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: HYs8mg+6yhOM7axwSYzkOkkb0yKJhqbfrbMlX/BTPh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1a:75:57:6d:b5:12:3f:c8:59:6e:4e:ab:a4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=a7a016ba590d299300aa5ec8dc2699c0b224d71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:5c:3d:bd:d0:22:d3:fe:f6:72:a9:83:24:
9c:65:aa:0c:b6:76:e7:61:0c:c3:18:f7:c9:32:79:
69:00:2f:bc:d9:c4:d2:a8:f9:51:fc:7c:e2:6c:1a:
3d:37:af:17:b7:e0:dd:80:e7:de:06:7f:fa:ad:4b:
30:5f:6f:5e:61:5c:b4:93:df:5e:61:85:a2:39:c3:
d9:0f:96:74:86:e8:b3:c3:37:db:12:63:90:e0:9b:
90:e1:3f:f1:05:4f:23:50:a7:ca:4e:14:0b:db:aa:
7a:21:f6:d7:ee:41:01:b8:9a:6d:84:e3:50:41:22:
ad:22:2c:00:fb:fd:e2:c5:01:93:23:cb:73:78:61:
21:27:be:e5:d1:e0:38:91:ce:ac:75:75:0b:e7:08:
76:20:5b:ee:d1:b4:a7:7d:8b:68:94:2d:d3:45:52:
03:05:d1:54:eb:94:a7:9f:dd:ba:eb:e2:a4:be:46:
65:ee:b7:6f:20:b2:2a:ff:ce:ca:d2:56:b1:86:74:
f2:0b:f4:57:53:cb:78:d2:8d:8b:fb:6c:4d:fe:1d:
a3:59:e5:9f:5b:f1:49:62:07:53:8d:f0:8f:38:21:
4d:fd:be:f6:60:df:2e:5b:31:76:8c:71:49:fb:6d:
b3:d3:78:9b:2f:37:3c:e1:7d:c0:67:e7:35:83:b0:
95:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A0:16:BA:59:0D:29:93:00:AA:5E:C8:DC:26:99:C0:B2:24:D7:1F
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:06:8d:84:8b:b8:e6:3d:72:42:e1:eb:c5:2f:b8:e2:e4:43:
90:37:5e:c6:64:48:60:c8:52:01:75:03:53:a7:c2:ab:b2:a6:
bf:14:fd:fa:4b:c3:0c:43:65:87:0f:ba:ee:d3:5f:df:7d:4f:
ba:af:22:0c:78:f9:9e:82:3c:74:b0:83:d6:9f:c9:66:1d:4c:
22:7f:42:26:d4:d1:4c:84:22:b1:7c:5f:88:a3:d5:4e:99:db:
a3:92:e7:a9:ce:2f:5b:5f:12:57:9b:af:6b:b1:08:ad:8e:2a:
a1:c2:4a:19:fc:03:32:12:04:40:c0:1b:b3:18:dc:a4:6f:a3:
b1:b4:87:28:ad:c5:89:00:56:e1:1a:3a:c7:5c:23:93:62:b0:
3e:76:2d:d7:a2:49:0b:d9:7c:3a:4f:8e:3d:56:d7:b8:5d:36:
87:dc:93:df:46:6c:fd:aa:5d:18:7d:79:1d:f7:cc:60:b4:32:
75:ce:14:8d:2e:df:15:22:f7:b6:9e:44:38:a6:ca:90:54:b0:
d7:ee:c9:20:dd:74:22:5b:e2:e0:81:6d:e1:c9:80:b4:30:49:
61:42:66:31:de:69:71:16:7c:06:7f:06:ad:e1:02:27:14:a6:
3e:d6:73:4b:a5:07:eb:40:16:6c:fe:57:c6:1f:23:9c:e8:9d:
dc:22:50:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:39 2026 by rpki-client