Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: DFZ8f+zl79yRxCVxbGGolOi+uEloBysWOvp+bODYdCo=
Subject key identifier: FD:9B:B6:6D:77:51:9F:56:3B:48:11:11:70:37:CD:39:32:1C:20:FA
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019EBEB5E12EF72897E9ACA5670F3799E084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 14B9
Signing time: Sat 13 Jun 2026 02:00:51 +0000
Manifest this update: Sat 13 Jun 2026 02:00:51 +0000
Manifest next update: Sun 14 Jun 2026 02:00:51 +0000
Files and hashes: 1: IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa (hash: o2L90zF16GoErXoUlB+6z8RKE6i50ZTOjxl70b94zb4=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: 3O3oWPECf4Oz5YPJ3EhM3+yaQ4NBA/J1WkNYwVBA+Z8=)
3: hwijRhZ95zu2fzBu0boOesOms6U.roa (hash: HDiWzBkayEcGgyJWBbNXaqDrPFIhI/bMMXg8al08Sh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:e1:2e:f7:28:97:e9:ac:a5:67:0f:37:99:e0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Jun 13 02:00:51 2026 GMT
Not After : Jun 14 02:00:51 2026 GMT
Subject: CN=fd9bb66d77519f563b4811117037cd39321c20fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:13:17:17:13:b1:95:1e:56:02:6a:47:ec:
01:38:c9:f2:d1:44:2d:17:3c:ac:ac:ac:b9:b2:d4:
2a:cb:61:53:d0:f6:03:37:04:e1:ce:b8:a7:ca:0f:
a3:7b:2e:3a:35:75:1d:c6:a8:92:46:e1:ae:b7:87:
02:83:bf:ae:9a:06:5a:7b:37:e1:88:6e:43:18:69:
3c:91:a0:b5:62:82:21:41:f7:dd:0c:10:cf:f6:8b:
62:ba:9a:2f:26:e8:7f:91:ac:62:15:61:6b:1b:4d:
48:a9:dc:13:b4:d5:62:68:3a:5e:5f:33:69:9b:17:
ec:89:57:9a:7b:33:55:11:e7:a8:18:9f:8e:7d:8a:
5b:47:4e:25:a2:21:90:1c:04:bd:82:e7:bb:43:06:
40:37:f7:a6:0f:aa:53:bc:f2:ee:ff:2d:3e:69:d9:
35:c6:79:af:7d:73:c9:32:30:90:80:69:62:ab:da:
17:1c:14:37:40:a4:be:25:78:32:70:b1:14:11:5c:
3b:1b:2f:38:a8:63:f4:8e:3a:db:92:42:77:6e:ff:
12:f2:f3:c8:d9:fa:bf:5e:25:7d:c8:64:79:d4:de:
79:52:22:59:19:6d:ae:1d:f0:ff:74:e9:04:9c:35:
07:b5:7c:17:c4:1a:18:03:45:e7:67:d7:93:11:f3:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9B:B6:6D:77:51:9F:56:3B:48:11:11:70:37:CD:39:32:1C:20:FA
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ac:16:72:ca:92:e8:82:a5:2c:7e:a0:51:b7:5f:c8:f7:e7:
97:a0:cc:7f:88:01:f7:23:8f:bf:1e:cd:50:61:da:dd:16:44:
9e:5d:ac:5b:a5:e2:75:d7:64:8a:6e:58:92:e0:18:51:3e:eb:
55:1d:dd:e0:77:d7:db:a8:e9:5f:13:33:c2:33:e1:f0:f5:a5:
30:f9:fa:e2:68:f7:5f:ff:3f:42:48:2d:2f:31:82:f1:cf:e9:
c1:cb:ca:1a:94:cd:24:9d:3e:d2:13:5d:3f:0a:34:e2:bf:a7:
cd:4f:af:5a:6b:e3:6e:bb:2a:ac:a9:53:92:26:76:d3:7d:24:
dc:78:c8:26:8b:9d:42:40:23:3d:e6:b4:56:e3:14:81:ee:ef:
64:b0:b3:2a:e4:5d:f6:13:bf:00:06:55:09:bd:9b:27:f5:2c:
52:b1:dd:20:e0:0d:31:b6:e2:ab:2a:a5:cf:ac:5e:54:0f:65:
24:e0:4f:56:a7:19:4a:a4:3f:18:3a:72:88:be:e6:aa:ff:a9:
d2:d7:0e:f7:46:6a:5b:ed:a3:c1:8b:80:c0:ef:bf:10:38:e9:
93:34:56:cf:73:65:65:3b:93:c9:30:75:52:ea:5a:0c:91:26:
2e:1c:47:b2:f3:be:d9:99:f3:25:3f:ce:42:bf:bb:1f:bf:36:
02:44:38:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+teEu9yiX6aylZw83meCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODAyM2EzODE3ZDUwMjE1MWZiZDA0ODQ0YTdjM2MzNWVl
OTliNDMwHhcNMjYwNjEzMDIwMDUxWhcNMjYwNjE0MDIwMDUxWjAzMTEwLwYDVQQD
EyhmZDliYjY2ZDc3NTE5ZjU2M2I0ODExMTE3MDM3Y2QzOTMyMWMyMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mwTFxcTsZUeVgJqR+wBOMny0UQt
FzysrKy5stQqy2FT0PYDNwThzrinyg+jey46NXUdxqiSRuGut4cCg7+umgZaezfh
iG5DGGk8kaC1YoIhQffdDBDP9otiupovJuh/kaxiFWFrG01IqdwTtNViaDpeXzNp
mxfsiVeaezNVEeeoGJ+OfYpbR04loiGQHAS9gue7QwZAN/emD6pTvPLu/y0+adk1
xnmvfXPJMjCQgGliq9oXHBQ3QKS+JXgycLEUEVw7Gy84qGP0jjrbkkJ3bv8S8vPI
2fq/XiV9yGR51N55UiJZGW2uHfD/dOkEnDUHtXwXxBoYA0XnZ9eTEfN3YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2btm13UZ9WO0gREXA3zTkyHCD6MB8GA1UdIwQY
MBaAFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEt
YjUwOTQ0OTEzYWJmLzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEtYjUwOTQ0OTEzYWJm
LzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKwWcsqS
6IKlLH6gUbdfyPfnl6DMf4gB9yOPvx7NUGHa3RZEnl2sW6Xidddkim5YkuAYUT7r
VR3d4HfX26jpXxMzwjPh8PWlMPn64mj3X/8/QkgtLzGC8c/pwcvKGpTNJJ0+0hNd
Pwo04r+nzU+vWmvjbrsqrKlTkiZ2030k3HjIJoudQkAjPea0VuMUge7vZLCzKuRd
9hO/AAZVCb2bJ/UsUrHdIOANMbbiqyqlz6xeVA9lJOBPVqcZSqQ/GDpyiL7mqv+p
0tcO90ZqW+2jwYuAwO+/EDjpkzRWz3NlZTuTyTB1UupaDJEmLhxHsvO+2ZnzJT/O
Qr+7H782AkQ4Uw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:17:17 2026 by rpki-client