Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
File: By4pytat0iohtWIVEYeEHI9T8uU.mft (raw, json)
Hash identifier: RWTM8DnkJoeDf1yD+pjHEZK8OAnfBqTdENBPJK0uF9k=
Subject key identifier: 85:6C:7F:44:FC:AB:9A:4D:9A:18:2B:75:E7:ED:A5:44:6A:BC:2C:3C
Authority key identifier: 07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5
Certificate issuer: /CN=072e29cad6add22a21b562151187841c8f53f2e5
Certificate serial: 01A0C58E806D57ED1DAEDA8B7E319F9F48CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
Manifest number: 012A
Signing time: Mon 21 Sep 2026 20:00:45 +0000
Manifest this update: Mon 21 Sep 2026 20:00:45 +0000
Manifest next update: Tue 22 Sep 2026 20:00:45 +0000
Files and hashes: 1: By4pytat0iohtWIVEYeEHI9T8uU.crl (hash: b8+N7Q0OpIMTzMNqSp4HoIsZu4QUQRjeBeyzosMYo98=)
2: NcP6QLbPAGbSnMuOHGBdAIY-8qc.roa (hash: w5wTWXfJi4JyaAkM3S35Sztsv2m7MFD4x5Xkavn1W38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:80:6d:57:ed:1d:ae:da:8b:7e:31:9f:9f:48:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072e29cad6add22a21b562151187841c8f53f2e5
Validity
Not Before: Sep 21 20:00:45 2026 GMT
Not After : Sep 22 20:00:45 2026 GMT
Subject: CN=856c7f44fcab9a4d9a182b75e7eda5446abc2c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:23:46:92:27:df:d6:5c:b2:23:42:4f:8c:
c1:5a:1a:f7:0a:95:df:60:9f:e1:14:ee:5d:3f:66:
1a:a6:53:dd:8d:51:58:f6:da:b6:af:bb:df:81:52:
2a:a9:6c:a7:dc:c8:d1:54:97:25:97:0e:5c:ca:4c:
45:f6:71:57:7e:af:07:e2:da:76:ec:16:be:75:6b:
83:48:08:e0:bc:72:b0:98:6b:69:1f:92:61:3a:18:
d4:90:b5:c2:88:76:6b:8c:6a:00:28:a1:25:e9:71:
4c:31:cc:fe:bc:1c:94:46:ee:0d:3f:a5:07:8b:d0:
ba:a7:67:f3:fc:19:42:81:5c:88:98:29:c5:e0:d3:
ef:0a:ff:53:60:87:08:07:4e:b4:f9:7d:55:52:e5:
5f:bc:e2:d9:35:06:e3:33:c2:49:4d:ad:bb:4f:1c:
25:df:21:93:c3:fb:7b:d5:96:82:37:58:43:0d:09:
80:b2:24:9e:02:bd:c2:52:e4:12:b9:4e:84:34:a1:
0d:91:b6:fa:ed:a0:33:65:6c:44:13:8b:59:0d:71:
62:56:b7:53:92:3b:3d:e5:23:9f:28:ea:27:f4:68:
85:94:e9:be:33:0a:07:d2:96:be:f2:6a:fe:c2:e7:
66:80:7e:5c:b3:c2:46:91:9c:f9:53:19:cf:d0:62:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6C:7F:44:FC:AB:9A:4D:9A:18:2B:75:E7:ED:A5:44:6A:BC:2C:3C
X509v3 Authority Key Identifier:
keyid:07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1b:c6:cf:26:2a:eb:59:5e:aa:eb:c2:79:45:42:ea:a8:9f:
ac:a9:e6:f5:b8:93:ec:ec:4b:a0:75:5e:b6:9a:06:5c:a7:bb:
67:29:94:80:f0:7c:91:d1:6f:51:d1:df:e0:e7:a3:47:42:69:
e6:78:9c:a2:37:10:c0:64:d1:cb:71:7f:52:38:dc:2d:77:46:
e0:24:0d:cb:62:97:66:b6:2d:17:e5:a9:2b:c6:c0:9d:0f:81:
71:3f:60:43:15:04:03:40:25:06:91:5c:60:70:cd:89:ba:00:
f8:a3:e3:8d:5e:69:8f:db:39:48:58:54:4f:97:77:88:cc:d8:
34:4f:cc:90:ca:f1:33:ee:09:88:32:e3:4d:0d:30:ed:9b:78:
dd:c8:f6:9f:c6:a9:3c:10:09:63:b1:f3:f3:0d:1c:31:44:7d:
51:95:49:ee:51:9c:dd:27:69:a8:2a:87:2a:75:d5:23:09:e0:
6c:91:77:1f:8b:86:98:c2:fb:5d:a4:42:19:66:4c:6c:46:bd:
2a:50:23:72:e9:15:88:03:47:d6:ff:2b:ad:89:34:11:33:d8:
11:4a:b7:dd:ac:12:ce:0a:30:7c:0b:32:fc:d9:8f:cc:a6:a8:
3f:68:e9:2d:5f:6f:a7:c0:1f:bb:3d:91:fa:b5:11:df:4a:9f:
2f:1f:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:44:09 2026 by rpki-client