
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
File: biCb10rb00nQEq8KpjDR_oZpxy8.mft (raw, json)
Hash identifier: lJ7bNyNRpiu0RIyj8S4gRDnkoYXjIeiQPxQf0zAcHO4=
Subject key identifier: 04:CE:9E:1D:33:1E:EC:4C:75:77:9D:06:64:50:06:29:E9:B9:0C:18
Authority key identifier: 6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
Certificate issuer: /CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
Certificate serial: 019F84FAEFEE0EBDFCB1B46258B441E4BC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
Manifest number: 12
Signing time: Tue 21 Jul 2026 14:01:05 +0000
Manifest this update: Tue 21 Jul 2026 14:01:05 +0000
Manifest next update: Wed 22 Jul 2026 14:01:05 +0000
Files and hashes: 1: biCb10rb00nQEq8KpjDR_oZpxy8.crl (hash: Cyz0OJXUy54pdlJenkfXsEjYRcblBxzKdsPy0nv8Iw0=)
2: gVsDXRrQxcRN9YXzPmKoZtqqxtg.roa (hash: NCJiLrBZtffVOZc4ol0jkKNp/1gSMV3KomI3oO87hZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:ef:ee:0e:bd:fc:b1:b4:62:58:b4:41:e4:bc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
Validity
Not Before: Jul 21 14:01:05 2026 GMT
Not After : Jul 22 14:01:05 2026 GMT
Subject: CN=04ce9e1d331eec4c75779d0664500629e9b90c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:f7:98:93:c3:a5:44:e9:d1:c6:ab:14:d0:
3c:3a:40:cb:a8:f4:89:56:42:32:a2:e5:bf:f3:f8:
4b:fd:80:ce:c6:3f:d4:b6:78:80:f5:fb:11:02:8d:
cd:c1:e6:91:b2:87:6f:83:a9:85:20:5f:34:5d:a7:
53:0e:f1:b9:32:f9:f8:d7:e9:96:07:cf:02:bc:a5:
fc:d5:ce:d6:60:d6:fc:b2:da:b9:50:a2:f2:0f:bd:
f3:26:97:11:52:b2:a5:e7:f9:0b:0c:d3:4b:14:54:
32:27:e7:8e:77:cb:45:52:18:92:60:09:79:9b:9c:
47:58:d7:b4:8e:8a:ad:d2:ca:60:c2:47:a4:6d:4e:
1a:ae:3e:24:c5:62:60:86:34:75:6a:c0:b4:75:0a:
02:86:b6:a6:3d:92:fb:55:a3:0a:ed:fb:2e:af:08:
43:ef:31:ef:b8:bf:71:e5:56:a5:5c:7f:1e:d4:12:
33:a0:6b:90:3e:e6:45:c8:03:3d:1c:0e:76:8d:9f:
43:83:2a:7b:78:20:b7:e7:e7:f6:a0:05:c0:d3:3b:
d8:78:1d:4e:f5:72:a9:a9:9d:be:6e:e7:20:53:7d:
af:74:2c:74:b5:19:c3:80:01:c1:d5:14:e4:21:d6:
b8:aa:23:c0:60:6e:6c:f0:0d:75:a9:f7:8b:f8:a4:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CE:9E:1D:33:1E:EC:4C:75:77:9D:06:64:50:06:29:E9:B9:0C:18
X509v3 Authority Key Identifier:
keyid:6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:73:76:1b:c9:80:51:6f:b2:18:40:0d:f7:35:54:6e:95:45:
d6:ca:e6:4c:58:f6:3e:99:8a:b9:59:21:4e:fb:f0:03:ab:1c:
9b:d8:5e:8c:88:22:f2:c1:0d:c7:26:ba:13:24:31:51:a6:f6:
c9:e5:70:b2:dd:73:38:bd:c7:3b:97:d9:9a:6f:46:e8:75:af:
26:d8:c2:44:f5:30:84:17:67:ff:1d:e7:13:d8:f1:2f:85:9f:
12:6c:d6:50:c1:c7:65:ad:a2:a6:fb:97:87:a2:85:eb:bd:07:
ef:12:a3:01:e6:95:12:30:c4:94:ab:9c:57:3c:37:d4:92:a5:
30:33:d4:c8:d2:50:74:d8:0b:79:72:50:51:bc:93:78:f5:49:
97:6e:73:92:8c:63:0d:09:bd:9e:a7:19:14:c3:49:fe:82:6c:
29:1b:92:38:82:77:b4:51:4a:e6:b8:f5:4b:c2:cb:88:0e:91:
69:d4:35:49:03:bc:f9:9e:60:96:90:76:dd:74:77:24:91:b3:
ac:f8:d2:d8:45:d4:c2:90:95:1c:32:42:de:1d:c9:4b:2f:a5:
8c:6a:c4:e2:d2:17:7b:e2:a0:f7:78:46:be:ed:0d:a8:8b:cf:
e1:8a:48:08:60:d2:67:9b:61:63:e1:b9:24:b3:5a:74:ff:23:
99:89:67:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:01:47 2026 by rpki-client