Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
File: biCb10rb00nQEq8KpjDR_oZpxy8.mft (raw, json)
Hash identifier: bET2K90n8YRieUswIUg1kydE9DoAsj3GtYK1lCPQrKE=
Subject key identifier: 35:B3:E6:E9:E0:CC:96:1B:51:68:DC:22:B4:9D:8D:2B:0E:CB:1D:7E
Authority key identifier: 6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
Certificate issuer: /CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
Certificate serial: 01A1735D369CFC72D8D7617263127B4AB1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
Manifest number: 0112
Signing time: Sun 25 Oct 2026 14:00:50 +0000
Manifest this update: Sun 25 Oct 2026 14:00:50 +0000
Manifest next update: Mon 26 Oct 2026 14:00:50 +0000
Files and hashes: 1: biCb10rb00nQEq8KpjDR_oZpxy8.crl (hash: BgrtCcaJ3khYViO+H51Dt5s++6TvjBmcUyL9qOWURoo=)
2: gVsDXRrQxcRN9YXzPmKoZtqqxtg.roa (hash: NCJiLrBZtffVOZc4ol0jkKNp/1gSMV3KomI3oO87hZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:5d:36:9c:fc:72:d8:d7:61:72:63:12:7b:4a:b1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
Validity
Not Before: Oct 25 14:00:50 2026 GMT
Not After : Oct 26 14:00:50 2026 GMT
Subject: CN=35b3e6e9e0cc961b5168dc22b49d8d2b0ecb1d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:2a:06:4d:4c:1a:4d:c3:4e:de:fc:c2:38:
dd:4f:77:ab:bf:54:00:a0:ea:ed:5d:7d:47:a4:b2:
fc:f9:f1:47:73:91:78:1c:f3:8e:76:08:aa:e2:29:
92:26:f0:cb:79:76:fb:26:1d:df:ca:62:38:7a:dc:
d0:18:25:9e:c2:97:77:da:54:36:68:5c:2a:0f:f4:
b8:62:46:60:21:aa:f8:34:a1:9f:96:6b:a9:e9:1e:
8b:5f:45:3b:80:c0:2a:6e:99:7b:0d:d9:bc:46:6e:
70:a8:9d:bd:66:bb:2a:04:a4:95:30:05:15:8e:01:
84:9c:2f:9f:c4:04:c5:3a:e0:bd:d7:4a:de:1e:4e:
7c:3c:63:b6:a4:bc:58:e4:f2:39:39:93:31:0f:68:
99:86:05:f2:6a:e6:90:db:0d:38:09:3e:20:5e:4f:
e5:9d:b2:e5:f3:aa:51:1a:85:ff:92:a7:dc:04:c2:
34:6e:1b:67:56:2f:d2:e2:ec:26:08:e3:6b:a3:1b:
c7:30:34:97:80:75:bd:6d:92:39:8c:34:b8:69:56:
7a:be:0d:45:58:23:2a:8d:70:37:9c:21:b9:1e:2a:
13:a3:5e:d3:f7:19:d7:59:00:2d:63:a7:40:70:b3:
b3:7d:c5:04:10:29:f9:64:78:32:1b:91:04:3b:ec:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B3:E6:E9:E0:CC:96:1B:51:68:DC:22:B4:9D:8D:2B:0E:CB:1D:7E
X509v3 Authority Key Identifier:
keyid:6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ac:2c:de:f0:4a:7c:85:3f:fa:b0:ba:cf:0d:f7:b1:e3:62:
f7:c4:98:ac:ad:3e:1e:1f:f5:b1:c1:16:28:2a:43:21:14:1d:
07:09:97:ec:dc:d7:ee:1a:b6:4e:74:0e:e6:12:7a:e8:89:32:
b8:0d:f1:46:f3:79:90:88:9f:15:17:7a:e9:17:a0:27:90:11:
7a:9d:24:ad:5c:51:b0:00:a6:3c:cb:db:f5:3d:69:5d:6d:80:
c7:90:be:f4:e6:f7:70:e5:9c:4a:0e:b4:b7:24:ca:da:d3:f9:
a3:b4:37:d0:11:9a:80:5f:f3:03:fc:7e:c2:48:73:39:f9:04:
32:ee:9d:5b:a9:70:c1:33:51:d8:b4:3a:9b:4f:71:f8:1e:e9:
36:8a:38:84:38:ad:4a:6b:99:b8:cc:fe:d5:6c:5b:41:89:d9:
50:e4:26:c6:e2:12:b2:7f:b7:0a:59:e5:96:6f:81:87:bd:fb:
64:19:9b:65:30:b1:7e:ec:0c:96:65:59:3b:a1:54:e3:a2:cf:
27:1c:c9:03:2c:94:5a:0e:0b:d3:a3:a9:49:74:e5:f9:09:71:
f5:ce:e3:a3:63:ef:b0:eb:28:be:9d:4a:e1:62:fc:d3:9b:35:
51:94:33:48:df:8b:99:f7:b4:95:19:e4:5a:e5:e8:66:da:6f:
f2:42:b5:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzXTac/HLY12FyYxJ7SrGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMjA5YmQ3NGFkYmQzNDlkMDEyYWYwYWE2MzBkMWZlODY2
OWM3MmYwHhcNMjYxMDI1MTQwMDUwWhcNMjYxMDI2MTQwMDUwWjAzMTEwLwYDVQQD
EygzNWIzZTZlOWUwY2M5NjFiNTE2OGRjMjJiNDlkOGQyYjBlY2IxZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03AqBk1MGk3DTt78wjjdT3erv1QA
oOrtXX1HpLL8+fFHc5F4HPOOdgiq4imSJvDLeXb7Jh3fymI4etzQGCWewpd32lQ2
aFwqD/S4YkZgIar4NKGflmup6R6LX0U7gMAqbpl7Ddm8Rm5wqJ29ZrsqBKSVMAUV
jgGEnC+fxATFOuC910reHk58PGO2pLxY5PI5OZMxD2iZhgXyauaQ2w04CT4gXk/l
nbLl86pRGoX/kqfcBMI0bhtnVi/S4uwmCONroxvHMDSXgHW9bZI5jDS4aVZ6vg1F
WCMqjXA3nCG5HioTo17T9xnXWQAtY6dAcLOzfcUEECn5ZHgyG5EEO+yRPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWz5ungzJYbUWjcIrSdjSsOyx1+MB8GA1UdIwQY
MBaAFG4gm9dK29NJ0BKvCqYw0f6GaccvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83Mjg3OTctZGY5OS00OWJlLWI2ZjYt
MTlhNDJiODk1MTgzLzEvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83Mjg3OTctZGY5OS00OWJlLWI2ZjYtMTlhNDJiODk1MTgz
LzEvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqws3vBK
fIU/+rC6zw33seNi98SYrK0+Hh/1scEWKCpDIRQdBwmX7NzX7hq2TnQO5hJ66Iky
uA3xRvN5kIifFRd66RegJ5ARep0krVxRsACmPMvb9T1pXW2Ax5C+9Ob3cOWcSg60
tyTK2tP5o7Q30BGagF/zA/x+wkhzOfkEMu6dW6lwwTNR2LQ6m09x+B7pNoo4hDit
SmuZuMz+1WxbQYnZUOQmxuISsn+3Clnllm+Bh737ZBmbZTCxfuwMlmVZO6FU46LP
JxzJAyyUWg4L06OpSXTl+Qlx9c7jo2PvsOsovp1K4WL805s1UZQzSN+Lmfe0lRnk
WuXoZtpv8kK11Q==
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:29:27 2026 by rpki-client