Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: SIXauiZzCVuX2GAiOxZkPVTMMKH3kzxndhTs4i4wP7Q=
Subject key identifier: 86:DF:80:83:A1:10:B3:4F:1C:D1:C2:F3:2B:64:CC:C3:D5:43:A3:2A
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 019D382E100E76E524F47B88B26C689CBEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: qlXoslGv5A/oU/beYQPiPAQkYYrVya1Atl0Fb+N8PM8=)
2: NnEIJrnmhkwELld_U_QBTUbqU90.asa (hash: 5/Cpmz3yamVpUjVaZZVnuNujoVdFO+RPvIdZmRu6am4=)
3: aToK1H8Eu9LQyX9O96VpmV4-xH4.roa (hash: NOHh63b/9WqU00dOh312eJJg1BRneOILOEiJiVt9VO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:10:0e:76:e5:24:f4:7b:88:b2:6c:68:9c:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=86df8083a110b34f1cd1c2f32b64ccc3d543a32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:bf:44:94:8d:98:4a:42:48:8b:40:4e:3e:
02:26:ea:8a:0c:a7:ff:43:41:9d:65:50:28:1b:59:
08:d3:c4:5a:c4:09:20:b0:bc:e8:fe:01:90:7f:ba:
5f:ea:26:ef:19:78:c2:c7:ec:2c:0e:41:22:8d:9a:
02:2a:12:97:9e:c6:13:6f:33:da:45:9d:70:bc:c2:
41:55:b1:63:ea:fd:86:e8:49:03:b8:96:24:ee:b3:
bc:d4:1c:5d:6d:18:18:6b:4e:74:19:e5:77:2f:39:
12:a7:52:be:37:f5:dd:c6:a7:49:09:d8:41:71:d5:
0f:42:cd:82:00:21:23:2a:cf:52:45:c8:05:db:fd:
05:e2:29:cf:c9:5f:de:cc:bb:0d:2d:99:62:29:16:
c2:26:47:c0:e1:81:86:d1:2f:3e:2c:6b:6c:d7:16:
33:c7:26:f5:6e:0f:18:ee:b6:6d:b8:cd:bd:4c:b1:
56:cd:28:a0:57:96:d0:87:92:51:58:a3:0f:01:63:
1f:22:ac:78:f2:0a:36:17:77:55:47:71:3a:ef:1c:
e6:78:81:c3:6a:a4:bc:8a:88:76:67:61:37:52:ed:
a7:24:eb:92:b2:03:15:ea:20:21:96:75:94:c8:1d:
83:3b:0b:b6:f5:81:79:dd:09:5c:5d:69:3e:62:f1:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DF:80:83:A1:10:B3:4F:1C:D1:C2:F3:2B:64:CC:C3:D5:43:A3:2A
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c1:20:31:d5:d7:9c:b5:07:20:9d:ed:69:99:34:c9:de:55:
fb:91:f2:f7:a3:7b:c8:45:37:2c:98:80:3a:78:85:3e:36:e4:
d2:7f:8a:7c:5e:3c:cd:de:bc:06:e7:8d:89:6f:5a:a4:ab:47:
99:00:0c:56:d9:5a:34:11:b0:17:6f:59:4e:18:a6:d2:02:95:
ea:c1:6a:2e:07:ad:0d:57:2f:51:15:56:86:e9:a7:67:68:f3:
39:62:be:b9:57:8a:e8:04:47:4a:c6:56:85:0e:6b:eb:57:ad:
35:4a:5b:cb:9e:17:61:b0:5d:c4:3f:cb:66:38:ba:b5:f3:e2:
24:8d:33:63:30:35:e3:c7:49:31:97:7e:b0:6d:5e:16:6f:f0:
b8:66:86:ba:93:4f:b2:48:12:d0:d8:29:c7:20:b4:fc:5c:eb:
46:89:b1:93:04:c7:73:95:b5:c4:33:40:73:48:c2:f3:e3:48:
8c:50:d6:87:b9:c5:92:a6:44:4d:dd:11:69:1b:65:d9:89:a2:
75:0a:53:8c:9f:b9:21:15:24:e7:d0:1f:5c:45:94:a7:5b:16:
fd:9c:c1:a9:a2:ed:42:d0:7d:60:7b:01:86:68:86:f4:7d:2f:
f9:15:9c:67:b6:d6:c1:95:a2:08:33:33:a9:a7:6a:d7:f1:87:
c1:39:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:26 2026 by rpki-client