Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: a1zjdlT283sHlIi52FLTBZEpa87xsWcTkmmm3+GQZDI=
Subject key identifier: 87:FB:02:24:12:23:1A:69:E6:95:67:73:D1:1D:51:56:D8:37:C9:0C
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 01A00281777D82FE1FC3E8ABF9359378DE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 23:00:34 +0000
Manifest this update: Fri 14 Aug 2026 23:00:34 +0000
Manifest next update: Sat 15 Aug 2026 23:00:34 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: TJWP3vHW2TR7R4s50WKwnQu8TkPMWXXGRXa3S1p9wks=)
2: DlObQ48l6w9Lz1ru1Ps9vXN6dUs.asa (hash: RM2FL8CGd5yQXQEGV8NuC1yuCyRHYcz0dUdW6scntzw=)
3: aToK1H8Eu9LQyX9O96VpmV4-xH4.roa (hash: NOHh63b/9WqU00dOh312eJJg1BRneOILOEiJiVt9VO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:77:7d:82:fe:1f:c3:e8:ab:f9:35:93:78:de:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Aug 14 23:00:34 2026 GMT
Not After : Aug 15 23:00:34 2026 GMT
Subject: CN=87fb022412231a69e6956773d11d5156d837c90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:9c:d4:40:86:c0:a4:fe:9f:98:69:09:3d:
2b:6f:d1:ae:e7:80:4f:d2:a6:74:ce:c3:ef:0c:5f:
11:b8:e0:41:a4:ee:8f:ce:07:a9:f0:84:d8:5c:36:
4f:a9:2b:5d:93:f4:69:8a:88:ea:4b:d0:1b:4d:50:
a5:37:71:d2:cf:5b:e8:0d:b0:14:0d:7e:8d:6d:73:
47:76:33:f3:87:13:d2:97:d8:bc:b6:25:c4:3d:ff:
ba:07:49:71:0f:84:93:94:ab:66:6d:c1:ac:19:51:
6d:b2:40:da:b6:44:bd:7e:7e:b7:24:a6:46:2b:8f:
2f:98:48:6b:7c:65:67:15:31:a2:04:7b:59:6e:e0:
97:f6:ee:7c:84:a5:17:2a:76:70:8a:4a:c9:58:e2:
dd:a6:57:a1:86:2d:69:8f:17:03:26:ec:d9:4b:a4:
e0:69:be:8f:35:ff:37:0c:b8:8f:6e:58:c0:f7:cc:
b4:2a:87:06:82:e0:c3:d3:97:c3:21:cc:1d:cd:7d:
9e:c8:20:d7:8f:39:7f:63:9f:40:b3:e4:a5:b4:31:
83:cb:30:2e:87:fb:e0:0e:b4:6d:e3:50:25:d5:cc:
58:1b:0c:2d:60:4b:f7:4b:80:8c:44:86:bb:24:18:
6c:6e:c2:0c:69:5e:3b:f1:a7:03:99:0b:e1:e2:45:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FB:02:24:12:23:1A:69:E6:95:67:73:D1:1D:51:56:D8:37:C9:0C
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ea:dd:be:29:33:02:8e:e0:2d:ba:c0:da:a3:97:cc:e9:07:
83:65:65:db:35:36:6c:06:08:93:85:79:89:f1:12:c7:14:3c:
61:61:a9:30:43:68:eb:bf:19:ed:c4:4c:ce:bf:57:74:bc:1f:
bc:50:cc:7d:72:d1:8e:3f:8f:ec:83:98:98:29:00:58:d5:0a:
1c:be:81:a8:df:ca:81:40:1d:43:90:dc:27:a6:41:86:22:e2:
a7:2b:81:2a:b4:42:fc:a8:27:bd:d7:2c:8f:f7:e4:f0:5f:ac:
4a:85:01:0d:56:8d:b5:11:b5:b6:cb:3a:5c:a3:a9:9d:60:9b:
a7:ea:e8:e3:e2:ef:b8:16:62:08:14:c4:a6:2f:ed:08:3f:ff:
c6:fc:20:7a:35:41:ba:94:19:6f:55:8f:3d:e3:98:cb:b3:16:
27:d1:59:65:82:b6:d0:d0:de:57:6b:dd:e1:5e:a5:40:01:a7:
06:04:4c:6d:83:ca:0e:19:54:da:87:70:26:2b:50:0b:d6:92:
8a:57:02:5d:84:55:a1:0a:99:87:e8:09:e0:54:86:89:b2:3b:
6a:d0:e1:6d:a8:e1:11:b1:00:43:68:68:9b:48:d7:2c:ac:6f:
f2:7b:1d:7d:5c:5a:6f:14:09:09:67:33:00:9a:d3:1e:f3:0c:
b9:4e:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:34:07 2026 by rpki-client