Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: a/kKACT1kwBLWD86g4TYVmlDTUpdehtIE8EAli57/rA=
Subject key identifier: 03:13:92:4B:71:A7:38:26:4D:51:D3:2E:56:03:5E:5B:18:05:75:B7
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 019F1152EB2508AAC0830F1CE5483D3654F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 03:01:14 +0000
Manifest this update: Mon 29 Jun 2026 03:01:14 +0000
Manifest next update: Tue 30 Jun 2026 03:01:14 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: XiK9wHe/IvMMW488FevRc60UnM//VLm7Xn+jewM1dR8=)
2: NnEIJrnmhkwELld_U_QBTUbqU90.asa (hash: 5/Cpmz3yamVpUjVaZZVnuNujoVdFO+RPvIdZmRu6am4=)
3: aToK1H8Eu9LQyX9O96VpmV4-xH4.roa (hash: NOHh63b/9WqU00dOh312eJJg1BRneOILOEiJiVt9VO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:eb:25:08:aa:c0:83:0f:1c:e5:48:3d:36:54:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Jun 29 03:01:14 2026 GMT
Not After : Jun 30 03:01:14 2026 GMT
Subject: CN=0313924b71a738264d51d32e56035e5b180575b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:9b:a8:5f:5e:df:73:06:22:41:aa:01:5c:
5e:36:7d:86:fc:b5:f0:b1:24:be:aa:b7:9d:bd:12:
06:a2:66:ba:a6:92:41:55:ce:3d:1d:52:5c:c1:ac:
84:4f:45:2e:3c:6d:2f:05:a4:0c:a2:ad:9d:29:d1:
37:0e:63:68:7f:08:4a:e6:1d:16:d6:7f:4d:b7:3d:
a4:06:19:03:12:5b:10:7c:94:4c:26:e9:16:a8:eb:
ee:ab:f4:66:c0:57:d4:99:a1:f1:78:92:60:8f:89:
e4:31:43:6d:e1:a8:89:6b:ee:89:98:d5:12:44:dc:
d5:cb:5e:ad:63:01:07:87:40:b9:10:ac:32:15:27:
9e:d4:07:17:26:3f:1f:bb:fd:03:d7:e6:03:18:19:
7c:22:36:d7:f7:51:59:55:b4:64:f0:50:af:49:d4:
24:31:cc:f7:8c:c3:53:dc:04:66:51:5e:97:85:1c:
9d:96:32:65:8a:ca:1d:b4:b2:c2:04:6a:34:cc:c2:
21:ac:11:8f:ef:07:c0:9c:9f:1c:a9:3e:1c:83:9f:
ad:9f:db:b2:02:65:0f:e5:dc:4b:93:ad:4a:00:68:
fc:ce:76:dc:0f:2e:4b:c5:55:33:bd:7e:e6:da:5a:
37:5e:f5:1f:91:77:e7:ed:28:87:6a:30:a8:35:97:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:13:92:4B:71:A7:38:26:4D:51:D3:2E:56:03:5E:5B:18:05:75:B7
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:52:1c:21:79:a5:02:0c:6c:29:b8:13:77:a3:26:90:2f:30:
a9:53:56:dc:f1:57:3f:1e:b6:fa:fb:56:d2:a8:3c:b4:d5:c9:
7f:d1:2a:62:e6:ff:b7:32:da:65:16:67:11:52:a1:4e:b5:e8:
48:48:24:78:49:a0:9e:c0:14:f9:80:1e:1f:b8:e1:10:51:cb:
a2:8a:33:ee:f2:0e:06:7b:00:3f:54:96:be:39:49:24:28:b3:
1c:a3:12:8b:47:77:31:3d:f3:06:43:91:49:c9:d0:c7:a8:52:
9f:08:68:d2:3d:a9:d6:55:65:25:dc:f0:8d:56:36:29:5d:c4:
9c:2d:29:77:21:2f:63:d8:da:16:d2:74:86:c8:f2:df:3d:e5:
d0:1d:da:b7:af:1f:7d:eb:39:5e:4d:93:fe:50:3e:5f:1e:89:
ed:4a:d3:4a:5d:2d:0c:a5:ae:20:99:9f:87:07:c8:53:0c:13:
cb:b5:62:a8:2f:70:b4:cc:93:6c:41:cb:b3:6a:04:61:c2:73:
5e:2f:a0:7a:25:36:5b:f6:95:44:e2:28:a4:b9:d4:78:bb:87:
2c:d2:38:b9:d6:7f:83:28:81:99:7a:5d:5d:e5:31:a5:4c:72:
69:7d:90:ac:3f:9a:e0:56:e6:43:ca:0d:5e:73:2f:19:fa:b7:
09:8b:06:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:47 2026 by rpki-client