Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.mft
File: BiI218ZM5CV_YCUvr1HP6aFSby4.mft (raw, json)
Hash identifier: 3GySKXl9cgt4flvgl+zB3xxliduKgIVJEUnE2sBBcNw=
Subject key identifier: C7:36:8A:7C:3F:F8:D5:EA:32:F1:69:D5:B2:9A:52:DA:6A:69:C2:A6
Authority key identifier: 06:22:36:D7:C6:4C:E4:25:7F:60:25:2F:AF:51:CF:E9:A1:52:6F:2E
Certificate issuer: /CN=062236d7c64ce4257f60252faf51cfe9a1526f2e
Certificate serial: 01A0412AE37064661054E30B3AF5A80D1204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiI218ZM5CV_YCUvr1HP6aFSby4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.mft
Manifest number: 4E
Signing time: Thu 27 Aug 2026 03:02:04 +0000
Manifest this update: Thu 27 Aug 2026 03:02:04 +0000
Manifest next update: Fri 28 Aug 2026 03:02:04 +0000
Files and hashes: 1: BiI218ZM5CV_YCUvr1HP6aFSby4.crl (hash: /XQ7OThJRjA3LZnY3AkXJCzfSdjwkXuX/Ylh21WfFB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiI218ZM5CV_YCUvr1HP6aFSby4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:e3:70:64:66:10:54:e3:0b:3a:f5:a8:0d:12:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=062236d7c64ce4257f60252faf51cfe9a1526f2e
Validity
Not Before: Aug 27 03:02:04 2026 GMT
Not After : Aug 28 03:02:04 2026 GMT
Subject: CN=c7368a7c3ff8d5ea32f169d5b29a52da6a69c2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9d:9f:74:b3:09:f5:57:51:b1:9d:30:19:75:
62:6f:5d:e5:02:cf:6b:a2:ed:76:68:fa:29:ac:75:
7b:97:3f:5a:e8:1e:0c:80:59:13:24:c3:14:d1:1e:
d4:ea:b9:8c:ca:45:30:d5:8f:7b:bb:ba:a1:9f:a5:
bd:07:35:ae:99:e7:12:f9:9b:0b:0e:69:78:82:e5:
9a:f2:4b:21:6c:81:f3:38:5d:06:b7:57:70:d8:54:
86:f4:74:09:63:8e:25:19:96:66:9a:f9:f7:ad:6d:
d7:8b:8a:47:18:1d:9f:49:2f:ff:38:06:f8:44:d7:
85:fb:49:5d:9a:a0:7a:d5:cc:cf:ef:00:72:0e:b3:
ea:b2:03:bb:f6:dd:94:2a:87:72:f3:88:52:4b:ac:
8d:1b:7d:03:f2:13:cc:c8:6a:0c:da:2e:66:fb:92:
3e:0e:d4:67:3f:a3:5d:a5:2b:ce:31:b3:ad:6e:a5:
75:1d:02:e9:ae:54:5d:d3:55:fa:d1:1d:6d:9c:08:
76:11:fa:53:85:99:00:aa:c3:fd:71:63:54:5c:13:
2e:dc:58:73:41:ee:99:d7:c9:67:04:09:c6:98:db:
1e:f5:91:99:39:a6:49:d1:4c:2b:f2:84:c2:31:82:
c2:db:8f:fb:13:13:59:ba:cb:af:58:ef:21:8e:90:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:36:8A:7C:3F:F8:D5:EA:32:F1:69:D5:B2:9A:52:DA:6A:69:C2:A6
X509v3 Authority Key Identifier:
keyid:06:22:36:D7:C6:4C:E4:25:7F:60:25:2F:AF:51:CF:E9:A1:52:6F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiI218ZM5CV_YCUvr1HP6aFSby4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6d:68:63:f8:98:68:77:cb:c9:21:6f:0d:74:19:33:c2:ab:
ac:13:6f:f7:06:24:6a:40:e4:16:99:59:f3:c5:fe:42:c7:f4:
7e:5f:75:f8:9a:3b:a8:b3:23:91:3d:38:bc:20:6e:ba:51:0e:
f0:8f:5e:f0:e2:fb:26:9a:9d:d3:8f:84:af:9a:52:59:05:ea:
bf:7d:89:27:e8:a7:98:25:fa:2a:b5:d2:9e:48:b3:b7:10:af:
d4:9c:2c:dc:cb:ec:e4:80:31:81:78:b4:83:9b:9d:10:56:32:
0e:d8:95:56:96:d2:c5:d6:f4:de:36:ef:f4:3d:a8:d5:75:c5:
7a:b9:7f:8b:a7:1f:5b:06:79:51:6c:17:f5:35:c5:7c:b6:98:
c1:d3:4d:93:f9:46:b0:7e:b3:77:89:4d:82:be:f3:58:ea:7c:
7f:4b:95:08:7d:14:22:91:8d:72:50:b3:51:12:e3:49:7c:cb:
95:66:61:56:67:5f:fd:82:2c:ab:74:0a:cf:2d:c7:23:54:cf:
74:73:28:4a:16:e5:99:5a:62:59:e2:56:2d:88:42:05:7f:3d:
25:9a:ca:00:74:58:a2:04:2e:fd:31:6c:c0:6a:4f:03:c9:42:
1c:95:27:79:9b:cc:dd:64:6b:6a:1e:c9:76:23:73:4b:54:ba:
61:31:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:08 2026 by rpki-client