Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
File: biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft (raw, json)
Hash identifier: IRUi/5NlE9rnicYVr0idlnhkoGWsKZ0dHLW8qZWKfw4=
Subject key identifier: BB:4B:52:B3:01:CC:09:D6:A8:3F:51:9D:41:DE:1E:F2:99:8B:EC:91
Authority key identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9
Certificate issuer: /CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
Certificate serial: 01A19B0F85B4231F17AF903DADC8C52FD670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
Manifest number: 0473
Signing time: Mon 02 Nov 2026 07:00:48 +0000
Manifest this update: Mon 02 Nov 2026 07:00:48 +0000
Manifest next update: Tue 03 Nov 2026 07:00:48 +0000
Files and hashes: 1: 1-Kwq2OC8hia9-e5o_ND0cuJTzGI.roa (hash: tLqoo+8Mn+PsGbLOFuyPAehTf/021da/zPAQPbjmeVU=)
2: biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl (hash: pTPDgBn6Rl8K0C2/79+V/IB082zRgv5enQ+D5hMmT/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:0f:85:b4:23:1f:17:af:90:3d:ad:c8:c5:2f:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
Validity
Not Before: Nov 2 07:00:48 2026 GMT
Not After : Nov 3 07:00:48 2026 GMT
Subject: CN=bb4b52b301cc09d6a83f519d41de1ef2998bec91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:ad:ea:b3:ca:47:e0:0d:ee:c0:e9:9c:2f:
2f:56:97:3d:52:f5:be:7a:69:0e:a3:cb:97:1f:74:
80:7f:4a:df:50:a5:36:2d:9a:da:6a:ee:e8:10:b8:
5f:e6:03:3d:ee:40:66:fb:ff:bd:b9:7a:b8:65:a2:
c3:25:51:fc:d7:9c:c8:eb:dd:1c:cc:a0:17:f1:a9:
37:da:46:2a:1b:f1:e2:32:af:17:2a:66:6f:15:81:
24:b7:7f:38:71:8f:2f:db:48:80:16:7d:1f:b5:16:
af:50:80:69:8f:04:c0:0e:f3:37:13:33:13:a4:9a:
0a:59:49:84:ad:3a:63:29:1c:72:50:df:0b:fe:fe:
58:09:0e:c1:cb:38:0e:67:9d:5c:1e:2b:7e:cc:78:
f7:a2:f3:d8:e8:8d:9d:84:29:10:e2:45:fe:27:9c:
55:f9:45:5c:aa:96:17:a1:e1:05:e9:65:4c:a5:bb:
20:31:35:42:40:ab:99:cb:73:9f:74:c1:36:48:a9:
a5:b1:34:b7:a1:13:a3:02:d4:0a:19:54:4d:d5:f0:
07:77:f6:fd:d1:f3:65:e0:6b:bc:4f:44:95:7d:81:
48:99:21:ed:bf:2f:99:6a:13:64:9a:fd:e7:9b:1c:
27:f0:f4:5a:b4:61:d2:5a:33:d6:23:fa:5b:8c:e6:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:52:B3:01:CC:09:D6:A8:3F:51:9D:41:DE:1E:F2:99:8B:EC:91
X509v3 Authority Key Identifier:
keyid:6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c1:f1:50:50:53:dc:5b:05:6e:7f:7c:85:c8:10:7a:c1:d2:
f6:98:f4:df:30:09:54:a4:8d:40:b1:2a:74:e3:61:87:9b:9f:
60:c7:f7:84:f7:c0:96:6d:a9:80:75:b6:b0:f5:77:a1:4e:01:
a1:f2:38:47:26:68:0d:2b:ae:c7:8e:69:f9:20:3a:a6:79:71:
6c:95:62:51:91:be:6e:70:41:ea:a2:19:62:d4:a0:35:cd:fb:
79:18:a6:49:1d:03:7f:9e:9d:64:ce:3e:da:b2:fb:f6:b9:76:
23:df:8a:58:09:a2:6f:da:9b:60:02:3a:53:26:9e:6b:07:11:
c5:fc:2b:50:48:bf:63:34:aa:ce:f6:02:9b:5f:a0:ad:53:3b:
25:82:59:84:ef:d4:aa:78:f8:fe:b6:10:36:c5:5f:f1:71:00:
bc:a3:97:9c:58:59:cb:42:fb:f5:0f:18:47:26:c9:25:72:52:
55:65:60:94:ba:1a:98:18:21:09:96:19:f2:fa:42:57:5a:8b:
3f:47:9c:0a:76:0e:41:81:51:35:30:b2:bd:4e:06:9c:d4:30:
3c:3e:0d:8e:27:00:08:1a:b5:e0:ce:87:9b:7f:b9:89:bb:58:
91:22:33:b2:8a:2a:74:38:02:a6:2f:46:07:52:99:86:99:56:
bc:b3:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:43:34 2026 by rpki-client