Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: UJEPefbX9T4SPTErj0ES+CEJUKb85Zo/vQmLxKx+yZ0=
Subject key identifier: F9:03:5E:F8:DB:D2:2A:BB:65:2A:9D:16:13:54:22:C4:46:C0:66:55
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 019EBCC72EAD55C300F9CF42B6367EFF6F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0C95
Signing time: Fri 12 Jun 2026 17:00:30 +0000
Manifest this update: Fri 12 Jun 2026 17:00:30 +0000
Manifest next update: Sat 13 Jun 2026 17:00:30 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: /DGwGJIydzDsYjqr+CB3/Zz75KEEMfzASztsTrr+0Gg=)
2: Is7C3W26lEw15lD5VhKPKWdkM8M.roa (hash: OE4K7vc1yucd3jpu96y3uZHtADB9bFEDzoGvFJGStC4=)
3: cqEx3z1wzl-0mdtNpY4AnTyAIMc.roa (hash: GFZBmF6WdLGeI9dqHrnwm1HNWHgZhg1gZ+mGTpe3Vfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:c7:2e:ad:55:c3:00:f9:cf:42:b6:36:7e:ff:6f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Jun 12 17:00:30 2026 GMT
Not After : Jun 13 17:00:30 2026 GMT
Subject: CN=f9035ef8dbd22abb652a9d16135422c446c06655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3d:93:57:fe:12:7c:0c:a1:58:75:64:26:4d:
7c:ff:18:5a:cc:64:5d:fe:75:b1:42:c9:dc:20:4f:
64:ac:2d:56:44:85:16:7f:7d:60:67:51:21:6f:56:
58:da:dc:ca:05:ca:d9:12:12:6e:c0:ae:06:b3:90:
61:70:a5:93:fc:72:5b:06:c5:a4:9c:dd:53:31:31:
2a:59:52:5a:46:15:64:09:9c:5f:a8:5b:2c:19:70:
49:6b:75:9f:f4:00:a6:e3:b4:3d:39:76:a8:13:b7:
dc:08:1e:30:7c:74:54:34:dc:28:38:f5:60:72:c2:
db:e0:bd:13:81:b9:ad:dc:e3:c2:de:20:ff:ee:50:
56:7f:72:08:b9:18:5f:8e:8d:65:1a:a1:4e:a2:7d:
df:29:8e:60:4b:03:3a:5e:ea:55:71:c0:4c:dc:67:
0e:a3:a0:d7:b2:8f:88:1d:9e:95:9e:7d:65:c5:6a:
7f:04:68:43:34:49:8c:3a:50:ea:7d:85:f9:aa:94:
8f:9a:e4:ee:89:8b:31:26:7a:68:54:ea:57:93:43:
20:f0:06:1c:71:86:c5:80:fa:31:a3:6c:c8:ac:0b:
f5:da:12:39:45:2e:eb:3c:9a:85:f9:fe:9b:15:70:
c4:ed:f0:0f:ca:8f:35:0a:5a:3e:64:69:70:95:25:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:5E:F8:DB:D2:2A:BB:65:2A:9D:16:13:54:22:C4:46:C0:66:55
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:53:78:83:46:0b:70:0a:87:06:e1:93:3f:56:05:82:6c:2d:
7f:fa:ff:63:00:26:a6:3a:cd:4f:f6:2e:74:d9:9c:77:4c:cb:
95:65:5e:e1:8d:98:92:fe:d9:18:fe:a0:83:d4:ab:13:a0:4d:
26:98:a0:e5:43:67:60:b7:8b:cf:e6:ef:6c:8e:d0:0f:2e:f4:
f4:07:b1:c0:32:1a:5a:9a:07:6b:3a:a1:32:95:d9:48:c5:16:
bb:7d:11:69:aa:43:00:c2:ca:1c:b0:94:ca:97:3a:31:f7:37:
4d:42:a8:e1:42:71:11:15:d7:fb:a9:e6:5b:d4:d4:e2:fe:eb:
40:5a:41:cd:3c:b4:38:74:24:d0:5a:13:19:d9:c6:08:a7:d1:
12:53:46:d6:06:00:cd:1d:2c:1d:50:f1:ec:20:70:92:38:fb:
fd:a8:ad:25:53:13:58:74:70:69:1f:67:15:72:13:33:88:2b:
c4:8c:17:8b:88:6d:41:da:45:55:50:b0:2e:f8:7b:17:23:ee:
e0:1a:14:91:f5:51:ea:98:8b:ad:05:b5:d9:26:8b:d2:83:b8:
12:15:92:f7:35:47:64:66:04:01:bf:87:1f:a4:ae:c5:81:44:
e7:0a:a8:92:4a:d2:b5:74:2c:b5:70:41:bc:a6:63:f8:a4:e5:
a9:1d:7b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:13:55 2026 by rpki-client