Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: u9pcsnXh7a91BwA9/ldmRVO2xDlHskjy8Q94nHMr7xQ=
Subject key identifier: D5:57:76:7A:49:B0:BB:5C:CC:75:AB:A3:2E:88:C7:F4:E8:C2:07:90
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 019CED4B274E143D40198943AB510127B295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0BA5
Signing time: Sat 14 Mar 2026 17:00:51 +0000
Manifest this update: Sat 14 Mar 2026 17:00:51 +0000
Manifest next update: Sun 15 Mar 2026 17:00:51 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: exx06ubqUqJ7QHMFeUmFdql+d2hRgc+F6O1NH7L+Xw8=)
2: Is7C3W26lEw15lD5VhKPKWdkM8M.roa (hash: OE4K7vc1yucd3jpu96y3uZHtADB9bFEDzoGvFJGStC4=)
3: cqEx3z1wzl-0mdtNpY4AnTyAIMc.roa (hash: GFZBmF6WdLGeI9dqHrnwm1HNWHgZhg1gZ+mGTpe3Vfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:4b:27:4e:14:3d:40:19:89:43:ab:51:01:27:b2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Mar 14 17:00:51 2026 GMT
Not After : Mar 15 17:00:51 2026 GMT
Subject: CN=d557767a49b0bb5ccc75aba32e88c7f4e8c20790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:2b:96:d9:69:b1:6c:4f:2e:0a:be:a7:b4:
c0:cc:4e:fd:59:03:cf:e2:9c:e5:c7:51:19:e3:44:
49:c7:ca:21:73:9e:f0:51:ac:ee:84:e7:66:77:61:
a2:7d:e1:6e:9c:75:ab:c1:17:79:e4:30:94:12:82:
9e:ad:9b:75:64:66:d7:91:80:d5:ed:82:cc:55:db:
15:c8:9e:be:56:dd:cb:a2:a4:5a:cf:35:1a:8a:a6:
6d:e9:64:17:6d:b7:99:c9:c6:52:03:36:98:30:7f:
13:13:9b:be:87:6f:3a:3c:6c:8e:a8:65:e2:98:e5:
7b:80:f2:85:1f:42:71:60:78:c3:0b:41:9a:7d:d4:
f0:0a:88:98:13:de:f7:4f:26:02:18:68:77:5a:a4:
e9:96:02:d2:97:ac:5b:f4:b2:b0:e9:b8:58:27:b6:
00:a2:d2:25:24:7a:3b:21:a2:71:ae:2b:6e:c8:11:
2e:c4:e8:d3:23:d5:e7:e3:da:3c:0e:37:e6:de:ad:
70:94:b0:a8:c2:3c:73:6e:01:eb:92:36:04:c5:f9:
47:c7:28:9a:72:ac:b9:ce:28:fa:c1:59:1b:dc:78:
68:52:ed:1b:97:ce:e6:d0:90:1a:fa:65:38:90:99:
79:18:9a:0b:8b:8b:7d:0e:13:be:05:82:80:3b:72:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:57:76:7A:49:B0:BB:5C:CC:75:AB:A3:2E:88:C7:F4:E8:C2:07:90
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e5:23:b1:7b:fd:a9:89:77:b7:b4:99:94:a8:16:0b:5d:a2:
a0:2c:76:74:eb:9b:2f:e7:91:b5:83:31:e8:aa:57:3f:93:8f:
32:de:c8:cc:af:39:dd:6d:85:a5:21:c6:ed:46:81:05:21:65:
fc:89:29:e5:ff:c4:9b:e2:82:a9:62:ca:72:9a:99:72:e5:54:
af:21:57:a6:d8:cd:f7:ad:0d:8a:7b:b6:2a:d9:cb:eb:a0:7c:
2c:b0:d0:18:41:f4:ea:38:c1:30:21:6e:a4:83:f5:e0:a2:66:
db:82:19:d7:fb:22:14:01:d6:9c:c6:4d:92:ed:20:63:7b:ba:
9e:40:d3:1a:7e:35:b2:22:2d:e5:86:02:ec:f4:30:aa:c2:a6:
2c:27:43:c2:b7:dd:d2:4d:03:2e:33:52:5e:b8:8e:51:72:06:
cb:e6:01:13:71:9c:8e:0a:a4:77:03:e6:8e:83:2c:c3:b4:8f:
bc:f6:9a:5f:ed:81:42:d9:95:f3:44:24:ea:5c:1d:e2:65:a3:
69:ab:1b:aa:de:82:84:db:16:fe:5a:d5:af:9e:b7:51:8d:da:
45:ae:0f:8a:7f:c1:64:93:cc:ae:32:25:cd:99:99:27:8b:49:
29:d2:8e:88:7d:80:be:44:f0:53:e4:99:48:ef:9f:23:d4:c6:
aa:c5:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:55:36 2026 by rpki-client