Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: nH9erprGvoytx+IX8XHWe+qF75XISGSPPVrdz53TO04=
Subject key identifier: 3E:F4:40:6F:E7:F8:9A:9F:BB:6F:D3:1B:CF:70:1B:5A:13:42:EB:BA
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 019FA6739E0992EB78150745677E4D5E40A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0D0E
Signing time: Tue 28 Jul 2026 02:00:22 +0000
Manifest this update: Tue 28 Jul 2026 02:00:22 +0000
Manifest next update: Wed 29 Jul 2026 02:00:22 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: 2yBHOzRSH6SWtuh4czl9v5PGO23OEvZDfSW7iA9V6QA=)
2: Is7C3W26lEw15lD5VhKPKWdkM8M.roa (hash: OE4K7vc1yucd3jpu96y3uZHtADB9bFEDzoGvFJGStC4=)
3: cqEx3z1wzl-0mdtNpY4AnTyAIMc.roa (hash: GFZBmF6WdLGeI9dqHrnwm1HNWHgZhg1gZ+mGTpe3Vfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 21:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:73:9e:09:92:eb:78:15:07:45:67:7e:4d:5e:40:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Jul 28 02:00:22 2026 GMT
Not After : Jul 29 02:00:22 2026 GMT
Subject: CN=3ef4406fe7f89a9fbb6fd31bcf701b5a1342ebba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4b:1e:5e:b1:43:5d:ae:fd:11:c0:ba:85:f8:
5c:bf:24:2f:f3:bb:14:26:ff:26:96:ec:9b:83:a6:
d6:ba:56:39:81:14:ba:df:5e:0c:08:f6:e9:2d:03:
89:46:7f:a9:19:70:2c:86:dd:a8:4d:97:31:29:02:
44:9a:ae:a0:1d:4d:62:1b:d7:e8:98:5c:0a:5b:12:
7c:60:54:3a:23:f1:04:c7:b2:8f:e2:3c:b3:6a:d0:
7b:70:b9:3b:b2:13:1b:66:74:ef:cf:ca:0b:89:10:
d9:54:16:8f:62:fd:5e:6b:50:36:f3:5a:ae:74:68:
84:50:e3:1e:bb:0e:67:42:2d:d4:03:fd:72:01:5c:
0a:e2:cc:a7:a2:b1:7b:0f:8e:0c:51:17:80:ac:fe:
2a:fb:df:46:44:59:dd:4a:b3:6c:87:24:d8:2d:2c:
ec:11:15:08:7d:67:2c:70:1c:45:ce:e1:0b:5c:ef:
27:9e:ab:8d:06:cb:ae:47:0a:0f:05:08:e1:e2:76:
aa:5e:90:b1:ba:ae:7a:44:7f:a1:1a:b2:d7:a8:19:
8a:15:ee:f8:d2:bd:45:48:03:9e:fc:2a:d1:86:e7:
d6:a8:d5:17:27:e8:86:8c:df:6f:bb:cb:88:bc:f2:
6b:19:ae:32:d7:b4:e3:13:ad:95:e8:94:f4:c1:f8:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:40:6F:E7:F8:9A:9F:BB:6F:D3:1B:CF:70:1B:5A:13:42:EB:BA
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c8:23:e9:05:5e:43:91:7a:f9:be:63:3d:e2:bb:35:2d:67:
2f:c0:7c:28:86:76:f3:33:a9:e5:97:9d:f2:17:92:bc:c8:a9:
22:e0:23:81:59:5c:3b:58:e0:80:79:c5:d8:b3:b1:a0:95:d9:
44:25:39:b0:fb:ff:33:6f:06:4e:4f:03:4b:88:b4:43:1a:6a:
c5:f2:c3:81:a7:68:ff:b7:aa:ad:a5:9c:f0:44:41:c5:6c:24:
58:8b:4b:96:14:5d:47:fb:32:bb:e0:c4:8e:c3:05:22:59:e6:
66:2a:ec:3d:70:7c:cd:12:ef:f2:95:bd:c6:5e:0c:c6:70:c4:
3d:36:a4:c8:2c:cc:11:70:7e:aa:c1:f2:31:33:60:f8:2b:ab:
ba:0a:12:95:08:e5:8b:b5:5f:b8:4b:02:cf:db:cb:b9:af:bf:
d5:57:76:58:44:27:f4:40:14:9d:8e:00:5d:e3:4e:f1:6f:c0:
ed:5d:b0:20:7a:85:c0:7b:08:92:6f:d3:61:16:d3:64:d6:b3:
da:6a:28:19:44:5f:b1:2d:fc:83:67:12:80:3e:2e:6a:d1:ac:
7a:63:c8:79:67:99:ee:0f:08:60:46:5c:29:a7:32:d0:0b:bd:
60:a6:49:c3:d0:d5:9b:2a:2b:69:c6:3f:a9:0f:46:59:44:e8:
6f:c1:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 04:21:01 2026 by rpki-client