Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: NHDvAoDswRG63wMUTEvm+24dOI+VSjUWUVBzg3AvDFg=
Subject key identifier: 93:37:E0:9A:B7:89:12:23:74:FA:93:A9:13:89:7B:60:7B:06:73:49
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 019DD509A3653B0630340055D2F97E88F9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0C1D
Signing time: Tue 28 Apr 2026 17:01:11 +0000
Manifest this update: Tue 28 Apr 2026 17:01:11 +0000
Manifest next update: Wed 29 Apr 2026 17:01:11 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: CpPw7L0b3HAfE5v300n/azH18UKvx0eu32vbTNAriO4=)
2: Is7C3W26lEw15lD5VhKPKWdkM8M.roa (hash: OE4K7vc1yucd3jpu96y3uZHtADB9bFEDzoGvFJGStC4=)
3: cqEx3z1wzl-0mdtNpY4AnTyAIMc.roa (hash: GFZBmF6WdLGeI9dqHrnwm1HNWHgZhg1gZ+mGTpe3Vfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:09:a3:65:3b:06:30:34:00:55:d2:f9:7e:88:f9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Apr 28 17:01:11 2026 GMT
Not After : Apr 29 17:01:11 2026 GMT
Subject: CN=9337e09ab789122374fa93a913897b607b067349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:66:b8:1f:69:c0:bf:35:38:4a:2e:01:0e:
61:6d:05:aa:c3:db:ce:27:0a:7c:ad:90:77:0f:6d:
5b:0e:cd:3d:a5:a9:c8:dd:6a:60:8f:3d:3b:eb:35:
f7:f7:61:d9:1a:56:22:66:8d:79:95:e2:00:5c:78:
be:e0:6c:9e:9b:cc:04:43:df:11:d8:49:c5:e6:22:
d9:59:6a:03:17:d7:f8:21:f7:9c:4b:a7:b3:71:db:
01:8f:e3:d3:9c:99:da:d3:76:4a:28:21:7c:86:09:
88:14:02:57:51:d6:ca:76:c9:bc:38:2a:59:e8:ca:
bf:7a:a1:61:8b:17:0a:d6:d5:b3:30:ad:7b:8e:11:
35:54:ad:a0:06:9b:3d:bf:7a:9c:57:cf:84:10:1d:
c5:83:1c:a9:61:8b:a7:fc:7a:ac:b5:0e:5c:0b:d4:
03:20:9b:bd:04:54:91:b4:53:49:2f:b7:8f:55:74:
49:c5:54:8a:fd:52:90:37:83:54:f7:67:ed:d9:87:
c3:c3:14:a6:d0:0c:e2:4b:92:50:ca:0f:4e:bb:b9:
6d:cf:bb:53:28:2c:35:a0:6d:30:42:7f:aa:fa:ea:
97:72:e6:93:8c:31:d8:d6:ab:d1:6f:c9:df:50:49:
05:29:49:40:14:49:aa:ed:89:48:46:40:1f:cc:d4:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:37:E0:9A:B7:89:12:23:74:FA:93:A9:13:89:7B:60:7B:06:73:49
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1a:aa:2c:d3:19:9f:71:12:56:fe:e2:fd:27:a4:50:57:47:
5b:a8:81:39:1c:db:f0:40:2b:64:36:84:20:c2:32:1c:f3:8c:
9d:9f:de:4b:a0:9d:9b:13:ad:38:28:ad:1b:19:b4:4c:7b:cd:
f9:5b:13:10:74:52:63:89:07:3c:a4:ae:a5:66:e1:a4:02:7c:
c6:40:7c:9a:d0:0a:d1:22:e4:a5:68:32:48:6b:54:cb:ee:7f:
5c:07:a6:6d:af:4e:4f:38:41:6b:b2:3c:ec:a5:60:36:43:a2:
9b:29:42:db:fd:86:8f:99:99:60:7d:b8:69:14:da:e3:0f:7c:
69:12:30:e1:7d:07:63:07:43:26:0e:6b:86:b9:a3:81:e1:f6:
42:a4:2c:0e:d8:4e:cc:55:51:32:9d:fc:ee:f9:f5:75:de:8b:
13:44:25:dd:2a:5b:61:63:7f:7c:7f:ed:e8:32:b5:46:f3:be:
2d:bb:a0:cd:37:45:54:0a:d8:71:27:d6:75:33:87:cd:59:c7:
ed:96:1b:e7:be:8f:36:9c:59:a5:a2:b2:1a:85:47:1e:4a:43:
21:f7:8b:89:6c:df:4b:b9:72:ca:bb:f1:3d:92:9a:52:aa:c6:
09:9e:af:24:05:1c:63:d9:b1:48:de:cb:1e:f6:94:cd:94:d9:
f6:33:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:02:49 2026 by rpki-client