Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: /PQ9ILDG2g2/DPJ6hYe86Gd79f7pzAnRzUd8mNT0R20=
Subject key identifier: 05:AD:1C:40:BD:66:D4:CF:20:46:50:93:82:14:04:AC:BE:51:F2:12
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 01A10F27F30B85C627F0C02879E3C1C73C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0DC9
Signing time: Tue 06 Oct 2026 03:00:38 +0000
Manifest this update: Tue 06 Oct 2026 03:00:38 +0000
Manifest next update: Wed 07 Oct 2026 03:00:38 +0000
Files and hashes: 1: 13WPeIOo8P7vrgfHO9nU7H_KMKo.roa (hash: 2pw/sr5aIoyYCgIoe3nPeNczkofoVd57FWK10ehymxc=)
2: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: J5/dAhJZ1v6fDTuzYKGL9SDOX0zaG5zcVfq+4NrYZGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:27:f3:0b:85:c6:27:f0:c0:28:79:e3:c1:c7:3c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Oct 6 03:00:38 2026 GMT
Not After : Oct 7 03:00:38 2026 GMT
Subject: CN=05ad1c40bd66d4cf20465093821404acbe51f212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:4b:ae:38:34:a2:66:69:37:8f:fe:cf:1d:
e3:6e:e7:8c:2d:68:6d:dc:75:a7:f5:18:07:b8:46:
66:69:4a:f1:b8:77:65:c7:69:5e:52:12:2a:c4:7a:
33:f1:a2:3e:00:8d:58:e8:d1:0e:3c:bc:06:a6:a6:
4f:4e:85:0c:3b:d9:b2:a9:8b:94:af:4e:d9:b6:3a:
a8:81:94:f4:5a:83:3a:37:fe:37:8a:27:b6:db:8b:
8e:3e:6b:19:83:87:40:4a:64:3d:51:c7:64:4e:46:
38:6b:47:95:b8:df:63:76:21:ab:51:03:2f:c0:cb:
94:3a:5c:3e:ec:76:f0:25:4b:42:97:03:12:a0:35:
9b:00:27:64:60:b4:8e:b8:33:e2:b3:88:28:ec:fc:
56:3f:11:6a:58:94:78:cf:cd:ea:b8:ea:0e:92:e9:
e1:68:a0:2b:61:62:34:03:fe:47:59:af:d5:c8:a2:
a4:28:0c:b7:86:45:26:c4:c1:24:c9:a0:df:98:a9:
60:69:1e:e6:68:f9:b4:a3:54:98:25:aa:4c:74:44:
16:ce:89:6d:c6:be:75:42:46:d1:a2:89:25:81:33:
ff:7f:d2:23:f7:4e:bd:de:1d:01:36:c1:89:c1:ad:
a2:d6:7e:60:09:44:6c:99:35:af:b5:ae:4f:53:aa:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:1C:40:BD:66:D4:CF:20:46:50:93:82:14:04:AC:BE:51:F2:12
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d3:d2:77:d2:56:c8:3f:0f:60:05:b1:6e:a1:31:bb:0a:a8:
bd:2a:0a:15:e9:5f:a1:e3:80:08:f3:56:8f:70:5b:d5:10:6d:
25:bb:bc:0c:ae:9a:d7:cd:1b:01:b0:1f:71:9e:3b:b2:b5:6f:
42:c9:60:e8:6b:18:d9:49:d3:ee:41:70:ad:25:91:46:d5:a0:
06:1f:9e:9e:46:1f:75:52:3e:6d:bf:3c:53:84:c6:88:06:f4:
65:7e:7a:e2:42:08:57:91:54:d8:87:71:4c:dd:8d:e5:80:ef:
7a:3e:f5:47:13:e5:f5:6c:84:5f:80:d8:1b:55:84:7a:b2:23:
c9:2a:6a:6f:bf:e1:9a:9d:d2:6b:c0:39:3a:18:d5:e7:4c:a4:
80:ab:9b:24:88:22:3c:04:84:4d:30:ba:15:3e:12:3a:81:d2:
65:c3:b1:5d:03:5f:11:b1:ca:c1:48:59:48:52:5b:18:ee:ff:
00:d7:61:86:ad:fc:f4:cd:cc:5c:89:a9:53:1d:d2:20:7d:ef:
b0:0c:33:2a:14:5d:8d:9b:a6:a8:09:82:22:6e:ff:85:24:49:
1f:8c:fe:01:1f:f5:1b:df:50:ab:fa:07:13:b4:e1:bb:bf:e3:
e5:18:d5:c2:b7:9d:b1:b5:a2:c6:fc:5b:33:27:9d:28:ac:77:
94:5e:9b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:54:44 2026 by rpki-client