Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft
File: _BirNMWiEorErlXBr23vZTSzgR0.mft (raw, json)
Hash identifier: YWlISw/C/6nUDVTjS5Ad4QbjWQbdr0ANekvXvWhuXGQ=
Subject key identifier: 62:D8:FC:41:E4:FA:E4:FA:3D:A2:95:44:DE:65:41:C8:FE:16:EE:07
Authority key identifier: FC:18:AB:34:C5:A2:12:8A:C4:AE:55:C1:AF:6D:EF:65:34:B3:81:1D
Certificate issuer: /CN=fc18ab34c5a2128ac4ae55c1af6def6534b3811d
Certificate serial: 019D37F7431FE42EDF41910A56753A679EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft
Manifest number: 0103
Signing time: Sun 29 Mar 2026 05:00:44 +0000
Manifest this update: Sun 29 Mar 2026 05:00:44 +0000
Manifest next update: Mon 30 Mar 2026 05:00:44 +0000
Files and hashes: 1: CZU0k_zzWDnACuwxEN2WSub1YTI.roa (hash: 78vQg7roZ5l5cTS1ZqVQewjxV+/HUZjsE2UCphhS6P0=)
2: _BirNMWiEorErlXBr23vZTSzgR0.crl (hash: LMAO8ygPdj+wOMRadwV0P8qmhP83Wp+W8EPgBqCYxg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:43:1f:e4:2e:df:41:91:0a:56:75:3a:67:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc18ab34c5a2128ac4ae55c1af6def6534b3811d
Validity
Not Before: Mar 29 05:00:44 2026 GMT
Not After : Mar 30 05:00:44 2026 GMT
Subject: CN=62d8fc41e4fae4fa3da29544de6541c8fe16ee07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ff:7b:6d:65:1a:d1:9a:f7:40:51:32:f6:1b:
7f:4c:86:0f:e6:72:80:82:9e:ef:9f:de:6a:f9:7d:
db:1a:10:c0:b4:49:da:c6:01:0f:a4:0e:c8:29:e2:
0a:0c:0a:56:c4:4e:70:04:8d:93:4d:69:da:54:66:
62:7a:e8:aa:da:7d:23:fc:4a:76:4e:eb:4b:a7:c7:
a0:46:b8:3b:9a:fc:08:14:a9:18:bc:ce:7a:85:43:
1f:7f:3e:9b:b8:51:16:f1:d5:2c:68:e8:fd:51:6c:
ce:96:ea:72:3b:76:8b:0f:75:cc:1b:c8:1b:38:20:
5e:78:be:9a:67:15:d7:d4:d3:a4:7d:b2:2b:11:93:
ed:6a:8a:3e:ec:0a:28:35:90:0c:67:76:97:85:bb:
85:56:0f:73:ff:27:bb:f6:3c:1a:5f:f4:8d:4b:14:
82:ca:1a:c0:db:17:f7:09:5b:6a:02:05:e5:c2:7f:
13:77:35:e5:f7:5c:00:2e:7f:0c:78:ad:af:dd:c1:
14:67:4d:03:03:78:d4:4f:1b:71:3d:6c:91:fa:91:
4d:b5:cd:19:32:a2:ab:f1:61:a3:24:81:d7:08:69:
0d:91:dd:39:57:0f:00:44:9f:d5:98:1c:20:2f:26:
ee:ab:68:a7:54:ba:76:63:68:1d:e6:d0:65:8c:24:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D8:FC:41:E4:FA:E4:FA:3D:A2:95:44:DE:65:41:C8:FE:16:EE:07
X509v3 Authority Key Identifier:
keyid:FC:18:AB:34:C5:A2:12:8A:C4:AE:55:C1:AF:6D:EF:65:34:B3:81:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c7:c4:53:af:ac:bf:4e:20:c2:32:a5:de:77:96:e2:d0:cd:
f8:05:9c:c7:fb:3f:b8:2c:98:d7:da:9a:93:76:73:90:d3:45:
2f:aa:1f:2d:d4:51:cd:9b:cc:da:c4:da:e4:9e:64:bb:8f:5f:
e7:51:e2:c0:5e:ed:3d:b8:ec:57:66:79:79:fe:18:b3:5d:3b:
b9:f9:d3:7d:f5:03:94:14:81:55:01:87:0a:d4:5e:ad:40:84:
2b:27:e8:fd:ff:c6:65:95:a0:ec:e3:5e:f7:95:26:15:45:63:
37:9b:cb:d4:f1:80:a7:95:9c:54:88:82:f5:d1:18:a9:ca:0d:
7e:29:fa:66:e5:89:1a:cd:45:c8:78:63:01:18:b9:8b:a6:6a:
d4:f3:c4:86:a1:73:44:a0:5a:e9:b5:ed:fc:ff:ea:e2:a5:db:
fd:ba:4a:4f:49:db:69:dd:ef:73:5c:ab:79:5c:77:0e:ec:2b:
57:26:d1:cf:21:94:50:c5:e9:b8:94:15:6a:3a:9d:17:fd:c6:
73:3a:87:58:6d:6f:63:0f:30:7c:0e:33:88:6b:4f:e1:f2:d2:
b1:7f:f1:50:3d:52:2a:11:b1:2b:5b:ad:8c:0e:b4:e4:d5:15:
3a:a8:f8:84:61:66:03:2e:c3:a0:7d:07:f4:03:e0:56:79:e6:
5a:d0:5a:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390Mf5C7fQZEKVnU6Z57iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMThhYjM0YzVhMjEyOGFjNGFlNTVjMWFmNmRlZjY1MzRi
MzgxMWQwHhcNMjYwMzI5MDUwMDQ0WhcNMjYwMzMwMDUwMDQ0WjAzMTEwLwYDVQQD
Eyg2MmQ4ZmM0MWU0ZmFlNGZhM2RhMjk1NDRkZTY1NDFjOGZlMTZlZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/97bWUa0Zr3QFEy9ht/TIYP5nKA
gp7vn95q+X3bGhDAtEnaxgEPpA7IKeIKDApWxE5wBI2TTWnaVGZieuiq2n0j/Ep2
TutLp8egRrg7mvwIFKkYvM56hUMffz6buFEW8dUsaOj9UWzOlupyO3aLD3XMG8gb
OCBeeL6aZxXX1NOkfbIrEZPtaoo+7AooNZAMZ3aXhbuFVg9z/ye79jwaX/SNSxSC
yhrA2xf3CVtqAgXlwn8TdzXl91wALn8MeK2v3cEUZ00DA3jUTxtxPWyR+pFNtc0Z
MqKr8WGjJIHXCGkNkd05Vw8ARJ/VmBwgLybuq2inVLp2Y2gd5tBljCSbtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLY/EHk+uT6PaKVRN5lQcj+Fu4HMB8GA1UdIwQY
MBaAFPwYqzTFohKKxK5Vwa9t72U0s4EdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Jpck5NV2lFb3JFcmxYQnIyM3ZaVFN6Z1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjY3YmUtOTY3MC00NzAxLTk5ZjAt
YTc4MTRmYzQ2ZTY1LzEvX0Jpck5NV2lFb3JFcmxYQnIyM3ZaVFN6Z1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83NjY3YmUtOTY3MC00NzAxLTk5ZjAtYTc4MTRmYzQ2ZTY1
LzEvX0Jpck5NV2lFb3JFcmxYQnIyM3ZaVFN6Z1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsfEU6+s
v04gwjKl3neW4tDN+AWcx/s/uCyY19qak3ZzkNNFL6ofLdRRzZvM2sTa5J5ku49f
51HiwF7tPbjsV2Z5ef4Ys107ufnTffUDlBSBVQGHCtRerUCEKyfo/f/GZZWg7ONe
95UmFUVjN5vL1PGAp5WcVIiC9dEYqcoNfin6ZuWJGs1FyHhjARi5i6Zq1PPEhqFz
RKBa6bXt/P/q4qXb/bpKT0nbad3vc1yreVx3DuwrVybRzyGUUMXpuJQVajqdF/3G
czqHWG1vYw8wfA4ziGtP4fLSsX/xUD1SKhGxK1utjA605NUVOqj4hGFmAy7DoH0H
9APgVnnmWtBa8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:15 2026 by rpki-client