Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: pG+8OhxUF/78s6evvhNTZUFlQrEaMaDDgYiVuW7tlZs=
Subject key identifier: 06:07:7C:E6:7F:E5:C7:19:77:9C:34:F0:F0:0E:FE:26:2F:57:AE:0E
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 019F8EA2CB646C83860C45013CB6A57DEB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 11:01:01 +0000
Manifest this update: Thu 23 Jul 2026 11:01:01 +0000
Manifest next update: Fri 24 Jul 2026 11:01:01 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: v/UzAOShqpYerZECYjRzp0DvRjM+dMO1LA4JBRas1b4=)
2: DlObQ48l6w9Lz1ru1Ps9vXN6dUs.asa (hash: RM2FL8CGd5yQXQEGV8NuC1yuCyRHYcz0dUdW6scntzw=)
3: aToK1H8Eu9LQyX9O96VpmV4-xH4.roa (hash: NOHh63b/9WqU00dOh312eJJg1BRneOILOEiJiVt9VO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:cb:64:6c:83:86:0c:45:01:3c:b6:a5:7d:eb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Jul 23 11:01:01 2026 GMT
Not After : Jul 24 11:01:01 2026 GMT
Subject: CN=06077ce67fe5c719779c34f0f00efe262f57ae0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:3a:23:74:88:14:4a:57:46:f0:fb:30:0c:
a9:3d:76:bd:0b:eb:6f:26:d0:10:38:a2:e1:06:cf:
e8:fd:01:8e:9e:d9:65:51:af:1e:b3:2c:bb:be:de:
75:47:df:de:8c:c5:82:5a:45:b8:e1:de:7e:60:e3:
16:8f:f7:4d:82:06:f8:0e:db:aa:0e:d9:f5:07:44:
d1:08:f3:29:05:d6:ff:13:fa:c0:6c:3e:c0:d0:0c:
77:d8:4a:89:6a:9d:87:96:2a:a7:df:f9:17:05:64:
63:60:03:6d:20:bb:d0:db:0e:ad:a7:02:d3:d1:24:
e6:9d:94:31:72:8a:ed:f0:3f:aa:e8:c2:46:97:04:
44:ad:73:dd:c0:e0:3e:87:48:33:bc:da:59:82:3b:
c2:33:17:19:5b:fd:de:8c:50:0a:ac:bd:91:19:6e:
fc:34:26:8a:de:03:8b:fe:4c:fc:10:a3:c7:44:d4:
2f:19:02:cf:2d:77:9c:c9:d1:7c:25:66:59:31:1f:
52:1e:12:b7:ab:5f:0d:f4:05:da:9d:27:5b:83:35:
4f:f9:57:e1:e7:ee:01:17:8e:c7:38:23:4b:b9:ea:
b6:e7:68:e8:d4:14:c6:fa:5e:7c:1c:68:8f:28:56:
c3:ac:15:b0:a2:73:a8:c3:43:29:e7:a3:ad:e1:a1:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:7C:E6:7F:E5:C7:19:77:9C:34:F0:F0:0E:FE:26:2F:57:AE:0E
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fd:07:39:20:b6:e5:f8:43:c8:78:27:12:f1:45:1c:a8:bd:
2d:95:bb:cb:ca:cb:47:59:d4:68:5f:25:ef:46:a4:8a:1e:b3:
8e:ca:a6:52:e8:3c:34:d5:8b:b4:58:9a:cd:2a:ae:d1:97:d5:
49:6b:04:cc:99:72:93:ea:b1:16:b2:63:1d:2b:2d:3a:66:a9:
10:1c:70:a0:f4:84:8f:3c:a6:1b:54:c2:b1:89:ee:16:65:dc:
7a:01:d7:6a:10:29:ca:11:50:2a:b7:27:8e:7e:55:3a:05:61:
58:b6:9f:6a:d5:f4:0a:f3:aa:23:f3:e3:88:9a:f9:72:47:d5:
d1:85:98:14:96:f5:30:42:6d:79:58:3c:b9:6e:8e:85:76:01:
92:76:55:92:5f:87:14:5d:a2:88:04:24:6d:75:2f:49:aa:83:
9e:48:23:bf:5e:93:8e:46:50:e0:1d:e0:32:1b:a5:47:4f:4a:
3b:61:e2:42:ff:a4:23:69:12:7e:4e:e0:3e:ce:01:ac:24:c7:
16:4a:8e:3f:ea:9c:34:94:9f:3a:5d:5c:f6:78:74:e3:08:e5:
27:7f:8d:32:68:11:d3:12:7a:3c:ae:1e:75:ab:3a:82:8c:1c:
b0:90:cf:f0:21:8e:b4:89:ec:97:ea:be:d0:eb:b3:e2:7a:f1:
52:d7:c0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:32 2026 by rpki-client