Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.mft
File: BiI218ZM5CV_YCUvr1HP6aFSby4.mft (raw, json)
Hash identifier: 9mKrxgboyknufCNWAR+WHXflMEqnmZJDXC+f6VV5uK4=
Subject key identifier: 13:88:30:70:CE:3B:59:A9:9C:59:74:F9:91:B4:FC:18:2E:7D:C0:C7
Authority key identifier: 06:22:36:D7:C6:4C:E4:25:7F:60:25:2F:AF:51:CF:E9:A1:52:6F:2E
Certificate issuer: /CN=062236d7c64ce4257f60252faf51cfe9a1526f2e
Certificate serial: 01A0CC34FDEFA864FF463B8C541735AAB7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiI218ZM5CV_YCUvr1HP6aFSby4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.mft
Manifest number: 96
Signing time: Wed 23 Sep 2026 03:00:19 +0000
Manifest this update: Wed 23 Sep 2026 03:00:19 +0000
Manifest next update: Thu 24 Sep 2026 03:00:19 +0000
Files and hashes: 1: BiI218ZM5CV_YCUvr1HP6aFSby4.crl (hash: FIFkhEdbFYKJ4DNdANpg2DgCoIghUFoSQckaVMttE0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiI218ZM5CV_YCUvr1HP6aFSby4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:34:fd:ef:a8:64:ff:46:3b:8c:54:17:35:aa:b7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=062236d7c64ce4257f60252faf51cfe9a1526f2e
Validity
Not Before: Sep 23 03:00:19 2026 GMT
Not After : Sep 24 03:00:19 2026 GMT
Subject: CN=13883070ce3b59a99c5974f991b4fc182e7dc0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:47:26:87:df:25:68:36:ed:e0:44:81:d2:
a5:95:94:b6:b0:00:f0:46:fb:0d:c6:7e:b3:59:02:
ff:12:5b:62:d3:e0:32:4c:f9:90:22:04:f0:a1:b7:
96:bc:95:99:dd:4c:ff:ac:41:d0:5b:46:77:4b:46:
61:b3:f3:e9:cb:11:cd:6f:5f:37:89:33:c8:10:61:
86:27:f0:5d:e3:40:b2:1b:15:c8:10:d0:a6:3d:53:
d4:92:f2:c6:3a:da:9e:e0:b8:52:5f:63:7b:00:0a:
03:d0:dd:fe:46:38:7c:83:3b:1b:77:25:5f:02:0c:
c7:84:2e:bf:c8:0f:ad:cc:5d:af:ec:9c:45:d0:85:
dc:cc:eb:58:51:c3:c7:b3:b3:42:dd:ae:18:10:17:
a4:3a:d3:2e:41:25:6a:ec:42:af:ba:a5:e8:1b:b4:
67:a2:a7:a9:8d:9c:7f:b6:d7:a1:b4:29:7c:8a:e5:
c0:0c:55:7a:a6:0b:02:f8:be:16:64:10:74:b5:cd:
3b:8e:84:2b:d9:af:69:dd:85:92:5c:35:64:86:38:
db:05:07:26:26:c2:88:b3:04:a8:eb:b6:e7:73:b0:
d6:fc:60:f3:30:97:03:f2:4f:42:0c:a4:a9:a6:5d:
09:67:89:3a:a7:c4:0a:ac:10:2b:eb:5b:55:de:5b:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:88:30:70:CE:3B:59:A9:9C:59:74:F9:91:B4:FC:18:2E:7D:C0:C7
X509v3 Authority Key Identifier:
keyid:06:22:36:D7:C6:4C:E4:25:7F:60:25:2F:AF:51:CF:E9:A1:52:6F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiI218ZM5CV_YCUvr1HP6aFSby4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/263d04-ad0d-4239-9872-caabc352a281/1/BiI218ZM5CV_YCUvr1HP6aFSby4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f3:00:b3:bc:86:90:c2:cb:ce:3b:3f:ab:52:c6:2e:0e:42:
0e:55:bb:23:0e:a0:eb:13:ac:dd:ce:b1:e7:d9:6c:f0:fa:77:
48:84:5b:d2:d6:ea:78:02:5d:2c:dd:f3:8c:a6:7b:a6:83:a7:
94:14:b7:c9:5b:60:af:06:9b:0e:6e:1e:af:a1:ee:ed:04:1b:
d0:96:ff:ef:0d:1b:87:01:c2:ea:28:39:da:bb:24:10:21:2d:
16:8a:a9:c4:08:30:52:68:99:c0:7e:80:dd:c7:ac:2b:4e:fe:
df:f2:53:70:9a:b8:97:f2:39:68:b6:56:43:d2:f5:b7:da:25:
50:cf:8b:90:ed:c6:4c:f5:51:cf:85:cb:15:61:21:d9:b6:6c:
79:3c:53:02:a0:06:a6:d6:69:70:27:e9:9b:44:40:b7:ba:cb:
5e:e7:be:b0:c5:3c:76:62:70:27:e9:b7:d4:bd:50:22:35:b7:
6a:17:31:c3:84:ac:09:32:f5:36:8f:fc:c5:68:17:52:1a:9b:
85:00:97:54:03:3e:43:e6:4b:bc:af:f4:6f:7d:a0:30:30:a4:
96:70:cc:31:62:9b:2d:ab:4a:c7:1c:0a:ca:4a:c9:7c:d7:87:
0f:19:dc:9a:48:94:97:8e:37:db:0f:ee:78:d6:0f:dc:2d:4a:
ce:83:0d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:14:01 2026 by rpki-client