Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
File: biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft (raw, json)
Hash identifier: tjSg4Deh+xSnhG+8QTiOcCYeiXzUdvFtTJpnuwncUsc=
Subject key identifier: 11:43:BC:E4:53:D5:B5:94:67:20:3F:CA:0A:F4:49:8A:31:CE:F0:34
Authority key identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9
Certificate issuer: /CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
Certificate serial: 01A1287AD143022855A53011ED73BB306CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
Manifest number: 0437
Signing time: Sun 11 Oct 2026 01:01:39 +0000
Manifest this update: Sun 11 Oct 2026 01:01:39 +0000
Manifest next update: Mon 12 Oct 2026 01:01:39 +0000
Files and hashes: 1: 5wY_n2E9m5Fm8AHGBhePkR6VYWk.roa (hash: ZBwa+iIbx4TsdQ1LjVsQwUbo717HhRLxWJOE/WzCBUk=)
2: biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl (hash: FiWFGLWaTyJJeXV9QyT/Y+lWyU4EiBs+rsuAQv84DS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:d1:43:02:28:55:a5:30:11:ed:73:bb:30:6c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
Validity
Not Before: Oct 11 01:01:39 2026 GMT
Not After : Oct 12 01:01:39 2026 GMT
Subject: CN=1143bce453d5b59467203fca0af4498a31cef034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:80:15:e7:64:40:be:d1:ed:ac:59:f8:a1:
82:ad:6a:85:4a:8e:e3:19:85:cd:92:09:45:70:3c:
ab:76:20:01:ac:a8:d9:7a:b0:fe:7c:23:7c:e1:f4:
3c:9e:0b:57:f5:1d:df:63:99:65:39:04:49:78:b9:
ce:45:b4:13:ce:7b:43:8e:6c:d8:f1:a6:68:70:b6:
a7:67:ef:7d:fd:74:06:49:17:7d:f8:14:67:0f:30:
f9:76:28:59:ac:cb:5b:a0:89:4a:a6:91:a5:69:f2:
ac:56:dc:30:6e:49:0c:60:02:35:b5:ea:c8:e3:1f:
9e:dd:40:40:86:27:ea:fb:46:9e:83:8d:25:da:33:
10:e3:c7:a2:7b:d6:f2:49:f2:e6:48:be:60:6b:84:
25:59:0a:ae:fa:f3:ed:9a:72:79:70:e5:e1:d2:53:
7f:c2:a9:23:82:50:78:ac:9b:f2:5e:97:94:cc:6a:
6a:fd:8e:97:c1:fd:9f:9c:c4:52:56:01:a8:8f:80:
c3:04:52:cb:3f:01:c0:ca:38:92:73:96:08:7d:28:
e9:48:15:76:b3:fd:11:a3:da:c2:00:00:a7:b1:d0:
9c:fa:86:bc:ca:15:60:6e:f9:d0:68:37:86:2f:e0:
4e:03:b4:89:76:b0:71:cd:ac:38:4c:93:b9:7b:c9:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:BC:E4:53:D5:B5:94:67:20:3F:CA:0A:F4:49:8A:31:CE:F0:34
X509v3 Authority Key Identifier:
keyid:6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:87:15:b7:04:9a:c7:4c:7b:fe:7b:9a:12:d6:76:89:01:68:
c5:4b:00:33:28:45:50:b3:3f:ef:a0:b0:eb:df:e0:48:2d:0e:
2b:05:c3:aa:83:00:20:87:48:0d:4f:9c:04:b2:9e:d1:51:97:
ba:c3:75:b4:0a:19:80:82:70:12:34:a1:16:3d:2b:f4:02:3a:
67:d5:e8:26:fe:59:bc:14:f6:c3:9f:d6:be:68:e9:69:f3:f0:
8d:91:73:c0:8a:6a:99:87:93:f2:cd:c1:b9:ac:26:9e:ed:6d:
f2:81:dd:fb:4a:4f:7f:2f:d3:71:7e:ed:aa:cb:91:64:a1:51:
f8:fa:4b:c6:33:12:65:2b:3b:63:20:76:a2:e6:51:d1:0f:00:
5f:d0:ed:ed:9a:84:8d:dc:f7:76:21:2f:70:13:49:e3:53:20:
2c:04:31:7a:c1:61:4a:fd:74:6c:57:6d:fa:55:91:d4:14:5b:
68:17:77:c0:48:17:67:3e:03:f5:e2:db:4a:98:82:42:9f:e4:
8b:79:cc:8d:6c:83:2f:5f:b0:ff:53:20:bf:a7:ec:ad:6c:ee:
4e:8c:98:5d:2b:1c:98:ef:20:c6:9e:3b:b4:01:8a:c8:25:cb:
a6:e9:b4:cd:10:3b:f5:36:5a:80:66:cd:0e:a3:fd:08:27:f7:
45:6f:49:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoetFDAihVpTAR7XO7MGzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMjEzZGI2ZDJiMWU0ZjMwYjYyZWQxMTY3ZTI1MjIzNjI2
MzYwYjkwHhcNMjYxMDExMDEwMTM5WhcNMjYxMDEyMDEwMTM5WjAzMTEwLwYDVQQD
EygxMTQzYmNlNDUzZDViNTk0NjcyMDNmY2EwYWY0NDk4YTMxY2VmMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVyAFedkQL7R7axZ+KGCrWqFSo7j
GYXNkglFcDyrdiABrKjZerD+fCN84fQ8ngtX9R3fY5llOQRJeLnORbQTzntDjmzY
8aZocLanZ+99/XQGSRd9+BRnDzD5dihZrMtboIlKppGlafKsVtwwbkkMYAI1terI
4x+e3UBAhifq+0aeg40l2jMQ48eie9bySfLmSL5ga4QlWQqu+vPtmnJ5cOXh0lN/
wqkjglB4rJvyXpeUzGpq/Y6Xwf2fnMRSVgGoj4DDBFLLPwHAyjiSc5YIfSjpSBV2
s/0Ro9rCAACnsdCc+oa8yhVgbvnQaDeGL+BOA7SJdrBxzaw4TJO5e8mcQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFDvORT1bWUZyA/ygr0SYoxzvA0MB8GA1UdIwQY
MBaAFG4hPbbSseTzC2LtEWfiUiNiY2C5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xMzI3NmEtYzU3NS00NzlmLTkzOWYt
Y2M0NDc0YzMyMTFhLzEvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xMzI3NmEtYzU3NS00NzlmLTkzOWYtY2M0NDc0YzMyMTFh
LzEvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYcVtwSa
x0x7/nuaEtZ2iQFoxUsAMyhFULM/76Cw69/gSC0OKwXDqoMAIIdIDU+cBLKe0VGX
usN1tAoZgIJwEjShFj0r9AI6Z9XoJv5ZvBT2w5/WvmjpafPwjZFzwIpqmYeT8s3B
uawmnu1t8oHd+0pPfy/TcX7tqsuRZKFR+PpLxjMSZSs7YyB2ouZR0Q8AX9Dt7ZqE
jdz3diEvcBNJ41MgLAQxesFhSv10bFdt+lWR1BRbaBd3wEgXZz4D9eLbSpiCQp/k
i3nMjWyDL1+w/1Mgv6fsrWzuToyYXSscmO8gxp47tAGKyCXLpum0zRA79TZagGbN
DqP9CCf3RW9JvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:48:33 2026 by rpki-client