Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: 7ebDsnNYt3+2VkvV2XEVNqRtSBa+DyFEU13AF+aAJNQ=
Subject key identifier: EB:B0:37:B2:4F:B9:B6:2E:4A:F8:05:BD:93:0D:16:D8:FB:1E:13:CF
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 019F91359AE96ED5EC063A2D1532C6CEA599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0D03
Signing time: Thu 23 Jul 2026 23:00:36 +0000
Manifest this update: Thu 23 Jul 2026 23:00:36 +0000
Manifest next update: Fri 24 Jul 2026 23:00:36 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: oZqXoOh+CREMXmzKPVKcCxNvHY4VmsNRDUOnKL7oPhQ=)
2: Is7C3W26lEw15lD5VhKPKWdkM8M.roa (hash: OE4K7vc1yucd3jpu96y3uZHtADB9bFEDzoGvFJGStC4=)
3: cqEx3z1wzl-0mdtNpY4AnTyAIMc.roa (hash: GFZBmF6WdLGeI9dqHrnwm1HNWHgZhg1gZ+mGTpe3Vfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:9a:e9:6e:d5:ec:06:3a:2d:15:32:c6:ce:a5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Jul 23 23:00:36 2026 GMT
Not After : Jul 24 23:00:36 2026 GMT
Subject: CN=ebb037b24fb9b62e4af805bd930d16d8fb1e13cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:e4:84:4d:4d:ea:41:fb:62:48:5f:c3:ea:
0d:3e:5e:85:95:cb:a4:b2:43:1d:52:68:9a:f1:77:
fc:09:2a:ea:86:87:54:2e:33:09:7c:a5:30:b9:43:
df:93:6d:3b:a3:a9:47:57:21:d0:39:b9:aa:26:d0:
db:cf:f2:d4:cc:9f:f7:0e:47:6c:9d:75:20:38:c8:
e0:a5:68:90:24:70:6a:e4:9e:26:93:bc:43:f5:04:
e8:aa:26:ab:fe:f4:a3:2e:75:33:94:b4:7f:d8:da:
af:04:07:08:eb:74:bb:80:62:41:2e:7f:34:ad:aa:
1b:90:06:b0:ef:d2:21:5a:e9:6b:4a:2f:1d:7c:6f:
65:ce:d6:f3:fe:2e:8d:9f:18:c9:a2:a6:b9:00:20:
1e:4f:06:dd:b2:a0:c7:3b:67:89:3f:da:b9:80:01:
93:49:1f:8f:6b:e5:ec:9e:53:36:8f:f6:9e:29:c2:
45:04:66:73:0e:dd:c7:f3:2b:c7:43:bd:19:40:e9:
6f:92:59:5c:2b:a1:98:53:d4:1b:6b:b0:66:c3:06:
96:4b:f5:ca:81:71:ee:9e:62:b6:b9:2e:00:e0:1d:
12:75:02:7b:df:09:00:b8:7e:cb:4a:c1:a5:2d:73:
5c:2b:ed:9e:ba:0a:e8:8b:9b:b7:d1:20:48:05:4d:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B0:37:B2:4F:B9:B6:2E:4A:F8:05:BD:93:0D:16:D8:FB:1E:13:CF
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d6:22:3b:0b:7e:88:24:f1:a1:30:ae:9b:98:b2:8d:d9:6c:
c2:a0:4e:d9:c4:c7:99:50:dd:56:e6:b3:23:54:5a:ac:a1:bc:
bd:5a:06:45:93:b1:e9:4d:e5:88:7f:a5:77:a8:79:bf:9c:4e:
10:5f:b9:08:52:b6:21:a9:0e:74:dd:e0:02:f9:83:00:c1:3c:
2f:85:fc:91:09:e7:ee:cb:3f:58:09:01:64:99:8a:85:04:58:
e5:fe:74:17:88:5a:0e:39:57:d1:73:40:b8:64:9e:2f:29:5a:
96:9d:b1:3f:22:01:21:6d:55:0d:e2:a5:65:32:ce:07:69:7b:
f9:01:94:48:18:e6:a7:54:8f:62:3d:92:a5:34:f8:ba:e2:51:
cf:c3:dc:63:86:e0:d2:7b:d2:91:b5:41:49:d3:81:9f:18:9c:
3e:9a:78:b6:66:4c:39:e7:9a:25:c2:82:67:98:eb:92:a0:0b:
f2:0b:aa:a1:9c:0a:99:a4:68:bf:39:51:fe:a1:35:09:e1:30:
81:01:78:c3:6f:18:9c:7d:10:26:a2:c6:4a:33:3c:c0:8a:be:
d4:07:8a:d9:78:8e:c0:aa:8b:61:dd:63:95:e2:36:23:10:16:
05:e7:76:b7:4f:80:d0:14:49:81:c6:e1:d9:83:cd:73:bb:f7:
32:5a:39:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:43 2026 by rpki-client