Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: pzpFXmXyvNQtYWk1C1r2yu7s1M34+GYjkADiDdnofiM=
Subject key identifier: E5:46:00:49:8F:E4:95:3B:A5:D0:EF:C7:F1:03:05:B2:88:3B:8E:89
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 01A0CB90D0AFB5394E291000A9A8F278F102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0DA6
Signing time: Wed 23 Sep 2026 00:01:00 +0000
Manifest this update: Wed 23 Sep 2026 00:01:00 +0000
Manifest next update: Thu 24 Sep 2026 00:01:00 +0000
Files and hashes: 1: 13WPeIOo8P7vrgfHO9nU7H_KMKo.roa (hash: 2pw/sr5aIoyYCgIoe3nPeNczkofoVd57FWK10ehymxc=)
2: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: KDLNGXOmZnLRrZf/MGJLSckDuR+dP43AEyG2bmQjCuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:d0:af:b5:39:4e:29:10:00:a9:a8:f2:78:f1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Sep 23 00:01:00 2026 GMT
Not After : Sep 24 00:01:00 2026 GMT
Subject: CN=e54600498fe4953ba5d0efc7f10305b2883b8e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:59:ab:69:9d:94:28:87:d7:94:bf:9d:8d:
6c:bc:2f:ad:ce:45:2f:4d:2b:ce:86:a6:08:39:e7:
34:c0:1a:dd:31:ca:58:5f:2f:fe:68:21:6f:40:2f:
da:ad:fe:4f:c4:7e:aa:5b:93:c3:2c:2e:83:37:10:
b1:66:27:e2:fa:d3:13:3f:0d:80:84:9a:05:9b:8c:
03:17:18:b7:d0:8e:fc:ac:2a:1f:28:a0:2b:ab:76:
fb:52:1a:7d:bd:ef:08:10:c5:a0:11:65:fe:d3:57:
9a:20:5c:d3:95:da:3c:0f:f7:d1:b5:32:c2:eb:5b:
bd:e6:16:c2:b0:61:6c:78:9b:0d:a2:a3:2b:96:c7:
77:66:41:57:9b:d9:84:90:41:27:a3:a0:4f:63:49:
4e:40:c7:25:42:f7:a9:81:fa:b0:aa:96:12:90:c5:
b1:b6:c8:34:3e:7b:e5:ce:04:82:ad:2f:93:13:22:
8f:d3:77:d1:77:e0:de:f0:9e:23:1f:86:0e:2d:5e:
19:de:fc:96:fd:fe:00:ed:24:4f:ff:ee:ba:ba:70:
cb:32:1e:9b:b9:2c:de:5b:d7:4a:34:54:f1:68:1f:
f2:f8:0e:44:86:69:2a:df:60:da:9c:42:31:fd:7f:
b0:48:12:a9:87:df:c6:3b:96:c7:35:81:48:cc:14:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:00:49:8F:E4:95:3B:A5:D0:EF:C7:F1:03:05:B2:88:3B:8E:89
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c1:c5:55:69:76:e3:f4:7a:dc:52:8a:ca:fc:eb:05:e6:d5:
11:72:69:2c:31:e8:4c:83:f5:c3:c7:19:2c:ad:22:e5:0c:c6:
c6:72:5f:7e:93:12:0b:3f:7e:90:ea:87:d6:26:0a:6e:37:13:
41:72:85:c6:af:db:a1:31:5b:a9:81:bb:53:db:e2:50:97:ea:
51:3b:1b:ed:bc:7e:5d:df:46:e4:42:c2:72:d7:9e:96:d8:39:
f1:7e:93:eb:ea:90:9d:3e:8c:d6:38:79:c6:a1:34:22:f8:9e:
d9:49:27:e4:c3:aa:5a:5b:70:9e:0f:fe:dc:e6:3e:e0:47:02:
7e:65:01:3f:0e:8e:ed:4e:9d:f4:d6:b3:fd:8a:f1:7e:31:68:
9f:ac:e7:75:db:24:53:2b:af:f2:f2:88:e2:72:fe:d9:a7:0e:
fe:49:e8:8b:0d:46:5c:42:6f:f3:77:03:c0:84:e4:3d:f6:ef:
f5:e8:38:a1:a4:1e:03:c5:1d:78:d9:01:f0:a9:14:fe:db:b3:
68:77:f6:62:30:b4:12:c7:25:7a:e0:55:22:04:1c:40:02:dc:
d2:b8:11:dc:56:b9:30:b5:0c:b6:a8:ff:2d:01:b5:41:6b:8b:
75:55:e6:83:bd:50:bb:58:8f:14:72:b5:b5:7c:cc:f0:bc:aa:
60:e6:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:11:10 2026 by rpki-client