Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: fBtB5nT3pR9Dz5ywZRWecQHzHfQ0SdXxq7a7a3ciDpw=
Subject key identifier: 68:29:B7:29:83:68:C9:C3:9F:42:94:FB:4B:E1:00:77:3A:7E:61:D3
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 019D273AE01555AE9724D35BAD605E8A69F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0BC3
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: 5Bqcndcxr3Xlyg9LSKKz467BYilj7hE/OFFcYipBtqc=)
2: Is7C3W26lEw15lD5VhKPKWdkM8M.roa (hash: OE4K7vc1yucd3jpu96y3uZHtADB9bFEDzoGvFJGStC4=)
3: cqEx3z1wzl-0mdtNpY4AnTyAIMc.roa (hash: GFZBmF6WdLGeI9dqHrnwm1HNWHgZhg1gZ+mGTpe3Vfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e0:15:55:ae:97:24:d3:5b:ad:60:5e:8a:69:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=6829b7298368c9c39f4294fb4be100773a7e61d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:20:90:43:dd:54:b5:09:e7:d9:d0:51:9d:
25:ab:25:25:f7:f4:aa:04:a8:24:03:7e:3d:f9:94:
36:de:be:e6:e9:07:e1:85:de:1d:66:1c:77:40:f0:
aa:f6:f8:db:4e:25:2d:d9:8a:fb:44:1a:84:5e:f0:
29:09:ad:cc:a5:30:e1:83:f9:19:93:63:f8:75:06:
a2:76:f6:6f:76:a2:a8:35:0b:fa:46:97:fc:ec:18:
97:b6:8c:a4:a8:b8:a8:dc:27:d6:7a:2c:5e:5d:f6:
c0:2a:e4:e8:9c:b5:25:da:06:27:46:9d:b7:ed:71:
d7:26:aa:dd:f9:67:74:3d:ac:8e:3c:a7:61:a6:c7:
3e:be:c2:a5:1a:e5:ef:5f:5d:15:ad:54:b1:2a:60:
0e:fc:31:91:13:f1:f9:ee:05:fb:42:ed:a2:e7:18:
56:94:ad:5f:00:67:a5:61:b9:64:1f:e6:cb:d2:09:
28:48:28:d5:a4:68:44:fc:c8:35:2b:1e:ee:5e:b7:
c6:73:24:9e:f5:6d:b0:6a:d9:11:1c:63:9b:a0:65:
29:a5:8c:51:21:18:95:14:8a:36:5e:e3:d9:88:9a:
75:a3:31:ee:2b:b1:0c:27:97:e5:04:6a:73:e5:b1:
79:50:9f:9d:a3:ae:57:1f:0b:c2:cd:aa:81:a8:9e:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:29:B7:29:83:68:C9:C3:9F:42:94:FB:4B:E1:00:77:3A:7E:61:D3
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:19:e1:5e:7a:51:cf:7a:6b:5d:77:e5:8a:44:95:af:2e:b6:
6c:8c:f8:ad:99:f4:1b:37:d5:ea:20:5f:4d:08:b1:c2:67:9b:
ed:0a:4b:06:8a:9d:5b:85:78:9d:d3:6e:03:b2:53:b4:fd:29:
df:37:a2:19:10:05:03:f1:79:1e:0c:09:6d:e0:e6:fa:46:85:
4b:e5:fc:f2:24:3f:66:cb:98:60:82:6d:88:a8:1c:88:1a:65:
7d:f7:99:fc:54:69:b0:41:cf:ea:ee:9e:53:4c:55:9b:d4:82:
5c:fa:5e:9d:29:b4:0a:8f:8c:66:80:16:4d:02:21:56:4f:16:
ea:1b:42:d5:19:9d:c7:a8:5e:23:72:ba:20:c8:a0:ee:bc:da:
42:0c:88:12:75:4a:b7:40:b6:6e:ef:ae:0d:c9:ac:94:00:34:
48:df:c7:6e:c4:6c:16:31:b8:64:4e:34:84:6b:1d:91:a3:ab:
90:e7:95:ea:ad:a2:2a:bc:70:1e:77:0e:0d:3e:f3:64:da:ef:
ea:36:0a:0e:38:27:3a:7c:91:f9:bd:4c:0a:46:80:7c:06:59:
58:1d:bd:74:92:6e:01:7f:ee:25:e9:3e:dd:08:12:75:b8:b1:
65:00:44:94:ca:1f:a7:c3:78:40:57:00:66:80:0f:1b:1e:42:
47:7f:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:02 2026 by rpki-client