Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: 6O4A9yKNxQDkhf41eAoQor7CgE/220S08gP7+0/TTVw=
Subject key identifier: EE:7D:79:5F:2B:5E:22:A6:16:CF:AF:CA:36:B9:1E:5B:A9:DE:7B:63
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 019E1C7E0436B61BBB17B3CCBFE20FE5354B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0C42
Signing time: Tue 12 May 2026 14:01:20 +0000
Manifest this update: Tue 12 May 2026 14:01:20 +0000
Manifest next update: Wed 13 May 2026 14:01:20 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: yprCNHJDO48PsAqJuGRqlTCIRbf2fF9kZ2mwdbj94JI=)
2: Is7C3W26lEw15lD5VhKPKWdkM8M.roa (hash: OE4K7vc1yucd3jpu96y3uZHtADB9bFEDzoGvFJGStC4=)
3: cqEx3z1wzl-0mdtNpY4AnTyAIMc.roa (hash: GFZBmF6WdLGeI9dqHrnwm1HNWHgZhg1gZ+mGTpe3Vfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7e:04:36:b6:1b:bb:17:b3:cc:bf:e2:0f:e5:35:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: May 12 14:01:20 2026 GMT
Not After : May 13 14:01:20 2026 GMT
Subject: CN=ee7d795f2b5e22a616cfafca36b91e5ba9de7b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:80:54:43:8a:63:52:e0:5c:6b:dd:86:10:c8:
5d:72:7f:c8:fc:bc:98:5c:33:78:3b:c2:c4:3b:9b:
d5:ed:b9:76:1f:63:2c:a1:dd:8b:36:90:17:69:29:
70:24:0d:94:50:c7:e8:61:17:86:ff:cb:b2:5f:b1:
90:b9:c2:66:77:c2:74:88:70:95:79:56:61:30:69:
36:8b:b0:fd:d3:97:46:b1:5b:af:a6:64:4e:3d:3c:
71:da:36:4f:18:b2:eb:1c:66:8c:d7:40:74:9e:1a:
b7:d9:23:1f:f8:19:77:90:88:8f:40:35:ce:b3:10:
99:53:f4:aa:be:9d:7b:4f:e5:20:f0:e7:01:40:e2:
09:05:a6:3f:a3:72:24:a3:8a:c0:32:99:ca:f6:53:
b5:6c:80:c5:a5:25:a8:54:e0:10:5f:a3:0c:84:ca:
a4:1e:e7:45:48:4c:fa:51:38:0a:0a:87:6f:dd:f2:
fc:dd:e0:5d:0c:71:da:6b:18:c1:ad:92:96:21:7b:
09:31:9b:4e:c1:9e:46:60:ee:a7:e9:7d:02:0c:50:
42:39:55:c8:14:7d:0e:a7:f5:c0:65:f3:f0:dc:a6:
e8:9d:77:95:fb:3f:de:29:13:0e:54:c2:11:37:9c:
90:25:9e:e1:eb:a1:01:84:5f:ed:3d:42:87:3b:85:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7D:79:5F:2B:5E:22:A6:16:CF:AF:CA:36:B9:1E:5B:A9:DE:7B:63
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:da:18:d0:0d:45:40:14:89:c9:bd:38:4e:5a:fb:29:3f:4e:
41:14:ac:21:d9:78:48:99:97:21:fe:79:10:fd:88:f4:b2:e1:
61:43:02:8d:9f:20:8a:b3:13:b8:69:ed:66:0b:01:7f:13:02:
21:6e:a9:66:51:81:b3:54:7b:d1:9f:58:ea:25:0d:1a:5e:c6:
e6:ec:8c:aa:40:45:d4:39:0a:79:0c:bc:c5:f3:0e:2e:3f:2d:
a1:98:a6:bd:75:9b:b8:82:fc:09:65:f0:c7:24:05:9b:57:f8:
28:6c:60:81:e5:8d:c7:01:0d:b7:92:5c:be:db:0e:2f:12:da:
88:b9:67:6c:14:46:2b:90:a9:95:d9:57:00:2d:55:73:8b:34:
bd:50:67:7a:fc:8f:f0:e6:e3:52:63:23:68:e6:f9:40:45:16:
c9:fb:de:a9:7f:3e:d9:5f:c8:5f:7c:95:c2:ec:fe:92:30:3f:
c9:96:41:b8:ba:f7:14:ac:8f:a2:df:bd:8d:70:a5:99:e9:8b:
9a:45:01:f4:fb:fc:d8:95:a8:33:7f:12:79:ed:b7:47:dd:9c:
6c:f3:3e:b1:c9:5f:cc:fa:69:c1:85:7a:03:80:f8:88:ba:fc:
24:f6:da:ef:0b:56:f5:9d:0e:5c:10:1d:44:1e:c9:40:1d:af:
67:17:37:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:33 2026 by rpki-client