Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
File: biYdnc3dmGfliSrRpNII32lTEXc.mft (raw, json)
Hash identifier: LjblseY0xdunaa4T782uOEdxqLfchawJ9SHUR2kgScw=
Subject key identifier: D8:95:2C:BB:C5:DF:B5:B8:D9:C9:7E:3D:5A:FF:3F:12:EC:74:7F:E6
Authority key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
Certificate issuer: /CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Certificate serial: 019D2AE0436A1E201ADEADDA7CDAF6068243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
Manifest number: 10E4
Signing time: Thu 26 Mar 2026 16:00:33 +0000
Manifest this update: Thu 26 Mar 2026 16:00:33 +0000
Manifest next update: Fri 27 Mar 2026 16:00:33 +0000
Files and hashes: 1: biYdnc3dmGfliSrRpNII32lTEXc.crl (hash: ZWWWYV+Bk5Q8cwLfRHXXhTTr1/S9Dt4bI3Ejr5c4zcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:43:6a:1e:20:1a:de:ad:da:7c:da:f6:06:82:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Validity
Not Before: Mar 26 16:00:33 2026 GMT
Not After : Mar 27 16:00:33 2026 GMT
Subject: CN=d8952cbbc5dfb5b8d9c97e3d5aff3f12ec747fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:49:5e:7b:c5:2f:43:be:21:43:05:6c:75:
d5:21:64:ed:2d:d4:7c:2d:bd:4b:b4:98:31:29:e2:
16:50:92:ce:78:52:ff:7f:4c:36:73:db:d8:47:73:
a0:e7:e5:c6:c5:e6:8e:18:06:71:71:57:4b:6f:4e:
6c:6d:c9:fc:57:c3:80:2a:24:cb:95:da:c2:33:8e:
bf:c2:ac:2f:32:18:58:0a:11:82:df:9f:5f:b9:42:
c8:68:87:22:07:14:ae:89:50:29:0e:a9:f0:91:90:
e8:9e:a8:9d:62:c1:7e:ab:73:33:3e:d4:02:72:07:
c0:ca:07:96:b7:35:c3:9d:42:e6:63:a2:bf:5a:15:
9a:dd:20:46:0b:06:cb:b1:9a:0a:c1:0c:a6:5a:88:
f6:e6:93:88:1a:65:ff:35:db:d7:28:a8:38:75:0e:
6f:92:02:d6:9c:4a:fc:18:34:e5:f4:d2:b1:19:fe:
d4:f8:46:55:a4:43:36:a4:2c:e5:a1:df:2e:86:47:
1d:80:a6:07:f3:a9:63:bf:c8:e2:bb:c4:03:25:db:
e9:a8:81:72:87:a8:3d:76:17:a6:68:fc:11:2a:3e:
5c:03:aa:bf:e5:46:b5:11:41:31:83:4f:9b:69:b7:
ca:01:3b:a7:e2:b3:67:8b:ee:cd:e9:5e:7c:51:3b:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:95:2C:BB:C5:DF:B5:B8:D9:C9:7E:3D:5A:FF:3F:12:EC:74:7F:E6
X509v3 Authority Key Identifier:
keyid:6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:dd:27:31:00:32:ea:1d:2a:90:75:be:7f:87:2a:18:92:02:
dc:75:d0:b9:60:19:e6:97:46:b3:ed:89:b3:c7:c6:29:76:69:
08:ce:0b:a6:19:fa:1c:72:d7:88:c3:43:e3:98:df:03:3d:f2:
84:5e:ef:20:b7:c9:90:1d:94:00:00:34:7a:0c:0c:f6:0f:8a:
55:95:39:45:80:91:57:60:ff:7c:82:ea:78:1f:15:86:4b:f2:
23:c7:55:06:a9:f7:6a:82:56:90:52:ff:e2:76:1e:77:ff:80:
3f:6a:63:56:55:40:e0:bd:df:1a:75:a3:dd:2d:e7:e8:b4:6b:
2a:e3:d5:0e:31:28:11:92:91:bc:cf:d3:41:b2:2a:3e:b4:be:
b4:6d:6f:97:88:75:4e:db:07:ca:c2:d1:af:85:57:8f:62:55:
df:73:1d:21:b6:cb:57:a4:c7:a8:20:55:13:e4:5c:d8:a8:06:
33:d7:ad:c4:18:21:d8:31:f9:36:9a:dc:73:98:cb:5e:86:ae:
bc:d5:2b:7e:1c:56:20:c9:51:ad:87:72:ba:98:e3:12:1a:bd:
20:19:dd:d2:ed:67:1f:8d:38:2d:df:4a:ab:4b:9b:33:3a:b1:
04:2f:79:97:ef:58:c4:6b:ca:04:64:e6:ea:af:35:f8:56:74:
fa:64:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:11 2026 by rpki-client