Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft
File: _BirNMWiEorErlXBr23vZTSzgR0.mft (raw, json)
Hash identifier: 6uIrA8BZPibRFsK7eDoAHD4kwQpRQ9qGoltHQjnm+0w=
Subject key identifier: 2E:33:E6:8B:45:ED:B6:82:AA:50:9C:A7:EC:3B:80:F6:15:1A:B9:1C
Authority key identifier: FC:18:AB:34:C5:A2:12:8A:C4:AE:55:C1:AF:6D:EF:65:34:B3:81:1D
Certificate issuer: /CN=fc18ab34c5a2128ac4ae55c1af6def6534b3811d
Certificate serial: 019D2884CA39E9F990A43CEF8A09A5E2E423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft
Manifest number: FB
Signing time: Thu 26 Mar 2026 05:01:24 +0000
Manifest this update: Thu 26 Mar 2026 05:01:24 +0000
Manifest next update: Fri 27 Mar 2026 05:01:24 +0000
Files and hashes: 1: CZU0k_zzWDnACuwxEN2WSub1YTI.roa (hash: 78vQg7roZ5l5cTS1ZqVQewjxV+/HUZjsE2UCphhS6P0=)
2: _BirNMWiEorErlXBr23vZTSzgR0.crl (hash: 6qjNPlC+eEJvpcOBpTwtSVPIE7ylykDB5GwR15gq5sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ca:39:e9:f9:90:a4:3c:ef:8a:09:a5:e2:e4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc18ab34c5a2128ac4ae55c1af6def6534b3811d
Validity
Not Before: Mar 26 05:01:24 2026 GMT
Not After : Mar 27 05:01:24 2026 GMT
Subject: CN=2e33e68b45edb682aa509ca7ec3b80f6151ab91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:c4:ab:9b:bd:50:bb:8d:e3:60:21:e4:f2:
a1:09:32:ec:8b:86:2f:e1:26:b1:3c:7a:f4:09:7d:
d2:32:80:35:c3:f7:68:f1:63:7d:dc:8e:eb:a6:1a:
e0:8a:07:b9:8c:0c:df:1f:8d:c0:e1:65:a5:0b:ad:
ca:81:56:8b:76:e8:54:fb:95:46:52:e4:39:97:00:
13:fd:94:c8:dd:55:2f:36:11:0f:af:02:ae:31:a2:
f1:a8:3c:1d:8e:60:46:59:5f:9e:46:3c:e3:a1:c5:
f8:4a:5c:44:6d:13:39:13:95:a8:1d:11:5c:46:6d:
55:fd:30:11:07:8f:a6:9c:39:ea:12:a7:9b:a4:87:
13:1a:b9:1d:a5:b8:b4:a1:75:bc:09:e6:20:14:d2:
ff:53:2c:92:fc:1c:a9:08:05:a9:98:0e:b6:b1:e7:
b1:f4:95:61:1c:e7:9b:60:65:df:63:3e:8c:6f:d3:
b4:97:aa:09:35:95:98:11:34:cb:86:50:8f:5b:74:
20:b4:06:74:17:2f:ed:72:24:73:24:93:60:ec:cf:
9d:76:26:c6:75:41:da:6a:49:e1:80:0b:ca:c7:f2:
1e:05:4d:01:33:f9:d2:2f:fc:f5:1b:68:e1:10:4b:
c6:fb:e1:5d:e4:ff:78:9c:7c:d2:fd:36:43:7d:8c:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:33:E6:8B:45:ED:B6:82:AA:50:9C:A7:EC:3B:80:F6:15:1A:B9:1C
X509v3 Authority Key Identifier:
keyid:FC:18:AB:34:C5:A2:12:8A:C4:AE:55:C1:AF:6D:EF:65:34:B3:81:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e5:7f:03:8c:8d:fe:5b:6c:cf:96:fa:53:5c:c9:44:9d:d5:
e5:7a:41:b3:ca:de:9f:ff:38:ae:6a:42:0a:e6:c8:61:ae:f7:
de:74:c3:51:25:33:09:7e:5e:64:26:3b:f8:2b:35:45:69:46:
f6:14:1c:e0:9f:8d:f5:7d:95:0a:45:57:98:f1:bd:20:d4:78:
b9:cf:d4:92:6a:af:71:35:e3:81:16:df:af:c8:81:ed:72:a9:
95:da:84:55:74:b2:cf:62:a8:56:7b:48:a5:78:e5:09:99:8c:
a2:5d:f4:10:3a:fa:c9:ae:0e:e2:78:3f:64:2a:64:8e:a1:a6:
39:f1:b6:2f:94:73:d4:8a:7d:8f:2f:4d:75:12:94:25:e7:8b:
e9:4a:df:e5:e8:3c:60:5e:ed:62:d7:00:26:14:d5:22:d4:3b:
67:3b:20:6c:37:09:40:9c:fb:06:39:d7:f0:32:09:b9:07:95:
02:ea:09:8f:8c:e2:e3:3a:f4:aa:99:96:d8:9c:7e:d0:7b:9b:
7e:46:82:0b:6c:72:ce:8d:3a:2f:f3:24:81:33:a1:80:06:80:
db:37:9b:d2:6b:8b:67:fc:ec:ba:fb:50:7a:91:bd:e8:d4:4f:
f1:cb:9f:3b:bb:5e:11:ae:fb:b9:ad:e2:02:ca:b3:8f:51:0a:
3b:8b:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:15 2026 by rpki-client