Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
File: biCb10rb00nQEq8KpjDR_oZpxy8.mft (raw, json)
Hash identifier: Y2VD8ROtf7ncJl4MnbVDLCutxIkdcX8MLX8Wl3x6RJU=
Subject key identifier: 6F:7F:FC:F8:D2:4D:79:EF:19:31:0A:0D:C5:26:AD:D5:1B:40:44:DF
Authority key identifier: 6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
Certificate issuer: /CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
Certificate serial: 01A131B470FDD48B7EFDA36815424633FF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
Manifest number: F0
Signing time: Mon 12 Oct 2026 20:01:11 +0000
Manifest this update: Mon 12 Oct 2026 20:01:11 +0000
Manifest next update: Tue 13 Oct 2026 20:01:11 +0000
Files and hashes: 1: biCb10rb00nQEq8KpjDR_oZpxy8.crl (hash: b3Yj5rxmQSQiv+cZjFzJezBzwlTAjGzeZr7M33HjX7w=)
2: gVsDXRrQxcRN9YXzPmKoZtqqxtg.roa (hash: NCJiLrBZtffVOZc4ol0jkKNp/1gSMV3KomI3oO87hZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:70:fd:d4:8b:7e:fd:a3:68:15:42:46:33:ff:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
Validity
Not Before: Oct 12 20:01:11 2026 GMT
Not After : Oct 13 20:01:11 2026 GMT
Subject: CN=6f7ffcf8d24d79ef19310a0dc526add51b4044df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:2b:2d:63:79:c2:4b:72:8d:be:bc:2f:e2:
f6:7e:a1:d7:a4:de:e4:13:6b:1b:11:69:d8:90:e3:
a6:25:2f:9e:67:a1:93:50:a7:d9:65:51:7f:e1:23:
64:c5:e2:60:47:67:c8:66:a5:ea:a5:2f:20:e3:de:
34:2a:95:54:75:38:b8:1f:c2:35:68:b3:c6:90:8f:
a0:b2:c0:81:58:c9:14:ca:8c:11:0b:21:06:c7:9a:
59:ed:b4:7c:04:67:58:c3:2f:81:f8:18:c7:e9:90:
ae:28:5f:56:0b:19:c3:67:6a:50:14:e8:0b:a2:2b:
45:d0:07:28:7c:64:eb:75:f6:42:db:ef:0d:95:51:
d3:40:1e:eb:e8:71:08:06:95:0a:de:31:b3:41:c2:
3f:7c:8e:3b:c8:43:ee:17:67:eb:5a:cf:9a:a1:a8:
56:ba:ad:18:17:51:06:2c:cf:18:63:67:32:12:9d:
76:47:13:4f:c9:89:3e:2c:96:b7:9c:d3:c5:0a:f1:
79:ee:cd:ee:72:4d:a4:4c:31:eb:e6:69:89:a6:19:
9d:4c:c2:60:0a:6f:39:cb:a4:70:89:ea:76:53:f9:
e2:50:e3:27:13:8d:86:c2:5a:fe:79:48:95:25:3d:
39:0a:31:a3:a1:a2:7e:27:e7:75:9f:98:23:7c:98:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7F:FC:F8:D2:4D:79:EF:19:31:0A:0D:C5:26:AD:D5:1B:40:44:DF
X509v3 Authority Key Identifier:
keyid:6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3a:f3:8d:5b:a9:7d:60:ca:ed:0b:ff:d6:5e:2a:5f:e7:6d:
ab:1b:ce:aa:29:30:cc:80:05:3d:96:55:09:8c:36:3d:4f:9a:
fc:54:a5:ad:c0:6a:63:83:47:19:ad:5c:10:04:71:37:ec:c9:
8d:fe:31:56:e7:62:01:bb:ca:30:b2:b7:38:57:cb:a0:db:f8:
34:8d:83:c0:24:47:55:3c:54:56:44:13:6e:a3:fe:8b:e1:0d:
9a:4a:33:1a:fa:3d:16:a8:71:ea:4e:a7:53:bc:8a:5e:4d:23:
88:52:6b:cd:ff:ad:2e:8d:4e:a6:74:42:55:0a:84:d8:f7:10:
0c:20:52:77:17:85:3f:40:2a:fc:6f:4f:1c:08:01:f8:cc:0b:
6a:64:ce:51:f0:ca:8b:a3:d2:83:ed:92:c1:1a:75:53:f6:0f:
0f:8c:5e:76:02:4f:41:27:78:b8:a7:d9:de:4e:20:5b:07:db:
ff:55:24:6e:77:c6:c2:e5:f2:33:75:1c:f1:f3:09:fd:99:02:
44:b0:86:38:c1:9e:80:a8:cb:9b:5d:e3:59:bd:25:dc:65:fd:
33:af:49:d1:ae:23:a1:22:f4:c4:9e:03:f3:7e:69:3a:e8:22:
8d:8d:ad:de:8a:8b:64:a3:e8:c2:2c:f6:ed:f6:ad:df:58:72:
02:cb:95:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:47:15 2026 by rpki-client