Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: DT+U6Xge0pLWhyK+Pp7I0j/N+/EsEA8YjeXz46i2pLk=
Subject key identifier: DB:8B:4A:50:F2:BE:68:5C:A6:2F:51:5F:E9:E3:49:B5:9F:FC:C7:59
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 019EBE47D2F9EB7F6F83F5A3C63594857208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 00:00:38 +0000
Manifest this update: Sat 13 Jun 2026 00:00:38 +0000
Manifest next update: Sun 14 Jun 2026 00:00:38 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: zUr1VNUhG2nC656iLrc13XePzXfhIEFZazV3/2g33Dg=)
2: NnEIJrnmhkwELld_U_QBTUbqU90.asa (hash: 5/Cpmz3yamVpUjVaZZVnuNujoVdFO+RPvIdZmRu6am4=)
3: aToK1H8Eu9LQyX9O96VpmV4-xH4.roa (hash: NOHh63b/9WqU00dOh312eJJg1BRneOILOEiJiVt9VO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:d2:f9:eb:7f:6f:83:f5:a3:c6:35:94:85:72:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Jun 13 00:00:38 2026 GMT
Not After : Jun 14 00:00:38 2026 GMT
Subject: CN=db8b4a50f2be685ca62f515fe9e349b59ffcc759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:af:95:8c:05:a2:e6:f0:01:e7:95:ea:59:
9d:2b:b4:1b:0c:a3:56:f2:e8:fe:43:3b:f2:11:6b:
9e:5e:dc:b6:64:d9:bc:97:d6:79:2e:c1:cd:aa:6b:
cd:e7:9f:23:6c:ce:45:66:91:aa:89:bc:a5:b5:4a:
c8:1f:10:3d:bb:dd:67:1c:99:77:43:95:87:07:aa:
5a:76:1b:d5:dd:12:bd:ba:55:ab:aa:f0:f7:29:70:
a2:c8:14:d3:92:e8:b6:6d:17:34:f6:3c:7c:49:35:
93:fa:4b:92:1d:7e:a1:a7:49:62:2d:eb:65:0a:b9:
aa:1f:e1:5c:cb:e1:17:47:7c:92:56:f4:14:27:34:
7d:0c:b5:62:8b:b4:21:e5:f5:17:3b:99:d4:eb:e2:
99:69:6f:8e:8c:46:10:17:be:81:77:c3:4b:00:ff:
7d:74:13:90:12:bb:06:7d:45:97:97:40:74:aa:fc:
c4:a2:e4:52:87:6b:b7:55:57:e5:0a:59:f4:0c:d9:
d0:f3:ff:a7:45:4e:1f:ae:15:d1:3d:b1:cf:e9:b3:
03:bf:55:11:44:65:d5:7d:f5:e3:e6:f8:3e:a8:a5:
29:d0:03:2f:86:9a:fa:93:2e:d1:63:64:8d:7a:30:
bc:92:10:47:3a:07:c1:0b:bd:86:ba:de:42:ea:1d:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8B:4A:50:F2:BE:68:5C:A6:2F:51:5F:E9:E3:49:B5:9F:FC:C7:59
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e8:17:b3:aa:de:f1:14:bd:c0:b0:77:c4:96:d4:c4:68:02:
6a:21:55:46:07:17:61:7b:8c:89:b1:b8:6f:3d:dc:ef:65:63:
17:84:40:2f:aa:73:d4:57:a6:dd:24:48:05:34:93:24:ed:5f:
89:93:b2:8f:c3:d1:65:93:26:47:42:0f:17:86:8c:02:41:c7:
c3:7d:31:c8:40:4f:ed:45:b7:12:58:ba:dc:52:f1:6b:2c:3f:
f5:56:41:a5:6a:df:c0:0c:ec:89:94:69:c0:95:33:55:be:b9:
93:70:67:4f:9b:c3:a9:17:85:b6:1e:68:0d:67:2c:60:54:37:
5f:57:09:a0:94:58:7a:6d:be:ff:95:c2:69:9f:ed:47:c9:ce:
d7:f1:10:cd:14:52:2b:2b:b0:1b:f5:8e:aa:2f:ed:45:0c:12:
5c:ff:44:dd:aa:a1:64:41:02:9e:ff:31:ef:40:d3:19:a4:a8:
27:d4:2b:60:5b:1f:da:82:a0:51:4f:61:0f:5a:d4:92:b5:41:
71:54:f2:14:16:77:b2:09:4c:6f:d4:ef:e2:cb:93:bc:a4:6a:
df:f0:55:c0:ad:4a:5e:1f:34:43:9a:75:49:b7:1b:56:75:64:
c6:5a:b2:b6:de:43:bf:5a:de:0a:9a:47:46:db:90:47:78:0e:
5d:bb:74:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:29 2026 by rpki-client