Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: muUlMbyafgD27kYHtioHMxBToZ/G1O4BBFpGwMEMGsE=
Subject key identifier: 75:8D:6D:8D:19:82:3D:BA:F3:46:E1:60:85:0B:D6:1B:A2:64:7C:8E
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 01A0C3A02AFB5CDC3079E2FC6ED017522751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 11:00:48 +0000
Manifest this update: Mon 21 Sep 2026 11:00:48 +0000
Manifest next update: Tue 22 Sep 2026 11:00:48 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: Ixc7P9VuZ0SZoPN7BcEvpKTttYvDP7uLghykD7t0xuU=)
2: DlObQ48l6w9Lz1ru1Ps9vXN6dUs.asa (hash: RM2FL8CGd5yQXQEGV8NuC1yuCyRHYcz0dUdW6scntzw=)
3: aToK1H8Eu9LQyX9O96VpmV4-xH4.roa (hash: NOHh63b/9WqU00dOh312eJJg1BRneOILOEiJiVt9VO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:2a:fb:5c:dc:30:79:e2:fc:6e:d0:17:52:27:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Sep 21 11:00:48 2026 GMT
Not After : Sep 22 11:00:48 2026 GMT
Subject: CN=758d6d8d19823dbaf346e160850bd61ba2647c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:03:69:e4:c0:28:58:68:81:af:e7:4f:36:
09:cd:a0:5f:de:00:e8:2e:1a:9f:0c:3f:57:3d:8b:
17:4b:36:38:47:8d:ee:b2:d9:e8:33:f1:b6:d6:d2:
f6:99:71:1b:24:dd:ab:79:06:60:ed:ff:24:b1:06:
77:de:30:38:0f:59:ae:a4:45:e9:a3:3f:8d:a5:4c:
8a:b3:36:90:50:6a:d9:17:16:f9:cd:c0:26:1d:15:
78:6d:6a:6a:dd:c5:d7:91:8d:b0:aa:58:d9:bd:9f:
2b:df:1d:7e:c0:4a:96:6f:23:d5:f4:09:cc:97:1f:
7f:1b:2c:05:24:50:d0:e7:23:65:48:23:e2:9e:ee:
4b:d0:53:3d:9a:7d:c4:8c:f2:28:2c:29:1c:f6:97:
d4:7f:92:1e:6d:15:9d:e7:46:82:11:a1:26:60:a9:
6b:c5:d3:8f:09:71:b8:63:b9:f3:bc:09:4e:da:57:
fb:5a:d1:2c:9f:09:6c:6a:d2:bf:5e:61:f4:dc:e9:
22:db:9d:ad:10:f6:55:72:22:6a:e1:b5:9e:c7:2c:
a0:d1:50:a4:fb:4d:da:18:77:34:44:c2:c4:c1:6d:
23:a9:5b:6c:ac:65:c1:f6:53:94:2e:79:ac:0d:bb:
61:b6:91:ce:a4:f6:16:3f:57:64:03:09:57:51:26:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8D:6D:8D:19:82:3D:BA:F3:46:E1:60:85:0B:D6:1B:A2:64:7C:8E
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d3:87:39:b1:1f:f5:f4:8f:2c:c8:b1:1d:e9:bc:11:26:dd:
be:68:90:c4:9f:02:a2:30:79:4d:6e:08:86:1d:7e:5f:ea:8b:
08:35:7c:6c:59:4a:48:18:eb:77:8a:f1:25:05:ba:03:47:9f:
87:a5:70:d2:c8:9e:d7:84:77:e6:19:98:d0:9d:23:6a:34:dc:
36:de:b2:34:5c:55:88:63:49:bf:ca:ae:df:32:59:53:55:37:
a7:7c:f7:6c:93:fc:58:18:ec:56:68:b5:25:af:17:91:68:2a:
9f:f2:ac:4d:6e:8b:cf:43:f4:e5:30:2a:40:f0:b9:97:df:6f:
5d:fc:3e:45:d2:64:f1:63:a5:59:12:ea:1a:20:8c:61:14:a4:
6f:0f:7e:a2:03:3b:06:1f:1f:ea:76:3d:01:e0:36:9e:3e:94:
c1:98:dc:59:17:95:4c:86:ff:75:04:6d:ee:01:ac:0f:f4:16:
1b:69:c9:7e:17:01:a2:48:04:24:53:c3:7c:44:b4:b9:b5:90:
f1:0e:ae:0e:a5:db:58:a6:ba:93:1c:10:5f:e4:1d:66:8d:ff:
72:d0:41:b2:3e:4e:29:3c:8a:91:d4:0b:fd:6a:a5:b2:b7:36:
07:da:3a:3b:6e:81:15:f9:56:78:d1:8b:ce:a5:3d:3b:44:87:
ce:30:6c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:33:31 2026 by rpki-client