Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
File: biw-HNO4VNZu9GxWd-9y0sWjZpc.mft (raw, json)
Hash identifier: TEEZMF3dTlSqukPMXI99NQC1HrSCizcIn4AWgdkvoLE=
Subject key identifier: 41:F4:02:1B:4A:46:29:E4:7B:8C:E6:4F:A3:CA:DC:43:C7:1D:BC:5E
Authority key identifier: 6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97
Certificate issuer: /CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
Certificate serial: 019D9BF57BEACD4642F2C04DAFB5D654F85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
Manifest number: 0A7C
Signing time: Fri 17 Apr 2026 15:00:49 +0000
Manifest this update: Fri 17 Apr 2026 15:00:49 +0000
Manifest next update: Sat 18 Apr 2026 15:00:49 +0000
Files and hashes: 1: biw-HNO4VNZu9GxWd-9y0sWjZpc.crl (hash: jNqDt4AF5Dm2st5z1tNvH5PniMlH/vZK1YkTP1Za104=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:7b:ea:cd:46:42:f2:c0:4d:af:b5:d6:54:f8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
Validity
Not Before: Apr 17 15:00:49 2026 GMT
Not After : Apr 18 15:00:49 2026 GMT
Subject: CN=41f4021b4a4629e47b8ce64fa3cadc43c71dbc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:25:65:f6:30:ff:d8:28:f9:46:27:ee:ba:
85:f0:e6:95:bd:1d:7f:14:8a:0e:34:52:2f:b5:e1:
6e:5e:94:87:fe:d8:80:a8:09:4d:d8:23:9a:9e:a9:
16:72:f3:c3:96:84:3d:61:df:82:bc:7b:6c:55:7f:
d8:ed:21:a7:17:1c:a0:65:ec:4a:2a:2a:a5:ce:6a:
fc:21:81:57:b4:03:32:fc:30:8f:b9:8f:0c:e4:35:
43:5f:5f:7e:13:f6:f2:82:8f:09:74:9b:4f:20:a7:
33:5f:36:c1:50:c6:3e:b3:09:94:20:e7:5c:02:85:
39:ab:55:99:a4:f3:4b:4c:97:93:b7:01:0a:17:18:
63:0e:22:a3:d6:c3:f9:bc:ff:05:cb:61:0a:14:19:
65:e7:53:18:1a:79:1e:30:a8:3d:0b:3a:7a:c0:89:
28:18:95:9c:a8:cc:45:3d:e7:5b:9d:3b:54:e2:47:
97:43:2d:4d:c4:00:30:e2:7b:74:89:73:9a:9e:15:
01:e2:16:fb:e3:ea:4e:b2:10:ac:d3:ac:2a:56:fa:
74:c7:71:6d:25:a4:ba:73:3b:e6:83:68:36:b8:04:
f5:d4:62:49:b4:e5:b0:5c:34:35:ef:71:5e:04:6c:
7e:25:2e:1f:8f:3f:8d:4c:d5:2d:e6:33:5e:ec:35:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:02:1B:4A:46:29:E4:7B:8C:E6:4F:A3:CA:DC:43:C7:1D:BC:5E
X509v3 Authority Key Identifier:
keyid:6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:94:46:90:51:aa:64:84:3b:0a:b7:a1:e7:1d:12:b8:70:b9:
d3:8e:02:bf:f7:84:f0:2e:b9:a7:56:38:cc:c1:75:c1:33:db:
aa:39:8f:df:ac:f3:fa:27:db:fa:d1:1e:c7:33:58:e5:ab:bc:
86:b3:e0:c5:fb:85:19:d6:0b:30:9f:8a:00:84:7c:21:19:7c:
ad:75:eb:f8:f7:21:eb:1a:43:3e:c3:85:c9:3e:9e:6e:9c:8a:
ed:c2:ae:8b:d0:1f:04:51:19:51:49:a3:b8:77:99:1c:b1:fb:
50:4c:29:77:5d:64:38:f5:c8:56:39:5f:88:48:16:8f:75:60:
68:a1:48:ce:cf:3e:22:3c:a9:6a:df:49:de:8f:64:12:f1:3c:
08:44:59:df:a6:ca:fb:3a:4c:85:bb:24:98:9c:66:c7:95:e5:
1a:6a:e8:12:86:02:3d:14:2c:8f:14:8a:b8:c7:41:fb:22:08:
38:58:aa:e3:1f:92:ef:8d:35:ad:2a:af:7d:d1:12:69:a9:6f:
ae:fc:81:90:57:b9:82:ee:a2:6f:64:63:d2:52:34:40:7b:bd:
f0:97:2d:49:df:6f:37:a7:3e:23:7c:35:3e:81:08:e2:34:bf:
5f:48:5d:bc:a5:2a:cc:16:48:01:cd:0a:95:11:2e:5b:7f:dd:
c8:64:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:42 2026 by rpki-client