Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
File: biw-HNO4VNZu9GxWd-9y0sWjZpc.mft (raw, json)
Hash identifier: ylgiqXJ4D+JNyZQ+uwa36FVufc+oXBdUEvWAiG2y16Y=
Subject key identifier: 19:A4:72:22:58:EA:57:08:17:25:16:B0:D8:2E:61:71:CC:CD:B6:6F
Authority key identifier: 6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97
Certificate issuer: /CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
Certificate serial: 019CAC7DC6748799E2DDC6D6741B78C94845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
Manifest number: 0A00
Signing time: Mon 02 Mar 2026 03:00:49 +0000
Manifest this update: Mon 02 Mar 2026 03:00:49 +0000
Manifest next update: Tue 03 Mar 2026 03:00:49 +0000
Files and hashes: 1: biw-HNO4VNZu9GxWd-9y0sWjZpc.crl (hash: xMlvgOTne4iRPYm4Br7lteI9UteEmfT1oxOpbPgOm6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c6:74:87:99:e2:dd:c6:d6:74:1b:78:c9:48:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
Validity
Not Before: Mar 2 03:00:49 2026 GMT
Not After : Mar 3 03:00:49 2026 GMT
Subject: CN=19a4722258ea5708172516b0d82e6171cccdb66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:15:f6:1d:03:bb:8c:e6:d6:37:db:9c:e8:9f:
c5:61:d1:a3:70:b1:0e:fb:98:f5:9a:77:e3:31:e5:
21:cb:f5:f0:c7:2f:54:38:a2:58:ab:34:e6:7e:90:
10:4b:e6:cf:ec:97:00:ab:76:d3:9d:e5:57:89:50:
bc:f8:95:ba:0f:8b:c1:d9:db:29:47:9e:50:ad:13:
a7:76:ca:11:54:82:a0:df:c3:ce:0f:89:d8:68:96:
8e:51:5b:ec:2e:7a:6e:0d:5f:be:c5:d1:d6:64:cf:
ed:ad:27:a8:69:fe:a6:1e:7f:59:fe:5f:33:ca:4d:
f4:6d:63:87:e3:47:ae:f0:2a:90:18:30:b8:30:5a:
6d:92:9c:b3:29:e4:15:4f:c8:52:a2:d5:1f:15:30:
8a:5a:41:a8:de:fd:d9:cf:d8:2d:e2:ac:a7:3f:80:
7e:48:aa:2a:bb:6c:25:7d:85:f4:f3:2c:aa:8a:c9:
9e:31:be:a5:81:66:6f:c6:6d:14:5c:1f:fd:bb:48:
4a:1b:81:40:b0:2d:43:c3:fe:43:cf:82:8f:f1:f2:
ba:c8:6f:70:4d:36:75:78:85:0a:86:fe:c6:53:d1:
b3:f0:ee:13:bb:33:39:24:bf:fe:74:59:f1:48:6c:
28:86:c0:24:5c:2c:51:a9:d0:a6:5a:5b:ef:10:dc:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A4:72:22:58:EA:57:08:17:25:16:B0:D8:2E:61:71:CC:CD:B6:6F
X509v3 Authority Key Identifier:
keyid:6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:92:4b:b2:d6:5c:32:d6:9a:53:6d:b6:93:30:2b:7b:11:96:
f9:1e:32:03:43:d1:6f:0b:e6:19:67:f0:25:1e:ee:73:16:ce:
b2:b7:77:2f:46:4e:2d:ad:e9:0e:8c:d6:cf:26:62:d3:55:3a:
a5:4d:b4:60:4e:61:e4:76:9c:da:25:c7:80:78:4a:1f:9a:13:
c5:e2:93:a2:b7:8a:48:20:17:6c:62:21:cd:d2:16:29:d0:06:
34:15:46:71:19:01:72:fc:7f:0a:7c:ea:a3:41:93:78:76:6b:
81:cb:b3:59:6d:06:f0:a1:67:0d:fc:22:7f:4d:c4:4e:7c:6e:
73:36:80:fa:a5:67:3a:fe:4e:58:ca:9b:e1:b8:14:0a:fa:b2:
e4:1e:f8:5f:84:88:d2:b0:cf:5a:2e:27:6b:0b:27:a0:36:a6:
d2:37:6d:0d:00:b1:56:2b:99:da:d5:a7:d1:c0:ae:0d:70:60:
b6:5f:77:57:d8:f3:f3:c5:86:7f:45:f3:72:f1:2a:c3:07:62:
72:84:23:7b:8d:c8:2d:3e:d2:17:34:b3:9a:92:82:d1:ee:d4:
cc:94:52:37:d4:5d:e8:0d:39:76:fa:8b:60:0d:63:83:46:17:
ac:11:bd:28:d3:d2:6d:d0:b7:f3:22:0e:63:c3:eb:52:3b:4e:
0a:69:29:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:08 2026 by rpki-client