Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
File: biYdnc3dmGfliSrRpNII32lTEXc.mft (raw, json)
Hash identifier: KWJ4Gk1OWuhcBSblULZrERiPLvbdduAQO276Y6y1FDQ=
Subject key identifier: 11:2B:FD:20:53:7F:00:41:41:DA:C0:25:8C:E1:73:F8:FC:25:0C:3D
Authority key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
Certificate issuer: /CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Certificate serial: 019CAB6BD3032D9E70D04C44FB2A2DE8F9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
Manifest number: 10A2
Signing time: Sun 01 Mar 2026 22:01:36 +0000
Manifest this update: Sun 01 Mar 2026 22:01:36 +0000
Manifest next update: Mon 02 Mar 2026 22:01:36 +0000
Files and hashes: 1: biYdnc3dmGfliSrRpNII32lTEXc.crl (hash: VGrcjLVS63ms16YQgrV52kH3UbIWjMj9ckCxCZ4nwBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d3:03:2d:9e:70:d0:4c:44:fb:2a:2d:e8:f9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Validity
Not Before: Mar 1 22:01:36 2026 GMT
Not After : Mar 2 22:01:36 2026 GMT
Subject: CN=112bfd20537f004141dac0258ce173f8fc250c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:4d:87:0a:2b:fa:90:a5:1a:a1:47:8e:8f:
99:ec:46:30:dd:73:35:98:d6:52:04:a3:e9:95:fc:
16:19:79:d7:5b:ba:05:f1:2d:01:17:0e:6c:ec:59:
15:c7:0a:9e:51:78:20:33:f9:2a:7b:a6:f3:c6:d9:
a2:92:46:ba:af:c4:a3:a4:ce:4a:8e:ff:3b:2d:b2:
eb:c0:44:59:45:4e:e9:c7:91:28:2b:23:6d:94:31:
0a:02:2d:15:1a:85:5b:b1:cd:e3:41:b2:14:63:47:
1d:83:4f:d2:60:f7:95:f4:bb:cb:8f:ca:a3:cf:43:
0a:4e:c5:c0:95:fe:c8:f0:a1:77:0d:4c:32:fa:96:
96:eb:d0:a3:26:d0:00:af:51:66:0b:77:09:62:cf:
e8:69:af:35:d2:45:e6:39:a1:41:f7:b5:4d:d8:c7:
d0:86:34:3b:75:ad:8f:c7:a7:50:44:99:38:41:8e:
e4:15:19:7e:a1:bb:9f:0d:0b:ad:8e:25:3f:b2:e0:
30:41:e6:9b:8e:4a:85:bd:f3:7d:4d:97:d4:ff:8c:
02:e1:70:82:23:1e:e5:b1:1d:a0:7c:32:d2:6d:90:
c1:27:85:99:04:97:d5:99:90:42:05:8c:9f:ad:f4:
3d:b1:6d:d5:9a:3f:5b:a6:43:af:b9:cc:18:65:b0:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:FD:20:53:7F:00:41:41:DA:C0:25:8C:E1:73:F8:FC:25:0C:3D
X509v3 Authority Key Identifier:
keyid:6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:08:0f:3e:6f:4a:2f:cf:a8:c1:28:a0:48:e3:f0:87:98:d1:
c6:57:13:77:7f:9b:61:69:90:e3:7e:5c:f5:e7:60:d6:00:36:
34:5d:07:89:ed:bf:72:f5:6e:0c:e7:83:25:98:50:55:36:19:
f1:33:b4:0c:5a:4c:84:d3:a3:60:d3:30:f1:bf:f8:d4:d0:cc:
25:33:87:ec:21:06:33:25:88:a5:c8:f4:a4:00:93:52:e0:cc:
e8:44:f0:7d:62:ea:b0:84:ca:3a:8f:3e:9b:e0:77:95:80:8b:
c1:0f:7a:ea:85:f7:aa:e8:78:4b:c3:57:b1:e3:e1:e9:13:cd:
10:78:4b:18:01:76:a8:02:86:a6:c1:14:57:7e:ff:34:f5:e5:
a6:74:85:9b:33:9f:6b:29:02:c9:6f:b0:b2:12:c5:7c:99:09:
62:f6:92:be:65:4a:d9:d4:73:89:5e:a4:cd:ea:ae:d9:a0:75:
56:3e:a8:50:98:61:9f:64:44:3c:ab:5a:0e:fb:82:a8:dc:55:
68:0e:08:7c:fd:f4:88:35:52:dd:3b:02:fb:27:78:0d:6a:c7:
26:09:87:89:70:67:16:a7:f4:f7:ce:03:85:6f:e7:b1:6b:6a:
b8:db:71:98:b9:96:b1:86:55:70:08:79:ea:0c:72:93:10:81:
0a:0a:87:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:01 2026 by rpki-client