Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
File: BSL3Drmq76srTsTh4CLsBrVEeqg.mft (raw, json)
Hash identifier: UoZcDqvjrpc+uMnpCzoRnmBF/Ftz1U3zSvMFc9lnWqk=
Subject key identifier: A4:2D:E5:EE:E3:1D:DC:5C:22:E0:05:8C:90:F3:94:E3:30:57:CD:DD
Authority key identifier: 05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
Certificate issuer: /CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Certificate serial: 01A0CA103B3F694E1D34808876E17D92188A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
Manifest number: 90
Signing time: Tue 22 Sep 2026 17:00:56 +0000
Manifest this update: Tue 22 Sep 2026 17:00:56 +0000
Manifest next update: Wed 23 Sep 2026 17:00:56 +0000
Files and hashes: 1: 5X8wgdH5y24itbLU8yRzu5aEvw0.roa (hash: Y2Cskp+xn3/2TRNZa+iJKkWrN4s4Hf7dbVxygkD/yR8=)
2: BSL3Drmq76srTsTh4CLsBrVEeqg.crl (hash: CdPksleM4kcnn/d2hqbOcl99j50pV5c1mPEzVUy9PAg=)
3: FdzJdbih8GYJJyfSWdIfdNOiPbQ.roa (hash: 8DYsIMJzu+yvu5ZWSknfuVne4QSGnTYYVURq3C3fqq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:3b:3f:69:4e:1d:34:80:88:76:e1:7d:92:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Validity
Not Before: Sep 22 17:00:56 2026 GMT
Not After : Sep 23 17:00:56 2026 GMT
Subject: CN=a42de5eee31ddc5c22e0058c90f394e33057cddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:af:77:46:46:e5:e1:ae:99:1d:f2:97:41:5c:
dc:5b:8d:10:5f:cb:9e:1f:b7:0d:de:89:5a:ad:3a:
93:81:f9:11:f6:32:8f:00:d9:77:cc:eb:5d:3f:3a:
11:66:95:d5:90:c4:df:43:87:ab:bd:fb:3f:7b:dd:
0f:2e:1d:dd:1b:46:03:6b:7d:bb:28:c2:58:25:b9:
cc:0b:1d:f7:75:0c:57:dc:aa:fd:c9:5c:b0:dc:c0:
7d:95:c1:c7:75:b6:ba:37:85:a4:73:97:e3:64:08:
ae:17:72:62:1c:60:1a:14:11:ef:7e:d0:30:2f:96:
0b:64:0b:cb:9f:52:cc:17:b8:c6:26:61:d3:65:18:
d3:ff:91:ac:63:d6:98:f8:6f:5e:28:70:06:4d:9b:
f3:9e:8a:8e:20:96:1b:db:2c:8a:ba:94:9d:7f:c3:
16:2c:5f:50:f8:10:90:a6:ec:d2:11:2e:b0:7e:a5:
b3:5d:4a:08:2e:8b:a5:1e:f5:40:05:9a:3b:1f:65:
b4:62:99:81:ae:e0:f0:50:41:13:1a:6b:23:ca:23:
cf:f3:53:27:ef:38:14:d9:b7:75:cc:3f:53:83:7a:
84:c1:e0:30:2a:43:63:aa:ad:86:9d:b5:ca:30:5e:
70:20:af:30:33:35:65:cf:59:a8:ee:b3:1c:cf:8f:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2D:E5:EE:E3:1D:DC:5C:22:E0:05:8C:90:F3:94:E3:30:57:CD:DD
X509v3 Authority Key Identifier:
keyid:05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:73:34:ad:8b:c8:4f:33:6c:69:2e:51:cb:90:96:22:f7:8c:
fe:6c:9d:b8:11:1c:b2:a0:f6:62:b2:55:51:86:50:35:fe:eb:
e7:fb:7f:13:25:7f:bf:61:5c:37:6c:1e:a2:88:84:33:d2:15:
6c:e4:42:fb:9f:7e:0c:69:1b:39:46:e0:ed:e5:3f:1a:c9:61:
5a:20:9c:ab:20:98:3a:1e:7a:38:b8:41:84:de:18:ed:ff:d3:
0f:f2:ff:a8:a7:99:f5:60:86:c8:b6:77:95:fb:4a:c7:ff:72:
2a:9b:0f:6d:72:8b:b3:d8:66:52:94:bc:a5:49:25:0a:bf:0c:
07:b8:3f:7d:3b:f9:f5:b2:b3:29:b1:c8:32:26:ca:37:7a:8e:
a1:f0:91:dd:67:dc:0a:ab:c5:4f:ac:34:eb:0d:a5:c1:0c:60:
47:5a:c0:db:d5:f6:69:9b:40:93:ef:a4:4c:56:7f:6a:5f:d2:
6e:26:b4:b4:42:f3:ec:49:f2:e4:1a:a7:cd:06:98:8e:ad:ec:
9e:f2:d4:fe:b2:ac:40:cf:2a:d0:75:fc:62:71:79:97:b8:99:
58:fc:85:75:59:df:5a:ca:18:51:59:28:62:7c:8f:ca:b9:c5:
b7:48:3b:e2:73:a6:ce:37:1b:2d:f1:cf:65:e7:26:f4:27:ca:
de:b2:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:52:09 2026 by rpki-client