Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: XSbtklcjkX/i8LUICW3INBkjdcZBHn3vRVmRN1AlGR4=
Subject key identifier: AC:01:BE:54:D8:2C:1C:2F:8F:7B:11:65:F1:88:4A:FF:86:12:45:68
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 01A0C331FB5A49CB9D185B1A7C6531D9B6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 0ADC
Signing time: Mon 21 Sep 2026 09:00:27 +0000
Manifest this update: Mon 21 Sep 2026 09:00:27 +0000
Manifest next update: Tue 22 Sep 2026 09:00:27 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: tBoNKIfIWN8UILHYTnjT5fCmvrUUFtiCFbOfw44jEqs=)
2: NBGlz4BOwm_Rb4kwh-h4UA65oDk.roa (hash: Ugv5nwQuiMqwOwqv6jAyXgwzxe6xlFAAFYW63xYA81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:fb:5a:49:cb:9d:18:5b:1a:7c:65:31:d9:b6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Sep 21 09:00:27 2026 GMT
Not After : Sep 22 09:00:27 2026 GMT
Subject: CN=ac01be54d82c1c2f8f7b1165f1884aff86124568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:16:d7:d1:db:62:c8:a2:9c:b7:83:e7:5a:
79:af:81:1a:92:32:38:c9:e8:e1:65:d7:a7:aa:62:
61:c1:06:e3:a2:eb:e0:23:86:20:f9:9b:36:4c:31:
2f:f7:01:c9:7a:47:d5:42:94:34:4e:3c:20:57:d5:
10:30:f3:13:fc:9b:28:b1:b9:dd:d2:8d:79:d0:ef:
cf:52:29:24:5f:4f:04:26:0a:96:ae:97:5b:50:c1:
3a:2c:54:96:bf:0e:5f:c5:9c:d4:f8:5e:16:fa:ad:
89:62:c1:2b:cd:3b:58:8f:62:37:bc:67:36:13:2c:
c6:4f:93:5a:e3:e5:97:42:21:83:3d:00:b2:9e:66:
26:89:86:3f:f8:0d:4c:0c:7a:b0:9c:d4:c2:f4:be:
a1:df:09:fa:8c:81:69:12:55:2e:d8:6b:e7:5a:65:
f9:e5:85:9c:25:58:b9:b6:1f:08:83:fe:b7:49:37:
a5:2f:1d:1a:cd:cf:8a:6a:f2:56:1a:97:16:bb:ff:
8c:87:9a:8b:e5:47:e3:f9:b5:65:2b:a5:79:3c:db:
8d:30:ad:b0:27:8f:db:5b:8f:b8:c6:89:e1:aa:be:
3f:be:b9:95:db:a2:f0:cf:3c:25:32:0f:d5:3a:b8:
d7:9c:7a:30:d8:a3:16:f2:0d:49:5b:ab:f7:d6:73:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:01:BE:54:D8:2C:1C:2F:8F:7B:11:65:F1:88:4A:FF:86:12:45:68
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d7:2a:c1:2f:85:d3:eb:1a:f1:32:ec:23:cd:0a:5d:ca:a7:
5e:ca:2c:aa:b7:3a:30:76:30:89:f2:b9:d7:e9:86:04:8a:de:
5b:98:bc:f7:64:3b:6f:04:cf:80:dc:e5:81:e0:b3:4c:ed:f5:
a7:9a:b6:eb:23:cd:85:fb:57:2f:7d:f1:3c:fa:ae:8f:02:dc:
8f:ef:40:a5:8e:cf:f0:94:89:d0:ef:62:ee:1c:22:bb:85:e4:
b0:83:db:12:57:b4:56:19:8a:6a:44:65:ce:52:1d:cd:51:74:
1e:04:c1:84:51:2c:6b:c1:da:5b:f6:85:76:f9:ff:b7:1a:6c:
1b:bf:fb:8b:e9:c0:98:f0:c3:43:10:b3:ee:63:ed:67:a7:66:
9c:5d:d3:71:05:25:26:13:1c:4e:57:66:a9:fd:98:54:cf:d6:
b0:76:13:53:ed:f9:3f:02:35:6e:42:c6:6f:4f:83:ff:8e:8e:
ad:6f:45:c4:cc:af:a3:58:0c:dc:46:fe:ac:22:eb:06:2c:0a:
64:71:6f:72:bf:ae:78:3f:1f:8c:19:47:80:c8:c0:05:5c:be:
a1:ee:ff:ea:a4:0b:5c:16:b6:3b:9c:ce:98:e9:cb:70:7f:03:
9f:77:6e:63:46:fb:52:d8:1a:a2:b4:ae:f9:b0:25:d1:95:28:
b4:b7:6d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:27:02 2026 by rpki-client