Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: V+fQcg9LoSCFRWVftbJkusZeUHFNnlA+0VJ/Y7H0KOw=
Subject key identifier: D0:13:34:5D:36:B0:79:47:80:FF:25:F8:D3:22:DE:6D:A7:42:2B:CC
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 019FA93E6AAB273FEE930DE4CE5E128AD983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 0A4A
Signing time: Tue 28 Jul 2026 15:01:07 +0000
Manifest this update: Tue 28 Jul 2026 15:01:07 +0000
Manifest next update: Wed 29 Jul 2026 15:01:07 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: xMgZ+51W5jn6Og9O9K/L70ZwOEuEHni5DWOV/Kd8iRg=)
2: NBGlz4BOwm_Rb4kwh-h4UA65oDk.roa (hash: Ugv5nwQuiMqwOwqv6jAyXgwzxe6xlFAAFYW63xYA81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:6a:ab:27:3f:ee:93:0d:e4:ce:5e:12:8a:d9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Jul 28 15:01:07 2026 GMT
Not After : Jul 29 15:01:07 2026 GMT
Subject: CN=d013345d36b0794780ff25f8d322de6da7422bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:dc:6e:64:f0:ea:b6:07:9f:bb:9a:b1:a6:
75:75:37:68:d1:95:75:3a:73:fc:97:d0:11:f5:7c:
c1:8f:30:66:0e:ea:cf:d3:7f:78:e4:d9:4b:c8:0d:
cf:a0:94:7a:a3:ad:91:15:79:2e:da:44:0f:23:19:
fe:8f:f1:80:82:84:7b:a1:a6:d1:d7:06:b7:3c:e7:
1f:19:3e:d8:be:c6:42:69:60:fe:3f:03:32:17:75:
b8:9f:f6:89:ed:68:06:58:80:0a:23:b2:26:7d:45:
33:a4:1e:28:23:3e:c9:a0:5b:3d:86:cc:7a:d1:79:
48:6d:b8:9b:cf:0a:65:58:d0:58:30:ec:24:e9:ec:
50:b2:6a:f7:ac:34:c2:7c:a7:10:e0:c0:45:a4:60:
4b:fa:b4:dc:98:b6:c2:b3:10:09:b9:a1:24:e3:93:
55:66:a2:9a:ed:75:df:cd:80:12:70:a5:e3:ce:d0:
e6:14:4c:6a:d7:6b:69:ff:83:05:4e:a5:1f:fc:6c:
f3:b2:81:f5:f7:13:51:77:1e:1d:ed:44:7d:61:4a:
29:8c:99:96:ae:cd:5a:b9:34:77:54:1b:00:ba:56:
f7:dd:9f:62:44:57:32:9c:90:4e:51:d1:52:25:57:
37:bd:1d:bc:68:c1:d8:0f:27:d5:03:35:03:b6:57:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:13:34:5D:36:B0:79:47:80:FF:25:F8:D3:22:DE:6D:A7:42:2B:CC
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:38:b5:18:68:e1:62:e6:17:90:7e:ee:f6:22:d1:d7:e3:35:
21:58:40:6e:8d:e5:89:a5:bd:c8:2a:d5:9a:c6:7b:13:71:5c:
aa:0c:f5:4a:f7:ea:7e:3c:db:54:4e:b7:d7:c7:79:15:14:ed:
e3:55:51:a3:80:8b:13:2c:a1:b4:26:58:6a:b7:c2:8b:22:81:
46:3e:b9:13:b0:bb:21:0a:41:1e:03:da:bf:d3:59:24:8c:04:
2c:1f:64:00:fb:cf:14:81:06:de:54:dd:5f:c2:34:15:1b:94:
31:5b:80:5a:20:2b:f6:63:0d:87:73:5f:55:62:01:ba:9c:33:
d8:27:3f:6e:57:58:4d:77:af:de:fa:5a:f9:8d:a3:71:56:da:
33:d6:c5:59:10:e8:36:b8:b6:57:a6:7b:f3:05:f9:f0:f0:8b:
5d:89:fd:e4:8e:32:5f:5c:fe:66:19:b5:2c:50:c7:00:cc:b4:
6d:af:04:35:87:13:00:37:8c:96:f8:4b:55:c9:d1:c7:77:0e:
4d:5e:19:46:79:46:9a:9e:10:e4:25:ba:45:23:c1:8c:e2:82:
ab:92:9f:87:73:ca:fc:f8:6c:48:72:d9:27:b5:54:4c:38:ff:
45:d2:d0:c0:98:b3:b2:60:aa:bc:f0:5d:c5:33:0a:d7:f9:2c:
6f:af:fe:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPmqrJz/ukw3kzl4SitmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Yzc0NmNkN2Q0ZGY5NWE2ZDAzY2E5NTU0YTc1NDc2MGQ1
ZTRlMDYwHhcNMjYwNzI4MTUwMTA3WhcNMjYwNzI5MTUwMTA3WjAzMTEwLwYDVQQD
EyhkMDEzMzQ1ZDM2YjA3OTQ3ODBmZjI1ZjhkMzIyZGU2ZGE3NDIyYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T/cbmTw6rYHn7uasaZ1dTdo0ZV1
OnP8l9AR9XzBjzBmDurP03945NlLyA3PoJR6o62RFXku2kQPIxn+j/GAgoR7oabR
1wa3POcfGT7YvsZCaWD+PwMyF3W4n/aJ7WgGWIAKI7ImfUUzpB4oIz7JoFs9hsx6
0XlIbbibzwplWNBYMOwk6exQsmr3rDTCfKcQ4MBFpGBL+rTcmLbCsxAJuaEk45NV
ZqKa7XXfzYAScKXjztDmFExq12tp/4MFTqUf/GzzsoH19xNRdx4d7UR9YUopjJmW
rs1auTR3VBsAulb33Z9iRFcynJBOUdFSJVc3vR28aMHYDyfVAzUDtlefmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNATNF02sHlHgP8l+NMi3m2nQivMMB8GA1UdIwQY
MBaAFAbHRs19TflabQPKlVSnVHYNXk4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYt
YjBhZmQ0NWRjZDc4LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYtYjBhZmQ0NWRjZDc4
LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANji1GGjh
YuYXkH7u9iLR1+M1IVhAbo3liaW9yCrVmsZ7E3Fcqgz1SvfqfjzbVE6318d5FRTt
41VRo4CLEyyhtCZYarfCiyKBRj65E7C7IQpBHgPav9NZJIwELB9kAPvPFIEG3lTd
X8I0FRuUMVuAWiAr9mMNh3NfVWIBupwz2Cc/bldYTXev3vpa+Y2jcVbaM9bFWRDo
Nri2V6Z78wX58PCLXYn95I4yX1z+Zhm1LFDHAMy0ba8ENYcTADeMlvhLVcnRx3cO
TV4ZRnlGmp4Q5CW6RSPBjOKCq5Kfh3PK/PhsSHLZJ7VUTDj/RdLQwJizsmCqvPBd
xTMK1/ksb6/+mw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:09 2026 by rpki-client