Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: YbCwT6k746cvSUng49jaUPPfbgt8ai9/SQUW1kO45M8=
Subject key identifier: 7D:7A:91:10:88:CD:14:47:D5:57:F7:17:AD:A4:80:98:6D:56:C1:89
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 01A0C2569D25B275709802DEBFBDE35FF2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 0CDE
Signing time: Mon 21 Sep 2026 05:00:51 +0000
Manifest this update: Mon 21 Sep 2026 05:00:51 +0000
Manifest next update: Tue 22 Sep 2026 05:00:51 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: FizaWIPFlqkRLs7tmxofyS8RmZRnvHmJFHVGNne6ZdU=)
2: wPZBSgFASeM9SaWJvAkRGk-7twQ.roa (hash: R3wosEg+LuaaoBj4e/mPNIMyKN6NLJP5v9wAW4ICOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:9d:25:b2:75:70:98:02:de:bf:bd:e3:5f:f2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Sep 21 05:00:51 2026 GMT
Not After : Sep 22 05:00:51 2026 GMT
Subject: CN=7d7a911088cd1447d557f717ada480986d56c189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:53:ec:4e:e7:96:fb:45:92:09:4a:18:6b:
20:40:40:30:a6:2d:11:53:39:ac:fb:a5:e2:ee:0b:
ed:d5:a9:b8:72:1f:c1:6d:42:8e:ab:c5:e7:07:da:
46:be:6d:d4:42:df:a0:ca:e8:42:2d:12:eb:25:07:
28:a8:a1:67:dd:02:1a:62:00:be:d5:7a:e9:8a:a7:
ca:77:29:87:2e:13:db:a7:37:0a:56:ed:4c:73:a5:
d6:1a:f9:18:96:76:e9:37:6a:60:bd:b7:42:51:cc:
9b:af:46:60:b7:83:40:9f:f9:44:75:e4:96:b6:d4:
b2:7f:64:07:d6:33:0c:ba:08:8c:56:9c:60:77:04:
92:20:75:45:97:43:99:c6:f9:f6:c0:f5:1d:e5:a1:
bc:08:92:16:71:3c:56:43:06:a0:c7:b5:d6:30:85:
9a:a2:b3:16:20:f3:1d:b8:38:ce:70:40:15:a7:34:
22:99:4e:77:3e:20:9b:47:2c:87:83:a8:9a:dc:bd:
e1:55:93:46:c7:fd:fa:d6:7a:49:d5:a9:3d:13:eb:
8e:3e:26:ae:1a:0a:bd:9a:8b:15:15:3e:7d:6a:80:
c9:0f:96:ec:93:eb:94:b2:15:97:76:f9:71:05:10:
09:50:07:83:99:33:e1:48:03:66:3c:ee:8c:b9:27:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:91:10:88:CD:14:47:D5:57:F7:17:AD:A4:80:98:6D:56:C1:89
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d2:a9:bf:a7:1c:8f:5e:1f:d9:b1:15:46:a2:c9:21:96:92:
b5:b3:8d:0d:bb:a4:4f:24:4c:00:2e:4f:b3:a8:48:e6:df:7d:
33:92:99:21:5f:5e:c4:3f:9f:4c:20:a4:a4:2d:3d:4c:6b:76:
bb:57:9e:22:b6:54:5b:bb:62:4d:f7:9e:2a:e7:e4:96:f8:72:
41:af:55:df:40:1d:6b:bb:56:31:2a:27:f6:0c:1d:30:e1:bc:
0d:89:3d:e1:34:6a:0a:ea:56:ba:a4:6f:2d:2f:61:26:e5:fa:
27:42:b3:e3:dc:48:20:f3:22:0d:aa:be:44:c2:41:d3:6b:cf:
55:d7:5f:06:2a:ff:96:de:26:32:89:cb:f4:98:2f:f6:fb:d7:
df:de:da:9e:a6:55:94:eb:2a:cf:7a:80:89:21:2f:33:1f:3f:
12:46:16:86:8a:8b:00:b7:48:34:ce:b0:8b:5e:29:73:b4:f0:
12:32:2f:6a:90:85:2c:f4:61:d2:32:ea:55:72:91:88:ae:84:
0d:29:53:26:49:62:42:5b:11:76:7e:06:70:ea:a9:40:fe:1b:
3e:ce:4b:0a:09:d1:d2:5b:b5:cc:0c:00:80:53:ac:35:15:5d:
14:8d:15:1e:0c:33:54:ad:ba:dc:c9:a5:43:ae:56:26:68:d8:
0e:7f:c6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:28:30 2026 by rpki-client