Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: ZmS0171xBAiyCSvwvcmRDXdiR5ap2KCgwQgEHN57YVs=
Subject key identifier: 70:80:B4:9D:37:C8:1D:C6:8E:B3:6F:97:9F:D2:C4:D3:F8:8F:BC:73
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 019CABA24E0484DB19BB9D411D2461F86B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 0AC0
Signing time: Sun 01 Mar 2026 23:01:06 +0000
Manifest this update: Sun 01 Mar 2026 23:01:06 +0000
Manifest next update: Mon 02 Mar 2026 23:01:06 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: o5glmK7ko+M9jy8E7WAASaCEYZZGJ3HsD/63dlA5lew=)
2: wPZBSgFASeM9SaWJvAkRGk-7twQ.roa (hash: R3wosEg+LuaaoBj4e/mPNIMyKN6NLJP5v9wAW4ICOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4e:04:84:db:19:bb:9d:41:1d:24:61:f8:6b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Mar 1 23:01:06 2026 GMT
Not After : Mar 2 23:01:06 2026 GMT
Subject: CN=7080b49d37c81dc68eb36f979fd2c4d3f88fbc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:cb:c9:68:60:7b:29:7c:f1:c7:47:44:95:
66:f3:ee:99:0e:13:e9:68:f0:2b:1a:55:3d:17:5b:
15:35:58:41:53:47:b9:8a:95:61:e2:ec:d9:a3:03:
22:59:32:05:01:7a:00:94:7f:f6:35:b1:3a:56:12:
71:7a:85:10:6f:7d:d5:ae:dc:a3:b7:ba:9f:47:7d:
db:5b:e3:2f:c4:13:da:bf:7d:2d:a7:73:34:da:97:
9e:49:b3:85:a0:e2:7e:62:38:67:2f:a5:13:7c:40:
21:58:8d:a2:0f:7d:0e:c2:9d:59:34:f2:03:3b:5c:
cb:22:5d:61:70:72:65:5c:4a:3f:b8:bc:29:e7:51:
71:e3:4f:23:67:de:0e:c1:fd:96:ff:48:6c:53:21:
6c:13:eb:7f:93:68:9c:f1:b0:e8:21:3b:a9:72:2b:
4a:83:0f:8b:ff:c7:78:ee:c2:49:57:82:98:9a:69:
e1:c6:b9:41:1c:52:be:0e:0a:ac:a6:26:e5:b3:5b:
bd:6c:15:22:12:88:11:47:ab:e9:d4:49:0e:c1:6a:
6b:2a:fd:35:9d:38:b9:59:be:f3:80:7a:94:c0:37:
61:74:61:da:ce:0e:52:70:29:b8:25:e1:2d:b6:47:
85:65:27:b2:34:ec:5c:9c:7a:54:c6:9e:6d:b3:91:
f6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:80:B4:9D:37:C8:1D:C6:8E:B3:6F:97:9F:D2:C4:D3:F8:8F:BC:73
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d3:6d:21:66:1e:eb:9a:a1:28:5f:c3:47:48:6a:e4:47:57:
6e:1e:3a:52:ad:a1:92:4c:a4:2f:0a:39:7b:d1:36:3a:b4:de:
c0:ba:3d:64:5a:16:20:52:7c:4d:c2:06:a9:3c:fe:bc:f6:77:
fb:ae:b8:5d:e2:2e:83:7b:19:d7:8e:4a:ed:64:d0:62:b9:f6:
ec:5a:93:af:13:d8:82:5c:43:14:d6:f4:fe:38:6d:06:97:63:
cb:8e:e1:9d:a6:d4:fa:fe:48:40:15:21:95:d1:d2:93:e0:41:
a4:0b:9d:f2:a7:e2:e6:5b:5e:f1:8a:1d:9e:be:86:da:5f:7d:
4a:58:aa:0b:93:7e:47:b5:d5:9a:ea:29:14:f1:16:60:e8:49:
b7:24:4d:45:7b:8f:f2:5e:72:0a:98:1b:01:ea:6c:b1:02:4f:
29:d9:69:02:e2:cf:36:83:d3:03:ba:d8:c3:ff:6b:45:0e:12:
4f:e3:73:a2:70:04:ca:4d:66:8b:9f:7d:af:dd:c4:fa:88:a0:
1a:6f:32:86:af:94:4b:8c:be:cd:c8:e9:f7:fc:89:6e:01:0e:
2f:84:3b:3e:8b:2b:87:86:1a:23:39:d6:aa:1e:fb:13:7c:f6:
c3:f8:b1:96:9f:6d:f2:ba:68:28:a9:d0:d1:49:70:05:98:52:
ea:e6:56:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrok4EhNsZu51BHSRh+GuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmIxMGU1NDdlODlmZjZjN2IzOWI2Y2E5N2ZiMTZiM2Zk
ZmJlNGYwHhcNMjYwMzAxMjMwMTA2WhcNMjYwMzAyMjMwMTA2WjAzMTEwLwYDVQQD
Eyg3MDgwYjQ5ZDM3YzgxZGM2OGViMzZmOTc5ZmQyYzRkM2Y4OGZiYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIzLyWhgeyl88cdHRJVm8+6ZDhPp
aPArGlU9F1sVNVhBU0e5ipVh4uzZowMiWTIFAXoAlH/2NbE6VhJxeoUQb33Vrtyj
t7qfR33bW+MvxBPav30tp3M02peeSbOFoOJ+YjhnL6UTfEAhWI2iD30Owp1ZNPID
O1zLIl1hcHJlXEo/uLwp51Fx408jZ94Owf2W/0hsUyFsE+t/k2ic8bDoITupcitK
gw+L/8d47sJJV4KYmmnhxrlBHFK+Dgqspibls1u9bBUiEogRR6vp1EkOwWprKv01
nTi5Wb7zgHqUwDdhdGHazg5ScCm4JeEttkeFZSeyNOxcnHpUxp5ts5H2rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCAtJ03yB3GjrNvl5/SxNP4j7xzMB8GA1UdIwQY
MBaAFAUrEOVH6J/2x7ObbKl/sWs/375PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAt
MWY3NmU5ZGNmZjkyLzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAtMWY3NmU5ZGNmZjky
LzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNNtIWYe
65qhKF/DR0hq5EdXbh46Uq2hkkykLwo5e9E2OrTewLo9ZFoWIFJ8TcIGqTz+vPZ3
+664XeIug3sZ145K7WTQYrn27FqTrxPYglxDFNb0/jhtBpdjy47hnabU+v5IQBUh
ldHSk+BBpAud8qfi5lte8Yodnr6G2l99SliqC5N+R7XVmuopFPEWYOhJtyRNRXuP
8l5yCpgbAepssQJPKdlpAuLPNoPTA7rYw/9rRQ4ST+NzonAEyk1mi599r93E+oig
Gm8yhq+US4y+zcjp9/yJbgEOL4Q7Posrh4YaIznWqh77E3z2w/ixlp9t8rpoKKnQ
0UlwBZhS6uZWWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:32 2026 by rpki-client