Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: yWB1g/rnyFYlzmJ9gQjFaNoIGMfybK4GXYFX1PGHZgo=
Subject key identifier: A4:81:A6:D5:4A:44:CE:BE:34:F7:C8:C9:E5:2C:BA:18:15:72:6D:EF
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 019D992B1D09593DCD4FF5CBC52137325AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 0B3B
Signing time: Fri 17 Apr 2026 02:00:32 +0000
Manifest this update: Fri 17 Apr 2026 02:00:32 +0000
Manifest next update: Sat 18 Apr 2026 02:00:32 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: gtLQd0LgnbMTHcC4gsMJJjJH6RWPQgWi/fmazwr6Amg=)
2: wPZBSgFASeM9SaWJvAkRGk-7twQ.roa (hash: R3wosEg+LuaaoBj4e/mPNIMyKN6NLJP5v9wAW4ICOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:1d:09:59:3d:cd:4f:f5:cb:c5:21:37:32:5a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Apr 17 02:00:32 2026 GMT
Not After : Apr 18 02:00:32 2026 GMT
Subject: CN=a481a6d54a44cebe34f7c8c9e52cba1815726def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:3c:3d:bd:9f:34:e3:65:54:ba:90:f8:b7:
17:6e:74:eb:b9:f2:bd:06:b0:ae:6c:bf:cd:1d:62:
75:ec:14:d6:5f:20:f8:ce:42:ea:82:61:60:2a:c6:
c7:76:b0:5a:8a:16:5a:54:8e:8d:04:06:2d:2b:62:
8f:73:f0:5a:4f:3d:41:96:db:cd:fb:93:15:69:05:
71:86:f2:c7:dc:39:54:32:33:a9:e7:a4:36:60:24:
3c:b8:80:97:41:1f:5c:99:e5:53:f7:f2:34:ea:73:
a3:f3:10:94:16:05:20:1f:94:dc:1e:3f:21:9b:8d:
57:ae:38:d6:80:58:4a:be:da:47:8d:2c:c4:ff:8e:
f6:79:4c:cb:f3:ec:1b:22:3e:1b:09:8f:4f:d4:d3:
84:bb:4b:7b:cf:42:11:a9:1a:40:a7:5e:81:7f:36:
36:81:82:17:2d:3e:5c:fd:49:c9:ba:67:9a:15:48:
20:67:18:d4:c7:66:d9:01:f6:7a:a5:7b:74:18:ad:
e9:34:c8:e5:f3:9b:44:1c:ce:b7:91:de:64:6a:7e:
6f:60:1d:8b:38:13:9f:c0:6e:c9:de:7d:44:5f:2c:
bd:b3:7c:aa:1d:0b:6c:63:97:c7:3b:58:1d:80:06:
1d:28:3a:50:39:41:d4:87:22:06:fe:3a:66:73:f8:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:81:A6:D5:4A:44:CE:BE:34:F7:C8:C9:E5:2C:BA:18:15:72:6D:EF
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ce:de:88:cd:1d:b2:aa:2d:38:f1:b3:97:90:5f:ed:cd:e3:
f9:5a:81:62:93:a4:7f:61:c8:37:b4:74:f3:ec:af:1a:16:56:
60:25:42:96:e6:ac:84:80:7b:64:d7:ed:3f:0d:02:43:63:f7:
6d:16:ab:bd:c1:72:1b:a9:e1:b3:ab:c4:04:b0:ed:3a:10:38:
f5:81:c8:ec:eb:39:10:a3:2c:7c:5d:d2:7b:66:31:60:b7:42:
39:d9:1b:47:4e:c0:51:af:a6:c6:c9:14:0a:d5:d4:88:dd:e4:
62:f5:c8:e6:ef:bd:bd:f7:42:11:48:1c:76:85:73:1a:0e:53:
ca:95:63:2f:ef:98:60:b7:91:c5:0c:20:de:b2:63:9e:68:6a:
ea:8a:68:bd:70:21:1c:11:8e:35:ba:45:21:ec:16:e3:69:24:
ff:8f:58:92:83:be:14:96:51:b9:65:1a:5f:2b:de:3a:b6:ba:
15:d0:5a:ef:b7:29:4f:55:34:9b:0b:83:df:4c:fa:75:c4:2d:
ad:9f:2a:ea:2e:b1:85:51:f3:1f:1d:61:cf:3b:0d:87:cf:26:
e1:64:15:d0:52:4f:43:0e:b7:4e:a0:36:da:a8:b8:66:22:c7:
82:d5:1a:06:a5:b1:f2:19:58:a6:dd:63:2f:c0:a8:49:94:a2:
3f:86:85:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKx0JWT3NT/XLxSE3MlrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmIxMGU1NDdlODlmZjZjN2IzOWI2Y2E5N2ZiMTZiM2Zk
ZmJlNGYwHhcNMjYwNDE3MDIwMDMyWhcNMjYwNDE4MDIwMDMyWjAzMTEwLwYDVQQD
EyhhNDgxYTZkNTRhNDRjZWJlMzRmN2M4YzllNTJjYmExODE1NzI2ZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIk8Pb2fNONlVLqQ+LcXbnTrufK9
BrCubL/NHWJ17BTWXyD4zkLqgmFgKsbHdrBaihZaVI6NBAYtK2KPc/BaTz1BltvN
+5MVaQVxhvLH3DlUMjOp56Q2YCQ8uICXQR9cmeVT9/I06nOj8xCUFgUgH5TcHj8h
m41XrjjWgFhKvtpHjSzE/472eUzL8+wbIj4bCY9P1NOEu0t7z0IRqRpAp16BfzY2
gYIXLT5c/UnJumeaFUggZxjUx2bZAfZ6pXt0GK3pNMjl85tEHM63kd5kan5vYB2L
OBOfwG7J3n1EXyy9s3yqHQtsY5fHO1gdgAYdKDpQOUHUhyIG/jpmc/gmPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSBptVKRM6+NPfIyeUsuhgVcm3vMB8GA1UdIwQY
MBaAFAUrEOVH6J/2x7ObbKl/sWs/375PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAt
MWY3NmU5ZGNmZjkyLzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAtMWY3NmU5ZGNmZjky
LzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADc7eiM0d
sqotOPGzl5Bf7c3j+VqBYpOkf2HIN7R08+yvGhZWYCVCluashIB7ZNftPw0CQ2P3
bRarvcFyG6nhs6vEBLDtOhA49YHI7Os5EKMsfF3Se2YxYLdCOdkbR07AUa+mxskU
CtXUiN3kYvXI5u+9vfdCEUgcdoVzGg5TypVjL++YYLeRxQwg3rJjnmhq6opovXAh
HBGONbpFIewW42kk/49YkoO+FJZRuWUaXyveOra6FdBa77cpT1U0mwuD30z6dcQt
rZ8q6i6xhVHzHx1hzzsNh88m4WQV0FJPQw63TqA22qi4ZiLHgtUaBqWx8hlYpt1j
L8CoSZSiP4aFQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:08 2026 by rpki-client