Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: 1HwUWV49FcF8tNtV3zFRYKVxeTMlldL7bX7xv59VNT8=
Subject key identifier: A3:29:F7:FD:77:FB:47:6C:A3:C5:64:34:69:1C:6B:C7:FA:F1:ED:1D
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 019FAA50C141277AA202028C327532ADB187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 0C4D
Signing time: Tue 28 Jul 2026 20:00:46 +0000
Manifest this update: Tue 28 Jul 2026 20:00:46 +0000
Manifest next update: Wed 29 Jul 2026 20:00:46 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: crA/CQd+SuR84qxfixJoxx42adi1veLXC57veYlzPBo=)
2: wPZBSgFASeM9SaWJvAkRGk-7twQ.roa (hash: R3wosEg+LuaaoBj4e/mPNIMyKN6NLJP5v9wAW4ICOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c1:41:27:7a:a2:02:02:8c:32:75:32:ad:b1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Jul 28 20:00:46 2026 GMT
Not After : Jul 29 20:00:46 2026 GMT
Subject: CN=a329f7fd77fb476ca3c56434691c6bc7faf1ed1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:18:a4:d0:63:e1:f8:39:e5:54:85:80:55:
0d:f3:d0:d4:8b:81:e1:db:4f:af:45:5c:b5:04:37:
91:d4:b4:58:e4:b4:25:d5:25:98:0c:58:77:06:70:
2a:9a:7c:95:06:33:04:5a:4e:b3:3e:18:c2:7f:27:
43:b9:e9:a0:ea:0d:d8:87:20:a9:eb:18:98:94:64:
2e:fb:19:31:65:fd:9c:a2:32:cf:71:be:ed:1a:a8:
ff:cc:91:85:f0:c6:c1:1c:52:69:d5:9d:e8:66:eb:
aa:d4:e1:c0:82:f1:2a:e9:29:18:37:65:2d:28:23:
ea:10:ad:e6:a2:f3:da:aa:61:6b:d4:ae:97:b8:70:
ff:ba:a1:56:c1:05:7c:71:4f:26:d1:3d:d7:26:dd:
8c:0b:e4:53:52:23:d8:e8:70:30:1a:cf:a6:8e:92:
71:9c:4f:ab:88:6c:67:a9:f2:a5:f4:68:79:c6:01:
88:55:f0:7a:1d:f5:1f:f2:5d:d6:6b:43:ce:76:c2:
60:83:04:d6:85:c8:fb:e7:8d:16:f2:ea:d3:a5:a1:
97:31:06:a7:08:a0:72:63:f2:de:b3:81:63:db:8f:
81:cb:20:7c:44:5d:7c:0b:00:6d:70:fc:d1:24:c5:
f1:29:8b:e2:d9:54:1b:01:e3:51:39:b6:d8:bb:96:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:29:F7:FD:77:FB:47:6C:A3:C5:64:34:69:1C:6B:C7:FA:F1:ED:1D
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fc:80:e6:2b:d1:76:2c:1b:70:7f:c2:f4:d3:1c:89:b3:b9:
93:28:10:64:5d:12:e4:ea:46:53:81:9c:51:2d:8a:6d:8c:2f:
c6:ba:40:01:85:39:66:c6:53:6f:14:e5:10:b1:88:f8:5e:3c:
c3:43:1d:cd:d2:ce:6c:dc:e9:1f:b9:fd:9b:00:98:c5:67:ed:
5a:32:a2:9e:90:ba:a0:4b:de:0c:e3:f7:18:14:75:20:83:b9:
40:28:31:92:4a:eb:0d:46:46:08:a1:15:89:6a:71:e5:07:b0:
ea:54:da:8a:1a:36:3a:3a:0d:14:fc:f7:21:58:65:19:9f:9e:
13:66:4f:98:59:51:ae:5a:88:c2:0d:30:78:04:11:30:b5:fc:
4a:cc:20:34:ca:1a:88:62:42:a0:b4:47:5d:a4:a5:2a:3a:8c:
25:05:d0:9f:4c:33:cb:c9:f2:fe:ec:52:f0:5b:37:58:02:08:
e8:3e:9f:3b:9b:b2:23:a0:43:5c:b0:0b:bc:83:99:a9:28:a7:
32:4f:19:88:2b:a0:1b:36:5e:94:bb:98:db:34:e1:3d:12:33:
a2:9b:a6:c7:dc:5f:85:0b:b2:66:4c:39:98:a3:db:b4:00:36:
db:82:51:d0:b9:70:9d:b8:94:66:5f:7b:b3:18:ae:0f:ac:16:
68:70:06:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:57 2026 by rpki-client