Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: sZQY7z/rRa/aMCUS4Qyp9rINWhSGhjCGCTpLzkOsVcc=
Subject key identifier: DE:FC:8F:E8:F5:44:77:7B:CE:4A:D1:87:D7:95:00:6E:C0:41:E1:43
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 01A0E81D1BFC0E3D0656E87A2A81BA432C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0E64
Signing time: Mon 28 Sep 2026 13:03:36 +0000
Manifest this update: Mon 28 Sep 2026 13:03:36 +0000
Manifest next update: Tue 29 Sep 2026 13:03:36 +0000
Files and hashes: 1: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: WvLbtRgv+zghxXZgfI9Ha8/mGCrBysf1j3OZMHEGUXU=)
2: F4o9chBhcKIMOIAtTun2pROHlBg.roa (hash: +agk1DW6tWQwffLIyWmvkpOAgJSFY7/mjSBbgvZfRFk=)
3: tLBl5sqYIORcYxoiPAGpkSvAEb0.roa (hash: GMSHalNloa4MLmQuNKJAMYyesz8tlVOh/OMa6p0O3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1d:1b:fc:0e:3d:06:56:e8:7a:2a:81:ba:43:2c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Sep 28 13:03:36 2026 GMT
Not After : Sep 29 13:03:36 2026 GMT
Subject: CN=defc8fe8f544777bce4ad187d795006ec041e143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9e:87:6a:cb:5e:2b:79:66:3b:d8:2f:1e:20:
54:4e:e0:9c:86:83:f3:c7:7c:be:02:2b:32:64:af:
63:ee:59:e0:97:b0:72:48:57:37:4c:6b:f2:e1:3a:
cd:99:40:19:31:57:06:95:dc:89:12:00:29:f9:b0:
c6:ee:c4:2d:66:29:5a:47:38:ec:bf:1f:37:a5:57:
d0:e2:2c:6c:56:e7:b9:e9:29:ad:2c:5d:b0:ec:64:
5b:6b:28:df:81:70:d2:08:6b:cf:9e:5b:d7:53:04:
52:5d:3e:c8:4a:62:48:67:e2:9d:24:20:90:23:94:
b0:56:ac:b1:b7:a8:f9:10:65:f3:77:6c:39:c8:e4:
72:20:7c:1c:a3:dc:e5:2f:68:c7:dc:7e:5e:60:0e:
b8:be:c3:30:a4:be:2f:0c:b1:fc:50:ff:21:87:13:
46:62:2e:30:c8:ba:0c:bd:3f:51:2a:6a:55:d8:f2:
e9:de:65:21:45:63:51:42:71:45:13:98:fc:53:b9:
24:d3:5a:35:71:15:78:8a:c8:b2:78:9e:d3:c3:43:
c7:54:49:77:c6:d5:d8:35:ad:7f:12:1c:ea:2e:79:
5c:f6:b6:8c:2c:13:68:25:56:a8:e8:6a:2d:74:e1:
b5:53:37:3c:b5:93:80:e4:0f:6d:ab:c0:24:1b:57:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FC:8F:E8:F5:44:77:7B:CE:4A:D1:87:D7:95:00:6E:C0:41:E1:43
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2d:aa:4a:24:7f:6e:e5:1e:26:fd:29:7b:c1:59:0f:69:66:
5a:06:b0:84:21:3e:f4:d8:4b:66:5c:9d:df:bf:13:3a:27:3d:
45:4a:40:3e:78:66:86:80:b1:07:3c:5a:f2:87:9b:5a:03:ed:
8f:75:58:c7:9e:fb:8e:6b:aa:aa:89:9b:bb:fe:d7:e0:d0:c9:
85:c6:fc:57:51:98:9d:8f:03:44:db:b3:16:17:54:20:87:34:
c7:12:91:5b:3a:d3:9e:64:ad:78:59:33:10:75:c6:15:8e:03:
2a:6f:29:77:3c:ad:5a:e1:4c:d0:d5:c8:4a:89:33:e6:94:97:
bd:e1:16:0d:39:86:83:3a:ed:2f:3c:16:ee:82:9b:9c:9c:c6:
05:c3:67:32:a6:31:25:d6:d4:4d:48:3a:b8:88:fd:b3:f1:98:
2f:17:21:c7:b9:94:6c:c9:89:6d:53:47:a6:a9:03:ca:43:f0:
a3:46:e0:a4:0d:f2:63:5e:5b:e6:f8:64:d4:79:a7:e1:38:c4:
3d:7b:ec:06:91:9a:34:a7:98:f4:28:af:3e:69:02:40:cb:b4:
6f:f6:4d:c9:b4:b6:86:93:7a:b5:c2:1c:d0:3d:f5:04:d4:af:
a2:b6:b6:20:a7:1d:0e:06:77:4e:9f:64:37:d0:a1:08:1b:1e:
b7:f0:f0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:51:23 2026 by rpki-client