Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: vpbdAWnpcQFfja5Ys5WOxWXabBf2ROqPm1vQOh25d/I=
Subject key identifier: C9:77:4C:CF:42:65:76:E5:1E:11:D2:EE:59:CC:5C:17:D7:AE:C8:4E
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 019CAD5965C7FB47B60185D2A30A4BADAE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 127B
Signing time: Mon 02 Mar 2026 07:00:42 +0000
Manifest this update: Mon 02 Mar 2026 07:00:42 +0000
Manifest next update: Tue 03 Mar 2026 07:00:42 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: cCIXshSIXeIW40JxyW82x17cj3eoAQdY2hFmZgel9XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:65:c7:fb:47:b6:01:85:d2:a3:0a:4b:ad:ae:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Mar 2 07:00:42 2026 GMT
Not After : Mar 3 07:00:42 2026 GMT
Subject: CN=c9774ccf426576e51e11d2ee59cc5c17d7aec84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:46:69:99:c5:50:88:40:a3:c7:1d:3a:13:
05:c6:db:5d:af:b3:13:9e:56:26:35:02:5b:71:44:
a2:f5:7c:8b:e3:ec:d4:7e:2f:1e:c4:37:3a:99:27:
e6:14:4a:25:d2:a5:3e:10:22:70:68:7c:b7:f0:08:
b2:a3:7d:e0:b6:ff:ac:ef:25:c3:d5:07:f7:cb:af:
91:a9:70:fa:2c:f0:e9:cc:80:92:50:91:4d:e5:b8:
81:a0:3d:a0:11:63:45:02:a1:0b:4f:3b:ee:f2:0c:
56:78:91:48:55:dd:e8:bc:72:de:00:cf:ee:12:f0:
31:0d:9d:d1:60:31:ff:9c:da:b4:ea:2a:6f:ea:f2:
ad:91:e5:67:f5:98:22:4c:f9:22:56:64:02:ce:f2:
e9:6e:e1:e4:7d:43:44:be:f9:7b:b8:6f:c0:86:9e:
51:0f:0a:72:2b:76:04:6c:32:09:bb:c1:8a:a1:aa:
bd:83:a9:2e:48:3d:08:1f:bf:fe:0b:8c:d8:99:d6:
5c:36:5a:c5:d9:69:4f:3a:4a:e0:b9:a7:c9:12:f0:
0a:3b:66:25:f1:0a:01:51:c1:29:64:25:ed:fe:57:
c3:3b:07:3b:b1:25:bc:4f:61:61:86:4c:8e:91:5a:
9a:ca:e7:c2:06:d0:03:7f:a8:09:fc:73:27:e6:24:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:77:4C:CF:42:65:76:E5:1E:11:D2:EE:59:CC:5C:17:D7:AE:C8:4E
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f4:c2:49:2d:25:a1:99:73:be:77:e6:95:73:a7:41:37:72:
b6:2a:c9:9b:34:1e:6a:5c:e0:55:98:87:b7:9f:0c:d4:15:96:
dd:f1:5c:74:fa:0e:cb:ba:a4:9b:f7:ad:6c:1b:d2:b5:45:9d:
1f:66:bf:68:50:69:20:37:eb:7f:82:3f:a2:9e:e7:94:61:ee:
9a:bc:8a:f2:0a:43:5b:52:aa:38:5c:61:79:e6:86:ff:9d:ca:
57:5b:b1:43:f4:fd:61:fd:25:0b:ab:f7:52:1c:ff:a4:9d:61:
d0:9e:e9:a9:91:11:7c:7c:1b:63:a8:92:07:18:44:84:86:c3:
1a:c6:32:bb:ce:e7:45:72:2a:6b:29:0b:f7:a0:12:e1:93:1e:
3b:f3:72:73:43:ae:e5:de:ee:0b:57:37:67:13:d7:96:ce:f9:
cf:53:a8:70:4b:2c:c4:bd:52:4c:06:be:6e:06:18:20:f7:d9:
b2:34:9e:27:e6:37:1b:d8:0a:c7:7e:2d:f7:5c:0f:26:15:3d:
26:1f:d3:a6:91:14:72:aa:74:10:c1:44:0c:a8:97:8d:20:75:
82:56:88:5c:83:7a:cf:01:26:15:d1:11:09:86:8b:50:13:e6:
6b:52:73:4e:3b:ed:bf:ae:b4:54:a4:4f:40:bb:44:01:4e:65:
2e:9a:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:04 2026 by rpki-client