Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: 8xSwvOYgeLn1wWXI79IhO/YPgaM6XGzuh6sNy7Me6Sk=
Subject key identifier: E1:30:DA:51:DE:85:D3:85:F3:48:CE:33:56:A0:B2:78:36:21:65:2E
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 019EC06DDFEF5E86D72A86FFD39B38975616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 138E
Signing time: Sat 13 Jun 2026 10:01:26 +0000
Manifest this update: Sat 13 Jun 2026 10:01:26 +0000
Manifest next update: Sun 14 Jun 2026 10:01:26 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: AvT7WLlUEYKO0eIlcHPFOzCfBiNWgn99CJ3A/pAIEdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:df:ef:5e:86:d7:2a:86:ff:d3:9b:38:97:56:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Jun 13 10:01:26 2026 GMT
Not After : Jun 14 10:01:26 2026 GMT
Subject: CN=e130da51de85d385f348ce3356a0b2783621652e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:12:21:6a:18:ef:a6:dd:5e:4c:0c:1d:24:
27:6d:9b:af:05:f8:d8:7b:a2:9d:ae:2a:1e:26:30:
b0:d0:4f:5b:3c:44:60:92:64:ae:d8:fa:b6:71:90:
d8:8c:3e:35:b6:18:a6:3f:56:e0:90:3d:be:03:fa:
94:fe:4b:b8:9b:2f:e5:9c:ea:a6:d1:cc:22:42:53:
bb:20:b8:b8:61:7f:1d:35:4e:bf:0e:17:fc:bd:81:
71:b3:e6:3d:2a:63:50:e5:de:e6:22:10:76:ef:37:
f3:d8:5a:c2:ec:69:e1:f7:1e:74:ea:4e:97:e6:26:
ee:d5:06:09:da:dd:e6:88:0d:45:40:31:11:fe:32:
06:af:72:92:f7:56:33:db:11:93:37:b8:a0:a5:c0:
ce:12:5d:44:21:1e:5c:f9:d9:6e:c8:95:a8:17:fb:
67:fe:31:c2:3e:81:ec:db:c4:1c:5b:80:f5:bf:e8:
c4:b1:94:a9:bd:38:58:72:4b:25:81:4f:10:26:40:
c7:45:f5:61:17:55:4b:a9:68:ec:e7:a9:53:4d:40:
f9:73:c1:a6:8e:ea:4c:4a:d2:8c:d8:32:c5:72:15:
9b:8e:a4:68:16:e2:76:b9:55:bd:4d:4c:24:28:d5:
a5:45:4f:f9:e8:73:91:63:ae:5b:06:e3:32:9e:97:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:DA:51:DE:85:D3:85:F3:48:CE:33:56:A0:B2:78:36:21:65:2E
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2e:be:8f:b4:b6:9c:2e:69:09:40:63:ee:a8:f9:fd:aa:85:
bc:11:5e:b5:6a:d9:08:e7:1f:0b:97:e7:dc:62:43:68:e1:42:
e2:af:67:be:ab:bd:74:e6:fd:af:d1:c8:85:1d:3c:9c:3a:f3:
c8:db:e9:55:5d:0d:63:a3:ff:12:71:c5:c9:aa:90:2f:03:ff:
3b:34:09:16:84:6c:df:7c:8d:51:43:7e:34:a7:12:16:41:e1:
2f:ad:dc:03:70:14:7d:d4:dc:61:66:d0:b8:e2:18:73:a7:b9:
34:ce:fc:01:04:99:14:06:6e:62:f9:6f:89:66:e8:78:f0:0f:
e1:6b:49:c9:ac:9d:ce:87:e7:84:d2:fb:7e:50:0c:c6:60:26:
0b:82:2b:38:9d:b1:15:96:9d:0f:2c:ec:df:43:6f:d1:03:ab:
33:3b:78:f7:a9:d5:b9:36:63:1b:06:eb:31:75:9f:31:f3:8b:
4e:8b:3f:41:fd:49:37:2f:c7:0d:17:55:e5:30:e3:99:9c:8a:
62:7a:e2:dd:a2:74:0c:a1:22:dc:fd:c5:5a:8f:3f:b8:16:24:
a1:03:82:07:de:5c:b2:e4:c0:6f:7d:22:b9:ef:74:81:af:27:
5b:96:48:e3:39:c3:02:27:92:a4:cc:8c:99:d8:b6:df:3e:b6:
08:d1:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:30:28 2026 by rpki-client