Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: ipt4flEZES9N6nrwgDRXbe8uOns0evy2bt/h8T2ay+M=
Subject key identifier: 60:7D:F6:D6:56:FD:28:1A:C7:56:A8:6B:B1:E7:C5:8A:C4:8E:A7:BC
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 019EBE7F955EE0A2316E7B4C9F06CA37FA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 138D
Signing time: Sat 13 Jun 2026 01:01:32 +0000
Manifest this update: Sat 13 Jun 2026 01:01:32 +0000
Manifest next update: Sun 14 Jun 2026 01:01:32 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: M1Ioc1upCshN/OEkYuHGD5BTtvVOTsB36MZCxKO/BkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:95:5e:e0:a2:31:6e:7b:4c:9f:06:ca:37:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Jun 13 01:01:32 2026 GMT
Not After : Jun 14 01:01:32 2026 GMT
Subject: CN=607df6d656fd281ac756a86bb1e7c58ac48ea7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:98:ba:62:d0:17:3e:77:f4:7b:ce:85:25:
9b:4e:5a:ba:f9:f8:80:51:40:68:21:2b:7e:fa:aa:
06:15:01:18:f6:da:38:87:a5:f6:1a:61:15:7e:d8:
d6:08:b9:d7:f7:38:af:b2:ac:59:fb:d0:bd:c2:5d:
e4:c1:6d:b1:0f:21:9b:40:06:5f:eb:2b:0d:4c:70:
35:11:2b:76:25:53:7b:b6:9a:a4:52:5f:34:65:b2:
ea:b2:80:0e:55:cf:e3:1c:f1:ad:47:95:80:11:1f:
5f:b1:8d:3b:8d:b5:a8:6e:82:53:f9:dc:74:f9:44:
cc:67:df:40:c6:03:5b:c1:da:06:b3:99:f8:69:f8:
7e:6b:88:01:02:29:84:b8:67:82:8d:99:4e:45:ef:
a7:7a:c7:60:1f:b2:0d:c3:e3:00:90:38:80:e8:22:
b8:9c:7d:66:17:50:25:9d:03:14:3d:c6:be:ba:40:
9d:fd:35:14:f0:88:e5:bc:bd:4d:46:0a:94:e3:85:
f8:2e:89:29:41:c9:19:f2:e0:25:9e:da:b8:84:f0:
ec:64:a0:0b:04:1b:2f:28:bc:9d:b9:16:52:1f:23:
6e:0d:21:ed:27:0f:d8:ca:44:e9:06:00:e5:2b:77:
a8:a9:cc:f5:b9:b5:79:ff:fe:98:fd:7f:1c:08:5c:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7D:F6:D6:56:FD:28:1A:C7:56:A8:6B:B1:E7:C5:8A:C4:8E:A7:BC
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ca:c3:57:7d:23:24:93:0d:46:fa:d9:35:d8:5c:8c:5b:bd:
9a:5e:47:75:b2:5c:f2:98:c0:64:01:cf:d0:fd:b4:3a:c0:1e:
00:46:d7:ce:96:ca:aa:c3:fd:4d:94:2a:4d:b8:52:3a:89:22:
e3:fd:8b:d1:3e:86:d2:88:61:75:3b:b5:da:29:9f:b1:e8:72:
22:59:84:1e:1a:34:7e:47:0d:c6:54:bc:7b:de:45:ef:a3:6a:
41:42:44:02:04:cf:7a:ce:9a:aa:8a:61:8e:9b:0a:57:17:f0:
3c:56:0b:d4:ba:7a:99:67:4c:29:41:7f:6f:21:a9:18:89:3f:
3b:2a:19:a7:e5:d7:b3:9c:e1:f8:d1:f4:4d:3d:a3:b3:6d:8c:
37:90:7b:af:35:ac:10:c4:53:52:4c:46:43:88:5c:42:66:db:
31:d1:e1:c7:c2:40:4e:5a:aa:a6:f4:93:b7:0e:33:6c:a4:a3:
a7:56:55:65:bc:6b:22:f8:f1:f3:e5:d5:5d:79:df:c6:02:37:
49:26:f4:9c:cb:6f:76:9b:b0:9a:00:34:06:41:a4:c6:31:5a:
82:d2:24:c0:e3:cf:48:c1:33:e4:53:78:10:ed:50:bd:5f:ce:
83:38:59:6f:6e:1c:e4:25:1e:ce:d4:23:3b:95:fb:6c:63:77:
9b:fe:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:57 2026 by rpki-client