Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: pnJYcU9t6Bs0swp2NgTSYmpPT2BnwS1ghJ5/K2ui+w4=
Subject key identifier: 67:8B:2D:F7:FC:55:34:EA:C1:03:7E:6E:3D:A1:EC:99:BC:67:04:24
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 01A0D383646E94FC4CEF21E997655593FE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 14A1
Signing time: Thu 24 Sep 2026 13:03:18 +0000
Manifest this update: Thu 24 Sep 2026 13:03:18 +0000
Manifest next update: Fri 25 Sep 2026 13:03:18 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: lypeZME1GuB36/E3J2YA0mRM99XoyFeSIuVw4cbCE98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:64:6e:94:fc:4c:ef:21:e9:97:65:55:93:fe:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Sep 24 13:03:18 2026 GMT
Not After : Sep 25 13:03:18 2026 GMT
Subject: CN=678b2df7fc5534eac1037e6e3da1ec99bc670424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:e3:83:1e:10:7a:ab:3e:26:90:e9:20:e2:
25:82:1c:b7:bd:3e:24:cf:0d:0a:1b:3c:5f:e4:9f:
b7:4f:6c:b2:3b:62:5f:32:4f:19:19:ca:54:fb:2c:
d9:d1:43:56:0d:93:fe:ab:ee:48:f3:17:0c:e5:5c:
56:bf:ac:2d:11:d1:9d:11:2b:5f:f2:e6:c7:e9:ab:
e6:4d:43:2d:e7:24:1b:03:e3:af:15:41:41:d6:2c:
ed:ec:c1:33:4e:b9:46:90:66:b4:7d:07:2a:e1:19:
1e:e8:30:c9:36:26:68:86:e5:a4:4e:a5:1c:4c:93:
97:88:c8:39:6a:11:ea:4c:b4:44:64:58:fb:cf:61:
8a:f4:01:27:56:12:b2:8f:08:10:d4:32:51:5f:8c:
c5:e4:f1:24:dd:e2:e7:d1:7c:04:26:15:41:3b:e8:
6e:f9:73:47:70:ab:df:c2:44:5f:4f:77:41:6d:70:
bd:32:68:f1:58:d5:02:6c:41:83:1e:61:a6:25:ef:
de:27:db:2d:15:de:66:7f:4d:41:fc:df:ed:f7:09:
1f:61:34:54:2c:e3:01:47:ca:65:06:7d:d6:1b:e7:
39:68:bd:57:5b:ae:0d:d1:55:4c:57:ed:b8:cf:7c:
33:61:0c:f5:7c:a7:ac:f5:79:f7:6e:2c:af:e0:3c:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8B:2D:F7:FC:55:34:EA:C1:03:7E:6E:3D:A1:EC:99:BC:67:04:24
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:82:19:2b:d9:b3:5a:8c:89:f5:4d:8e:f9:03:fa:47:a4:6b:
cb:9a:76:b0:22:6b:27:e4:64:c4:1d:be:09:27:3f:a6:22:73:
7b:95:e9:e6:da:54:f3:38:35:9e:af:84:7b:92:0c:bb:25:ac:
ad:7a:49:ab:60:67:21:ba:56:c0:3e:66:19:9b:6a:79:64:40:
51:20:9a:48:0c:69:83:59:73:22:6d:e6:2c:bb:12:b1:08:31:
b7:a0:a8:53:0b:7e:16:5f:70:c9:f4:9c:ee:b3:93:bd:4b:23:
2f:5d:c0:3c:b7:14:0d:b9:14:33:43:80:a3:93:c9:04:08:8f:
91:2e:dc:22:ea:85:37:5d:6e:c2:57:75:db:e2:7b:d9:2c:4a:
f7:e7:4b:55:b7:00:93:62:52:9a:f0:ed:fb:75:24:a4:8e:da:
e8:3e:ce:6e:56:80:8d:2c:a9:ae:50:af:a3:07:b8:91:3d:b5:
d1:6e:bf:a3:0c:8e:93:c4:05:c2:bf:17:8d:ef:86:a3:0d:8c:
16:51:aa:d9:19:c9:6f:35:57:47:f9:d0:e2:59:f5:46:c9:81:
87:42:78:a0:2e:3d:25:be:ae:d9:f0:00:52:dd:4e:9f:73:21:
5c:d1:5a:e0:8c:a0:23:ad:84:78:71:06:12:37:2d:7f:08:24:
b0:1b:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:04:18 2026 by rpki-client