Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: hL0T8BJkKvn/iPCbCUUl3bIIKJcJ6JtkhlMQ5z4c50s=
Subject key identifier: 59:13:A8:47:B5:3B:05:50:4A:F1:0D:3A:14:2A:2D:E6:15:2A:89:A8
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 019FAA1A0E546B5492A2726E00ACF533D3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 1407
Signing time: Tue 28 Jul 2026 19:01:02 +0000
Manifest this update: Tue 28 Jul 2026 19:01:02 +0000
Manifest next update: Wed 29 Jul 2026 19:01:02 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: eK0OhixaueAI5Vt1o15OPoLaoQxa5NFVPMJZBSkPLNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:0e:54:6b:54:92:a2:72:6e:00:ac:f5:33:d3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Jul 28 19:01:02 2026 GMT
Not After : Jul 29 19:01:02 2026 GMT
Subject: CN=5913a847b53b05504af10d3a142a2de6152a89a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:eb:9e:28:16:61:24:8c:80:f9:e6:e7:42:
61:6a:d2:2e:2d:ad:ba:5a:db:5d:27:b7:12:cb:2f:
46:ed:3f:34:61:db:fa:a3:fd:09:bb:17:52:41:68:
ec:80:fc:73:8b:b9:7d:eb:50:ab:d2:c8:4a:3d:d7:
fc:8a:f6:0d:18:ab:e8:71:7a:25:40:c9:37:05:16:
d1:cf:0c:f9:b4:59:4c:a0:d4:3d:03:39:38:fe:b7:
40:de:90:95:1b:ef:61:8f:3a:2d:13:50:31:ca:c3:
71:bb:0d:c6:f6:1b:6f:fa:27:b0:f0:0f:38:09:c4:
45:3b:8f:45:80:bf:f2:5f:dd:87:33:23:1d:51:58:
23:14:ae:6d:66:49:c0:da:3c:8a:e9:31:5a:55:bc:
ec:29:50:f5:26:9e:39:9f:bf:ac:bf:90:08:46:fe:
4d:e6:07:64:ee:78:4f:dc:e6:67:d0:0b:83:f6:70:
93:ed:ec:9e:a7:c5:13:15:a0:89:f4:ca:69:29:dc:
63:cb:20:e2:1e:25:de:f2:09:26:5c:43:f1:67:c5:
c6:be:b3:9a:09:c9:e4:06:90:c1:49:13:98:c7:7f:
4c:d9:d7:6d:4d:64:e1:2f:a9:08:43:39:5f:2d:17:
5e:3f:73:4d:9e:13:37:00:a1:9d:bd:e2:99:1b:0e:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:A8:47:B5:3B:05:50:4A:F1:0D:3A:14:2A:2D:E6:15:2A:89:A8
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:40:57:f1:bf:be:e6:30:a8:7e:c3:1c:af:cb:af:00:10:87:
ff:2d:07:7c:1a:cd:aa:1b:40:13:83:af:15:ea:61:ed:77:96:
54:96:76:45:86:14:c5:10:72:d8:bc:ee:f0:f5:60:ae:78:a5:
6a:3d:59:26:74:dd:8a:cb:62:08:d7:c8:18:d6:49:b0:4d:e5:
74:50:60:a8:8e:96:a6:19:e7:bc:96:f1:39:8c:ae:e5:f3:1c:
54:38:2c:aa:b6:6c:85:bb:be:17:2e:0a:99:8c:98:32:b1:57:
9c:a0:67:75:49:c8:f5:a3:3f:97:6a:8c:ce:b8:4d:a2:a4:e8:
30:5c:c2:65:0c:c2:0f:ae:82:3f:53:26:03:88:7c:7f:17:4b:
90:47:b4:b1:72:32:b2:48:30:46:71:50:ee:67:a3:d3:55:f7:
7f:22:cc:31:e0:48:b9:b4:7b:69:a9:3b:c6:01:b5:50:c1:2d:
b7:4b:e4:32:e8:e9:92:71:d5:cf:c7:cd:9a:a5:1d:f9:db:fe:
d6:cd:49:d6:87:1e:0c:88:fd:f2:b0:39:25:59:cd:10:5c:bb:
33:f7:32:48:69:da:27:f5:90:5b:3a:f5:6f:0c:53:ef:54:db:
fd:e3:d5:e4:23:4d:fa:69:dd:eb:0f:81:60:38:19:31:94:68:
fa:ab:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:22 2026 by rpki-client