Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File: BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier: CG4Ls28twTIMIUHaWpYWYBlGrtBN5M75U3AYWP4vqhg=
Subject key identifier: AB:50:95:43:2B:B1:20:94:74:74:C2:04:7A:56:D5:CD:D3:B0:13:6B
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 019CAA8F874B694A8BD513F40BFFECDE5AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number: 1280
Signing time: Sun 01 Mar 2026 18:00:58 +0000
Manifest this update: Sun 01 Mar 2026 18:00:58 +0000
Manifest next update: Mon 02 Mar 2026 18:00:58 +0000
Files and hashes: 1: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: 3XTMPu6O0wrNigwoHpR39gGOpuLmj/Ixz3SojyySsIs=)
2: DAk9scQvo5DMV_VlSztOmztoUsk.roa (hash: LbZH4yFltHGub7MlaORytCaFKFzBncecl1qi4I5mXh8=)
3: KedsxwMx1vS4wxET3Dft1ZVYZdM.roa (hash: absKcImfV1TnjcpSLnLKauDQBXXCFX2CsdZyDNeGTWY=)
4: gFPtY840cLMHPIAm8CMRVd0tx6Y.roa (hash: JaE0xay3++fm7hhQzeyY7hTKvCUzMEL4kuE9EKN5pjk=)
5: wMacMmZmC6K_Z3E-FK6eIoDMt20.roa (hash: hMurJd6LHvL4x1id8j/j+B6VkNrcZEazX5VFQz1CkR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:87:4b:69:4a:8b:d5:13:f4:0b:ff:ec:de:5a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Mar 1 18:00:58 2026 GMT
Not After : Mar 2 18:00:58 2026 GMT
Subject: CN=ab5095432bb120947474c2047a56d5cdd3b0136b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:e9:e2:10:7a:7c:0b:92:c7:61:15:27:8c:
38:43:9a:ae:10:20:08:1e:39:2d:ff:85:32:d4:d7:
b1:e6:e1:fa:87:77:34:e7:bb:9b:d0:9a:13:87:58:
0f:f2:84:03:2f:37:e7:36:eb:df:ec:1a:48:75:48:
74:e7:64:b0:4e:d8:7d:14:d9:52:a1:72:bc:36:52:
14:c4:0c:4d:0c:a8:58:29:cd:7b:e0:6a:56:53:24:
a7:21:71:46:66:d0:ca:c1:f5:1b:63:f4:d0:f1:8e:
4a:7b:37:53:0d:78:ff:7c:84:ad:c8:ba:d6:ec:ca:
5a:ac:30:b9:cf:0b:35:6b:95:6d:2b:c5:b5:5d:63:
2d:05:1a:5c:55:6b:bc:2b:77:d0:6c:82:61:f9:41:
a8:98:fd:d3:86:f7:9a:1d:88:47:14:78:bc:b1:20:
68:8b:4b:01:06:9e:cc:73:ce:49:72:8c:1a:63:64:
09:21:6b:57:65:4e:03:de:2a:89:8b:63:06:57:cf:
89:dd:5f:92:ec:5e:83:08:f3:ce:23:8f:c8:c3:1a:
6e:f1:42:f1:9b:e6:ff:4d:74:96:ac:42:2a:85:05:
6d:d8:15:d7:83:27:4a:c5:f1:89:02:63:0f:c2:f5:
33:75:f3:ed:f3:f7:8a:be:c8:fa:29:b6:cf:e1:98:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:50:95:43:2B:B1:20:94:74:74:C2:04:7A:56:D5:CD:D3:B0:13:6B
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e7:de:57:be:d5:69:82:f0:f7:8f:0d:f7:b0:7a:d0:26:00:
ae:92:f0:da:ae:7e:16:d5:38:1a:be:d0:c8:4f:39:3a:73:af:
d9:96:c9:d9:92:e4:d3:8b:7c:d6:0c:31:03:de:fd:92:5b:8a:
c5:ae:48:47:18:48:f0:b5:c6:b2:06:e1:a9:b0:b6:5d:98:76:
94:23:81:9a:64:b9:e3:0d:46:f7:55:47:b7:92:0a:9a:4d:15:
9e:36:db:29:12:fc:5b:8b:9e:5a:04:73:58:0c:57:78:35:c1:
43:82:60:94:5c:97:70:ab:1d:3f:ac:28:72:ab:39:52:c6:62:
81:9c:cc:9e:bb:27:90:57:f5:33:4c:1b:60:42:93:0c:69:23:
88:08:d8:e8:e1:07:f2:bd:ac:ae:bf:57:e1:ce:8b:7e:a9:cc:
a1:35:dc:cb:06:d9:5c:61:32:a8:f9:51:0a:01:68:26:73:f2:
5f:54:2e:fc:f3:7c:e5:f4:ba:d5:f2:3f:db:bc:85:90:3b:df:
d1:2c:63:e1:88:cb:00:3a:f7:ba:1d:86:1d:33:46:59:41:90:
cb:f0:55:c8:54:f8:3c:17:a4:4b:a7:59:20:d7:c9:bf:eb:c3:
4e:a8:5b:ef:d6:97:ae:73:ee:80:67:f8:34:01:08:3c:53:98:
56:4f:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:02 2026 by rpki-client