
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
File: BSuwH_GcVqEHMvpZj7mdJmWLKco.mft (raw, json)
Hash identifier: jOfkEEF2e1wZEbReR/6bPabM5Kj9Q9jbk6kmCe2zp9k=
Subject key identifier: 45:0B:7A:07:34:A9:45:A0:42:FE:07:89:58:CE:E5:E1:CD:BC:A0:CB
Authority key identifier: 05:2B:B0:1F:F1:9C:56:A1:07:32:FA:59:8F:B9:9D:26:65:8B:29:CA
Certificate issuer: /CN=052bb01ff19c56a10732fa598fb99d26658b29ca
Certificate serial: 019FA8D061BAEE27F1E1DC3BC1DC94B376B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
Manifest number: 35
Signing time: Tue 28 Jul 2026 13:00:56 +0000
Manifest this update: Tue 28 Jul 2026 13:00:56 +0000
Manifest next update: Wed 29 Jul 2026 13:00:56 +0000
Files and hashes: 1: 1dbY8b1XaoIJnbM1BC97LZg7wHE.asa (hash: bMYMUui1JSy4n+++0arKDdQEXe+eGeymL+uWzygFypE=)
2: BSuwH_GcVqEHMvpZj7mdJmWLKco.crl (hash: dNx3lOgrAclKfLo80Xrwfs3ZUK53T5DRyeSEVtYrWDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:61:ba:ee:27:f1:e1:dc:3b:c1:dc:94:b3:76:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052bb01ff19c56a10732fa598fb99d26658b29ca
Validity
Not Before: Jul 28 13:00:56 2026 GMT
Not After : Jul 29 13:00:56 2026 GMT
Subject: CN=450b7a0734a945a042fe078958cee5e1cdbca0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:f5:fe:8e:d4:b9:46:25:54:6e:45:c4:d2:
10:e1:8c:81:e1:99:39:e5:78:a6:af:83:75:d7:4e:
bd:90:ba:b9:14:bb:b9:c6:fe:60:c6:85:31:f0:c7:
62:cb:76:22:3f:3c:d2:04:55:7e:a8:72:f3:fd:a6:
80:f9:dd:e6:36:24:5b:e2:e9:53:ae:c4:12:58:c7:
fb:18:e8:ff:ca:0b:12:c0:84:3c:87:cc:a3:ea:c2:
ff:14:3c:2c:e1:46:1e:3a:5b:90:aa:e9:af:ef:3a:
9d:0f:f6:b0:73:db:a5:11:e9:20:fa:13:10:08:6b:
86:b7:00:d4:38:c5:77:34:7f:02:47:e8:1f:54:ed:
8a:95:fd:0a:40:78:b9:3b:fd:7f:ac:ba:10:39:bb:
36:c0:cc:50:c0:b4:16:85:07:f7:1b:97:3c:aa:68:
06:52:7d:10:82:23:4f:8e:7b:eb:73:3b:5a:08:36:
f8:d9:60:5a:f9:02:ce:eb:6d:50:b0:14:fc:e6:0d:
36:f6:30:b0:21:ae:78:1e:7f:57:6a:e6:53:a1:ee:
72:69:1b:a9:6b:1f:e6:08:a0:21:71:17:8e:46:b5:
bb:6b:d3:06:b2:14:2d:53:95:38:2b:f3:11:a6:3b:
c3:7c:74:a6:1b:47:c4:7d:44:10:b6:32:99:5e:40:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0B:7A:07:34:A9:45:A0:42:FE:07:89:58:CE:E5:E1:CD:BC:A0:CB
X509v3 Authority Key Identifier:
keyid:05:2B:B0:1F:F1:9C:56:A1:07:32:FA:59:8F:B9:9D:26:65:8B:29:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a8:7a:1c:e7:94:53:31:13:49:fd:ae:ff:67:38:ba:0a:40:
f3:eb:de:10:64:6f:b5:d8:4d:a5:1a:40:e5:9c:f6:df:b5:33:
38:5b:a4:c6:5f:0f:09:12:66:a7:84:61:d5:2d:06:b0:a2:0b:
ae:1b:61:4f:6f:c5:85:f4:da:66:dc:28:2e:23:74:ad:ff:4f:
10:d8:c9:96:aa:a7:e4:fe:82:31:95:20:a2:a8:38:d0:2a:56:
f9:a9:cd:31:e5:f0:92:12:ce:ef:4b:58:6c:72:18:8f:7f:20:
3e:a8:ff:89:f3:eb:f4:95:43:15:b4:47:cd:0b:cc:57:83:7c:
da:cf:3b:19:1c:31:bd:e8:6a:4e:02:0c:9e:18:3f:cb:05:e7:
59:d6:1c:24:a6:0d:8a:41:c3:04:80:73:1e:65:66:d2:84:41:
64:97:a3:91:20:89:b0:b3:fb:13:8d:80:ca:68:df:11:5b:dc:
12:1e:29:3c:4e:f0:26:4b:a7:52:7b:ba:05:9c:1b:04:58:40:
50:0c:11:d3:d3:07:e4:41:70:cb:92:a2:0e:16:54:a3:a1:bd:
85:35:1d:ec:31:73:e2:4c:35:d8:0e:2e:6b:c0:a5:98:2c:5e:
e0:d8:87:2f:e0:a0:7f:85:5b:d5:31:cd:5c:12:2d:17:d8:0e:
67:b6:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:47 2026 by rpki-client