Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier: lVdW0Us8b6K1LpkdZXEHUoqQC75yLDD4cVO0RdI4NN0=
Subject key identifier: 65:8B:81:BC:6E:55:78:33:1C:53:55:28:9C:C2:71:15:DA:0E:44:3D
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer: /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial: 374060E3C01B6BC121C94DD537EF476CCC1C8B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number: 5C
Signing time: Sun 01 Mar 2026 06:12:55 +0000
Manifest this update: Sun 01 Mar 2026 06:07:55 +0000
Manifest next update: Mon 02 Mar 2026 07:27:55 +0000
Files and hashes: 1: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: Hw4a+TLj093CjbEZ3x8sgvW32BVuc2QBWzptjF0y4/A=)
2: AS210352.asa (hash: xQU1t0L4lf4kZ7muxCNpiJ2Ra2Jj9OCD7jPbIOBdEQk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:40:60:e3:c0:1b:6b:c1:21:c9:4d:d5:37:ef:47:6c:cc:1c:8b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Validity
Not Before: Mar 1 06:07:55 2026 GMT
Not After : Mar 2 07:27:55 2026 GMT
Subject: CN=658B81BC6E5578331C5355289CC27115DA0E443D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:77:44:87:d7:46:5d:d6:a0:9c:e2:7f:ce:
86:4b:52:04:55:d2:f4:28:f2:5d:6b:42:05:36:67:
7c:88:87:36:05:97:7e:48:14:7e:a6:f3:83:42:c2:
2f:91:b6:6e:2a:2d:7d:9d:90:e6:46:c6:17:ba:ac:
71:1b:f1:94:00:f5:fb:3f:83:77:ee:ce:5c:5b:4f:
76:e7:0e:5f:1a:7b:12:29:a9:ba:78:50:d6:e9:31:
de:99:2b:76:cf:3d:f3:3c:52:b8:17:12:2c:bb:5b:
e8:c6:71:3b:5d:bb:ec:7d:c1:b1:22:51:93:e9:0b:
65:1a:fd:2e:be:6e:48:cd:32:dd:86:1d:50:64:f8:
03:df:ec:cf:7f:af:5f:8c:3c:6c:b1:49:50:3c:4c:
ad:a8:41:df:92:56:55:a8:9e:ce:13:a0:ca:de:72:
8d:3b:21:07:74:69:39:a4:f9:05:0a:20:fa:b6:23:
bd:07:88:1e:15:70:65:55:67:70:9c:48:6e:ae:d8:
a9:2c:25:0d:07:5f:a7:e6:1d:79:aa:92:a6:41:29:
25:8c:45:94:1a:60:f2:cf:d7:be:36:94:cc:70:5d:
87:7d:60:8f:b1:6f:35:9b:90:43:27:71:9a:a9:28:
ea:74:a0:78:5d:b8:18:9f:7c:99:1f:f5:cb:43:49:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8B:81:BC:6E:55:78:33:1C:53:55:28:9C:C2:71:15:DA:0E:44:3D
X509v3 Authority Key Identifier:
keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:d3:08:f5:60:78:f3:d8:0e:21:2f:7b:f7:58:3f:f8:c4:
d2:bf:7a:65:91:86:88:ed:14:fc:60:e3:8f:f4:71:7e:42:0e:
14:e2:92:50:3a:c3:b0:83:fe:24:3e:89:eb:8c:53:10:76:2c:
84:d5:f5:17:a7:9f:46:49:8a:38:ee:e4:82:3d:89:78:89:7a:
e5:a1:10:1c:0f:77:4b:a0:14:89:ff:4f:59:fa:8f:7f:19:7f:
1e:8c:2d:11:6c:38:2f:55:cf:c9:04:7e:b5:46:f4:19:a5:ed:
45:4f:f6:86:51:a1:a6:b1:3c:29:a1:d9:fe:25:27:1f:e3:04:
a9:63:89:4e:c6:9b:ff:74:3b:c2:c3:ee:fc:11:fb:6e:21:05:
44:10:a1:31:a5:7c:95:b1:83:5d:cd:c7:95:27:d3:75:6e:95:
6f:c0:8e:dd:10:db:51:07:f6:de:5a:77:c8:ab:05:8b:0f:16:
2a:bc:c7:c9:ae:00:7e:b9:5a:2e:81:ed:9b:fc:80:a5:5b:6c:
7d:75:ae:ef:41:55:cb:d2:3f:4d:e1:d0:b9:93:af:48:fa:b4:
36:2e:df:e0:a7:a8:13:40:ba:21:52:64:17:73:3c:45:48:db:
d3:7b:b1:ac:5c:de:62:51:78:be:11:9a:b4:44:de:c2:89:17:
36:08:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:46 2026 by rpki-client