Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier: N8ctXBbFdOaXAt4SjKs+2D9VnumeWVoPakalQVSzupg=
Subject key identifier: 66:62:F6:A0:45:B6:04:44:1B:46:F1:CB:E2:F5:75:30:2B:EF:BA:71
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer: /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial: 16811D71B91CE5FD3E361027910BA13C6328D1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number: 016E
Signing time: Mon 21 Sep 2026 04:46:50 +0000
Manifest this update: Mon 21 Sep 2026 04:41:50 +0000
Manifest next update: Tue 22 Sep 2026 07:44:50 +0000
Files and hashes: 1: AS210352.asa (hash: WqkTlne3/PzZhS7gktPpiLfhPwbSstLzxT2iS1wyOYc=)
2: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: 8etunHNNr9FSS++M8715tN3NJ4A9X0igHn/RevTpoJ0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:81:1d:71:b9:1c:e5:fd:3e:36:10:27:91:0b:a1:3c:63:28:d1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Validity
Not Before: Sep 21 04:41:50 2026 GMT
Not After : Sep 22 07:44:50 2026 GMT
Subject: CN=6662F6A045B604441B46F1CBE2F575302BEFBA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:50:f2:20:f6:96:9c:a0:b8:e0:58:6a:56:
12:1d:1c:ca:68:a0:5d:7f:0e:25:aa:49:78:d1:f0:
54:f3:b8:de:43:c1:5d:0f:8a:79:ba:ce:0b:ce:4d:
b1:eb:f9:e6:8b:59:c1:ab:2d:3c:83:a8:cb:45:58:
61:b4:b8:c1:e4:18:2d:b5:35:e0:bd:37:14:18:86:
11:69:44:13:e2:fd:06:8a:64:ff:72:98:03:36:8f:
47:8a:4f:ba:a7:01:e4:dd:0a:21:84:66:7e:4d:d7:
ce:ec:7d:b7:d3:92:35:ab:11:03:b1:7b:56:28:d0:
a4:54:d5:d0:aa:51:a9:27:ad:4c:27:11:7e:52:5c:
ab:a3:d1:e1:16:aa:a0:cd:d8:d1:50:4f:f1:36:9c:
1b:80:c7:eb:5c:81:ce:d0:b7:19:fa:a7:e0:a2:d3:
bd:0e:50:82:71:bb:7d:2a:5e:f2:c0:2e:24:14:bf:
14:b0:37:32:53:c0:4b:77:59:0d:b0:2f:28:c3:a2:
ac:8d:c7:f7:ef:e9:e2:1b:ea:93:cb:dd:af:2a:03:
27:83:c0:b6:3e:98:9b:ca:35:55:45:af:6d:8f:53:
26:ac:e6:b8:c7:67:08:38:6a:63:cd:db:74:ab:8e:
00:a4:c5:73:eb:67:36:07:5f:e4:08:d4:0a:6c:86:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:F6:A0:45:B6:04:44:1B:46:F1:CB:E2:F5:75:30:2B:EF:BA:71
X509v3 Authority Key Identifier:
keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2d:91:10:21:33:4b:96:3f:94:53:6c:dd:e9:74:61:4b:b7:
d3:c5:19:e6:8f:be:70:76:86:01:4d:29:3f:bd:3d:9a:2e:99:
3d:22:cc:ca:54:51:88:6a:ec:37:7f:4b:94:a6:52:9d:b7:aa:
29:36:15:9c:6b:57:80:bd:0a:32:54:0d:5f:55:a6:b7:82:03:
53:dd:00:2c:5c:5d:7b:d4:b9:db:10:c6:61:50:87:84:57:87:
b6:7b:2f:26:ec:f8:f3:11:f1:74:06:f8:1d:98:ac:10:7f:1d:
75:d8:e3:5a:87:19:56:b0:50:2e:84:1a:4b:db:ce:59:e5:7d:
c4:40:66:a5:ac:90:48:18:f8:e0:8f:f6:76:a0:5f:7e:54:fe:
91:7d:9a:2c:ab:cf:96:43:7e:70:70:27:b9:21:d2:50:75:8b:
90:10:7d:a5:68:81:85:7e:3d:6c:6d:57:4c:58:7f:0c:3f:39:
50:2d:bd:9b:d2:2a:8a:9d:05:17:c8:34:aa:6c:ae:b3:0e:16:
0b:7f:1c:3e:47:28:fa:28:f5:37:5e:79:7e:09:40:b5:80:b9:
94:84:60:50:42:13:90:dc:f7:e6:ce:e5:50:5e:95:12:d7:92:
43:9b:be:8d:87:c8:c4:46:20:2a:43:a5:29:f9:c9:72:bb:2a:
67:36:e5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:49:26 2026 by rpki-client