Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: pWUtk2CBQzmOmxuEkov1dvUWa27L8IlVGPEO+WdR0lA=
Subject key identifier: D8:59:40:8D:FA:0A:B3:87:98:69:6D:84:21:5B:B5:E8:39:EA:6D:B9
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 019D28169FFCE55F21DF018689DF1B11D73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 08FE
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: weeEynDTvZ7fPba7Plhe/5AgObTqioaeV2G0TAAVy9c=)
2: NBGlz4BOwm_Rb4kwh-h4UA65oDk.roa (hash: Ugv5nwQuiMqwOwqv6jAyXgwzxe6xlFAAFYW63xYA81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9f:fc:e5:5f:21:df:01:86:89:df:1b:11:d7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=d859408dfa0ab38798696d84215bb5e839ea6db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:6f:a1:50:cc:20:0a:2d:59:b3:16:2c:66:
4c:8e:1c:50:65:12:d9:56:09:46:f2:47:e4:f3:58:
d3:b0:86:76:6b:f7:1b:41:37:be:73:db:b7:44:e4:
ef:7f:ce:cd:f7:9e:01:24:9e:6c:1b:90:71:df:ab:
8c:54:97:0e:4c:26:54:a4:3a:1e:b5:7d:01:a5:71:
42:54:49:54:ff:68:52:df:5c:c7:88:7c:ac:98:62:
2b:5b:1e:fc:62:e3:11:e4:dc:7f:f2:9f:b2:4a:a0:
fa:73:dd:6f:df:fd:7a:a6:50:c4:ae:a1:f1:2b:ae:
68:8c:59:ea:de:79:96:56:6b:b5:65:89:1d:14:32:
36:49:c0:2b:85:b3:39:7c:b3:6b:f5:ab:5d:23:c9:
e1:fa:55:e2:8b:5d:d7:84:1a:80:4a:4d:1a:73:06:
9e:1c:4d:2b:89:b8:9a:67:4b:ad:36:18:ba:e1:ed:
3f:14:fb:b5:03:fe:8c:3a:f3:36:ec:ac:09:64:55:
77:b7:72:07:3b:d1:40:2c:43:5b:22:99:b8:e3:d5:
f4:bd:3a:9b:7e:e7:13:3b:d9:ab:db:87:5b:16:99:
48:5c:26:12:e4:76:b1:7c:17:50:6c:4b:e4:ab:86:
b3:9d:bf:d9:2c:f9:19:f4:64:6e:12:90:e2:53:d0:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:40:8D:FA:0A:B3:87:98:69:6D:84:21:5B:B5:E8:39:EA:6D:B9
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0f:84:ed:fc:69:43:3d:61:cd:cc:8b:76:de:9d:1a:fd:72:
30:47:d6:83:4a:22:5d:86:4c:13:87:5d:e0:15:2b:62:76:5b:
cc:b9:f9:0a:0b:b9:ba:6f:84:52:ab:23:36:74:45:9a:60:5b:
d8:2d:dc:98:c8:a8:d4:ad:dd:aa:70:09:47:08:6d:b5:47:15:
5a:65:cd:9d:03:f3:85:5c:72:24:75:b1:3f:12:20:10:67:8e:
4d:26:f7:2d:fd:99:51:30:ab:6e:ae:7a:0c:3d:75:b1:39:7e:
49:0f:04:22:10:6e:a0:78:f0:d7:ce:dd:a1:5b:54:3f:71:4a:
2d:e6:53:63:4c:65:26:f1:aa:f0:35:54:e2:50:a9:3b:04:b6:
0e:f9:06:9a:2c:f7:12:06:a1:ac:73:30:56:e9:18:19:0b:12:
6a:dc:39:89:a9:cf:7a:aa:0b:ae:af:c4:83:7d:d1:e0:31:33:
55:97:0b:69:c1:ee:04:07:58:1d:a9:c5:fd:c3:6e:30:b3:85:
25:7f:d6:c5:f4:2c:d2:5d:43:ea:f5:f3:b5:73:ec:f2:9b:e5:
d0:9d:90:b2:1e:45:26:1d:a0:03:7f:b9:fd:0c:c6:9e:7e:21:
88:fd:30:53:54:df:28:bb:c5:45:41:e4:bb:e1:93:74:8c:59:
2a:a1:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:59 2026 by rpki-client