Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: U/LVV4hUNgJqhORGjnPge5cE2rD6/aG2l7TIrPa5hQ8=
Subject key identifier: 9D:E6:EF:DA:C7:C3:FC:E2:FE:E2:97:A4:31:04:06:9A:2B:6C:2E:93
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 019E1D5980F486E7A66A0F2DBBA04E3DD0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 097D
Signing time: Tue 12 May 2026 18:01:05 +0000
Manifest this update: Tue 12 May 2026 18:01:05 +0000
Manifest next update: Wed 13 May 2026 18:01:05 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: pBU1E3V9C4oE06N832Pk5LIVJevdVpU4bMCdogjGNQY=)
2: NBGlz4BOwm_Rb4kwh-h4UA65oDk.roa (hash: Ugv5nwQuiMqwOwqv6jAyXgwzxe6xlFAAFYW63xYA81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:80:f4:86:e7:a6:6a:0f:2d:bb:a0:4e:3d:d0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: May 12 18:01:05 2026 GMT
Not After : May 13 18:01:05 2026 GMT
Subject: CN=9de6efdac7c3fce2fee297a43104069a2b6c2e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:1a:38:16:0e:da:10:86:79:10:f3:72:61:
1f:f2:d3:91:ba:ea:cc:a2:ec:ee:18:53:e7:f7:3b:
13:19:d9:9e:e6:15:c8:a1:2b:20:20:da:84:f0:70:
04:c2:3d:1c:4a:c0:62:65:3a:1c:85:8d:03:52:95:
82:9b:5b:ec:fe:94:73:18:c8:20:04:fd:c5:83:54:
9d:13:75:41:07:5d:9f:05:fd:ad:a1:32:39:f8:19:
43:a5:fd:73:59:8d:e7:c1:22:a7:8c:ed:16:5d:dc:
8d:4b:4d:9b:a0:05:19:c3:47:03:d6:de:91:51:e6:
74:d8:18:de:b8:d5:35:fe:79:a2:cd:10:2a:f4:fe:
9b:1a:6f:53:ec:93:ba:36:3b:11:a8:0d:1a:54:f3:
4c:82:22:b5:ad:63:8a:ae:3f:d3:44:d1:94:2a:b1:
09:f3:5b:95:82:0f:f9:ab:e3:44:0a:10:b3:db:59:
51:0b:44:bc:dc:c6:10:0c:bc:29:e7:48:2c:e0:20:
f9:84:27:41:e0:00:c6:f5:d4:ba:5c:a0:f0:cc:75:
66:94:d6:ca:5d:d1:56:e0:6c:fa:15:92:49:51:29:
42:a1:e1:fd:c3:f1:b2:18:31:cf:50:97:43:bf:d9:
55:b7:a9:79:15:77:b9:72:20:e2:3f:7d:cb:78:d0:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E6:EF:DA:C7:C3:FC:E2:FE:E2:97:A4:31:04:06:9A:2B:6C:2E:93
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:31:2d:49:b1:57:8b:ea:be:53:4c:49:0c:5f:87:bf:94:42:
28:72:0e:0f:9f:db:70:a4:87:34:ea:7b:c8:ec:28:a7:4c:a2:
ab:31:6d:f8:bb:26:36:f1:24:b9:5b:f1:60:de:fd:18:ca:37:
8d:1d:ca:a7:7a:ef:cd:70:cb:86:92:33:9f:4c:f7:2b:c7:37:
81:e8:9d:9d:12:6a:6c:03:e3:fe:60:ff:2a:3e:92:39:4b:6a:
21:b4:11:20:84:ee:d9:56:a9:6a:8a:bf:e1:4f:fd:9f:71:f1:
77:fb:98:5a:13:c7:11:ea:69:1d:9a:67:12:e4:4f:c7:12:43:
95:1e:64:c0:88:7f:a9:42:8a:44:ea:44:39:20:2b:e7:9a:f8:
63:1b:8a:9e:e3:89:f2:40:0c:94:a7:f7:69:96:08:01:85:a0:
07:14:14:36:48:86:23:d1:27:45:6a:d1:d6:69:d1:3b:89:ba:
cf:83:a1:e5:20:fb:29:bd:25:cb:9d:40:e7:42:81:7a:80:78:
63:0e:3a:7f:07:f9:e4:fa:6d:4c:11:b9:ce:ef:7a:92:16:0d:
4c:cb:33:5b:52:13:d2:c7:b5:f3:b5:1c:c2:bf:1a:e0:eb:1d:
91:6e:7f:ef:dc:34:6a:2b:7e:3f:32:e1:b1:11:3a:50:63:6b:
c4:d8:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:08 2026 by rpki-client