Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: rg3+1mvudSHfgEOjVqEpg4LdU/ZTEBEK16y+EkxxtHA=
Subject key identifier: 34:15:3B:17:5E:B3:43:75:3B:40:91:EB:D3:C0:26:48:4D:89:A1:E4
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 019F902348EE1601D17128D83C3C4A09E306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 0A3D
Signing time: Thu 23 Jul 2026 18:00:59 +0000
Manifest this update: Thu 23 Jul 2026 18:00:59 +0000
Manifest next update: Fri 24 Jul 2026 18:00:59 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: JigveJX7Rw+j8U9WwfreU26mE5Brz8MEiIaNQZmQZYM=)
2: NBGlz4BOwm_Rb4kwh-h4UA65oDk.roa (hash: Ugv5nwQuiMqwOwqv6jAyXgwzxe6xlFAAFYW63xYA81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:48:ee:16:01:d1:71:28:d8:3c:3c:4a:09:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Jul 23 18:00:59 2026 GMT
Not After : Jul 24 18:00:59 2026 GMT
Subject: CN=34153b175eb343753b4091ebd3c026484d89a1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:ef:3c:8d:9e:26:34:ee:89:e4:3e:e8:75:
f1:ef:88:e5:59:c5:34:be:22:ff:ef:80:f5:27:29:
4b:0a:45:94:de:88:88:30:ce:2a:1d:f0:b7:7a:2f:
f0:9f:e2:81:c2:69:c9:f9:1d:f0:2d:c1:56:d8:b6:
42:82:50:ae:b5:85:e6:8b:47:a2:95:80:bc:5f:3f:
4e:d1:6c:5e:df:5c:b4:f4:43:3b:e6:1e:18:40:c5:
51:8c:90:86:b8:46:6b:9c:0b:30:22:9d:83:93:ca:
11:27:88:c2:78:cd:e7:68:f5:cd:d6:82:25:69:9d:
b9:2f:ee:48:40:50:42:c1:3f:cb:7b:2c:d7:d8:5b:
ba:8b:6d:20:53:98:a5:1e:84:6d:31:42:24:cd:48:
97:94:61:91:7d:b8:fb:fd:2e:00:fc:72:85:e1:a6:
b8:ca:dc:19:86:96:2e:42:de:bf:27:6c:de:66:e6:
04:e2:38:fe:eb:01:8a:54:2d:a9:b6:8f:c3:cd:c7:
cb:62:f4:2d:00:b6:55:a3:ca:13:60:17:f0:48:b5:
33:14:6b:a9:dc:5b:81:84:24:9a:4d:6b:75:5b:80:
1a:f8:ff:eb:13:a1:2f:86:64:76:a8:39:55:df:ce:
78:93:21:6f:b7:80:4b:fa:6b:62:8c:18:8d:48:61:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:15:3B:17:5E:B3:43:75:3B:40:91:EB:D3:C0:26:48:4D:89:A1:E4
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:75:3f:53:1f:ee:30:e7:d8:3a:07:b1:cb:07:bb:81:ef:89:
ef:9c:9f:52:f6:e7:a1:c0:e1:0f:5f:bc:62:75:11:e9:78:f4:
cf:4d:6b:8a:d6:56:eb:ce:10:0c:f2:ad:59:af:f3:10:54:63:
e8:e3:27:c9:72:35:a6:67:9d:8f:20:93:96:fb:07:b2:fd:61:
72:96:10:93:20:90:84:ff:55:d0:f5:7d:1a:c0:d2:f4:61:d2:
d4:46:98:b8:93:ef:32:ef:4f:a6:10:2e:10:92:47:07:8f:90:
58:1a:6d:79:61:16:77:a0:66:96:31:0e:1d:a5:15:33:7c:a1:
c7:a2:12:62:48:3d:17:f9:33:e6:97:a8:8c:42:b4:c4:28:c1:
96:77:15:c2:10:78:3c:67:97:bb:b6:65:92:3a:de:fe:2a:9f:
2b:f0:0e:64:c5:31:1b:ea:59:25:f8:d3:e0:1e:75:bb:6a:94:
de:ee:36:79:d9:e6:9a:8e:36:22:df:7f:9c:cf:95:3a:db:2e:
dd:37:bd:9f:b9:03:39:dd:f5:80:75:c3:26:fa:b9:8b:8c:36:
1a:98:30:9a:2a:5d:52:68:23:6a:64:12:3f:1a:62:8f:68:68:
3e:f8:1d:a7:4c:07:6b:98:26:3e:20:dd:a0:6a:ee:72:9d:9b:
1e:97:ce:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QI0juFgHRcSjYPDxKCeMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Yzc0NmNkN2Q0ZGY5NWE2ZDAzY2E5NTU0YTc1NDc2MGQ1
ZTRlMDYwHhcNMjYwNzIzMTgwMDU5WhcNMjYwNzI0MTgwMDU5WjAzMTEwLwYDVQQD
EygzNDE1M2IxNzVlYjM0Mzc1M2I0MDkxZWJkM2MwMjY0ODRkODlhMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOfvPI2eJjTuieQ+6HXx74jlWcU0
viL/74D1JylLCkWU3oiIMM4qHfC3ei/wn+KBwmnJ+R3wLcFW2LZCglCutYXmi0ei
lYC8Xz9O0Wxe31y09EM75h4YQMVRjJCGuEZrnAswIp2Dk8oRJ4jCeM3naPXN1oIl
aZ25L+5IQFBCwT/LeyzX2Fu6i20gU5ilHoRtMUIkzUiXlGGRfbj7/S4A/HKF4aa4
ytwZhpYuQt6/J2zeZuYE4jj+6wGKVC2pto/DzcfLYvQtALZVo8oTYBfwSLUzFGup
3FuBhCSaTWt1W4Aa+P/rE6EvhmR2qDlV3854kyFvt4BL+mtijBiNSGFptQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQVOxdes0N1O0CR69PAJkhNiaHkMB8GA1UdIwQY
MBaAFAbHRs19TflabQPKlVSnVHYNXk4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYt
YjBhZmQ0NWRjZDc4LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYtYjBhZmQ0NWRjZDc4
LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnU/Ux/u
MOfYOgexywe7ge+J75yfUvbnocDhD1+8YnUR6Xj0z01ritZW684QDPKtWa/zEFRj
6OMnyXI1pmedjyCTlvsHsv1hcpYQkyCQhP9V0PV9GsDS9GHS1EaYuJPvMu9PphAu
EJJHB4+QWBpteWEWd6BmljEOHaUVM3yhx6ISYkg9F/kz5peojEK0xCjBlncVwhB4
PGeXu7Zlkjre/iqfK/AOZMUxG+pZJfjT4B51u2qU3u42ednmmo42It9/nM+VOtsu
3Te9n7kDOd31gHXDJvq5i4w2GpgwmipdUmgjamQSPxpij2hoPvgdp0wHa5gmPiDd
oGrucp2bHpfOww==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:53 2026 by rpki-client