Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: Xgc+pqN9grkxfh6HdFElFBA+m6yq7LRaqoMnUqo+MKU=
Subject key identifier: 92:0A:1A:60:C1:9A:71:93:3D:EB:91:28:85:86:2A:79:2A:1B:E4:CE
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 01A0D5A6B94DE6911C3DC7EB0665A50C151B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 0CE8
Signing time: Thu 24 Sep 2026 23:01:08 +0000
Manifest this update: Thu 24 Sep 2026 23:01:08 +0000
Manifest next update: Fri 25 Sep 2026 23:01:08 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: Q34hiOlKvhD98jXjF9XDHEJ+zV+eXd5zwCADus4u8+s=)
2: wPZBSgFASeM9SaWJvAkRGk-7twQ.roa (hash: R3wosEg+LuaaoBj4e/mPNIMyKN6NLJP5v9wAW4ICOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:b9:4d:e6:91:1c:3d:c7:eb:06:65:a5:0c:15:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Sep 24 23:01:08 2026 GMT
Not After : Sep 25 23:01:08 2026 GMT
Subject: CN=920a1a60c19a71933deb912885862a792a1be4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:a5:0c:ce:e0:86:65:cf:8e:31:bf:68:ac:
b0:c7:7d:4b:b9:fa:02:f2:75:d9:00:70:0f:d7:eb:
a8:c4:36:03:04:14:2b:73:4f:9f:e5:7e:52:45:7e:
16:b7:54:e2:ef:1c:01:3e:8a:a9:61:76:4c:a4:17:
e6:1d:0b:1f:14:65:b1:ab:09:56:ef:3a:df:d6:18:
61:36:e3:79:e8:e5:04:f0:1b:a8:a0:07:13:d9:d4:
b4:08:8c:14:69:85:02:8d:cb:87:63:4d:92:38:92:
d4:bb:58:ea:51:e9:96:b5:ee:8a:38:64:10:8f:6d:
68:d5:26:76:0a:ae:16:c9:38:ae:78:5f:04:27:3b:
fb:92:0b:04:8e:05:2e:0d:bd:9a:0b:97:5d:ba:8d:
9c:ba:1b:4a:55:0f:ed:40:b3:ab:11:b2:f1:d3:fd:
e3:91:c8:68:4f:4e:2c:67:f2:12:09:43:4f:23:1e:
86:37:7c:c9:88:a9:c1:d0:e8:bd:39:fc:b7:2f:3d:
6a:6d:ae:65:a6:9c:9d:d8:71:c8:f4:08:1d:4e:aa:
8d:c9:b4:fa:2e:cb:53:ae:50:1a:fd:57:4a:04:a0:
57:f8:e3:e6:7f:53:8f:e8:d1:ec:70:e0:86:21:f6:
8d:0e:ed:19:42:50:ca:2f:73:0f:5c:a1:6a:5d:5e:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0A:1A:60:C1:9A:71:93:3D:EB:91:28:85:86:2A:79:2A:1B:E4:CE
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fd:32:6a:b4:b4:1e:bf:24:cd:45:3d:40:21:38:66:84:77:
fc:6d:a0:ca:1e:81:56:5f:ea:5f:ec:b6:77:40:9b:5a:76:fb:
66:be:d6:6d:93:b3:a6:37:8b:6e:b6:5c:fe:ae:48:06:58:d1:
d1:b1:4c:15:fd:a1:2d:ee:68:b4:76:08:0d:55:8a:a9:ea:75:
0b:26:5f:26:e8:05:4f:28:39:e8:b8:b2:69:ea:82:d9:f2:ad:
1d:e3:50:6e:1e:9e:38:0b:cf:26:42:62:db:a4:e1:a0:19:50:
1b:c3:fb:6d:89:98:76:32:fc:1e:1d:f3:88:fa:29:b6:e5:f7:
5c:55:2f:62:c3:ac:de:84:7f:df:30:ce:b3:51:6d:2b:b4:67:
41:f1:8b:bc:90:f4:53:6b:1e:2a:2e:1f:a1:40:fc:0b:ce:55:
7b:50:3e:02:57:97:a7:95:76:96:67:77:c4:75:7c:ab:7e:61:
b7:5c:0d:d7:e3:97:83:79:97:10:06:d5:2c:0e:97:e0:60:3f:
81:5d:44:0f:ae:2e:20:21:17:41:80:75:d3:02:9c:bf:3e:11:
c7:f9:88:21:9c:ab:0d:7a:0a:1b:f2:3a:a2:de:a7:ba:63:f8:
47:52:51:af:b1:a7:4b:74:c0:ca:d9:89:dc:8f:3f:fa:8b:35:
ab:6a:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:54:17 2026 by rpki-client