Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: ccMhQnTyoGl9xq05XwLPQKlsWmSviS/7ryuGz0caZUQ=
Subject key identifier: 2A:13:14:B1:66:F9:BD:D1:0F:FA:26:EF:A5:FF:CD:73:9E:BD:24:C9
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 019D273AACD15B24C45E8AA3B53323B98549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 0B00
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: BmIG1XDdIAalfPrHrfOi2pO+Bq855srPsMul/bXz1cQ=)
2: wPZBSgFASeM9SaWJvAkRGk-7twQ.roa (hash: R3wosEg+LuaaoBj4e/mPNIMyKN6NLJP5v9wAW4ICOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ac:d1:5b:24:c4:5e:8a:a3:b5:33:23:b9:85:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=2a1314b166f9bdd10ffa26efa5ffcd739ebd24c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:65:0a:6e:c1:55:ba:cc:68:df:03:e8:31:c4:
fc:5a:d9:66:b5:e4:3e:cd:2e:4b:f0:6c:70:b4:13:
82:37:c3:88:58:2d:ab:87:d7:70:ed:f3:f8:11:26:
d7:55:15:6e:b8:25:ee:26:c9:1d:24:be:cd:6a:bc:
33:75:3b:4f:46:ee:55:1f:ed:f9:86:dc:7c:00:fc:
43:35:c5:b6:78:78:fb:1f:ce:c1:0e:4b:5f:af:e1:
a7:a7:2d:3f:4f:9d:2b:4b:f7:c5:c2:8b:1d:eb:9f:
39:44:6c:a8:79:56:4a:24:9f:40:10:38:f8:68:e0:
14:19:88:c1:06:e1:c4:11:ec:8a:2b:03:a2:2f:4c:
43:88:83:93:a6:8d:fe:fd:1c:10:e5:8b:af:1e:13:
59:94:bd:b9:0d:99:7e:66:e8:67:d1:a5:97:44:58:
a3:99:73:7e:17:57:ca:a1:e1:e4:b6:32:7f:9e:5d:
1b:04:0b:af:e0:8f:1b:bf:cb:64:a0:8f:f8:bc:61:
6a:57:91:07:b8:bf:a1:ba:89:1a:19:ed:c0:a6:88:
28:fe:64:8a:c9:1c:0b:3a:ab:4b:07:8b:9b:0c:bc:
5f:95:30:db:a2:8e:0a:b2:45:7f:bf:d5:66:c8:4e:
b8:2e:90:80:69:f6:bd:fd:c8:d0:22:bc:d9:8b:d9:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:13:14:B1:66:F9:BD:D1:0F:FA:26:EF:A5:FF:CD:73:9E:BD:24:C9
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:67:4e:ec:42:64:5d:1c:ef:36:27:3e:ad:2c:79:73:57:5d:
f5:54:31:4a:48:78:7b:96:38:06:0e:48:2f:a7:b4:fc:fa:71:
85:6a:2f:b2:46:11:41:b6:0e:52:33:4a:cf:85:36:93:9d:e2:
82:9c:9d:38:83:16:c0:2e:b1:bd:1d:ac:6e:83:60:bb:0c:99:
06:31:df:a6:4a:9d:41:9d:69:42:8c:bc:6e:44:97:3a:f8:0d:
06:91:c4:38:e6:b9:da:c2:7e:42:b7:63:0f:31:6d:9a:18:e9:
bf:98:c2:a4:71:a3:de:9b:59:96:4f:13:e8:ad:26:e6:a2:ea:
0c:84:44:5a:7b:25:fa:58:67:3f:7b:7a:23:81:9a:3c:de:f4:
07:69:dd:80:58:8b:96:da:ac:92:26:0d:b6:3b:cf:83:88:66:
03:d9:6b:a8:3f:89:a9:03:e6:46:5e:b1:38:68:d2:9a:4c:4b:
5b:9f:ef:dd:58:2b:f3:0d:e3:de:26:6d:aa:e7:fc:d7:a6:86:
ef:a5:f5:85:f7:20:14:fa:6b:e6:40:a5:c8:ef:84:15:7b:0a:
66:de:3a:fe:7b:d4:6e:4a:84:a9:3e:70:8e:78:89:29:91:50:
1e:17:1f:36:76:c4:dc:60:75:e3:10:18:1a:26:1a:27:b2:36:
9b:69:03:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:26 2026 by rpki-client