Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: yIanfzNcHdrIDWFbA0uFiwbBYFccbWKctuDetlzTQh0=
Subject key identifier: 08:83:BB:DB:94:F4:61:D8:11:7E:CD:C2:61:BA:7A:DF:03:6D:A1:35
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 019E1D90D1E07BCB4624B590D540EF4CF90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0CF2
Signing time: Tue 12 May 2026 19:01:30 +0000
Manifest this update: Tue 12 May 2026 19:01:30 +0000
Manifest next update: Wed 13 May 2026 19:01:30 +0000
Files and hashes: 1: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: GmFQiuXF1UxXmEiZ8kcfNMbbafE04vnlv+kfGyMzB1U=)
2: F4o9chBhcKIMOIAtTun2pROHlBg.roa (hash: +agk1DW6tWQwffLIyWmvkpOAgJSFY7/mjSBbgvZfRFk=)
3: tLBl5sqYIORcYxoiPAGpkSvAEb0.roa (hash: GMSHalNloa4MLmQuNKJAMYyesz8tlVOh/OMa6p0O3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d1:e0:7b:cb:46:24:b5:90:d5:40:ef:4c:f9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: May 12 19:01:30 2026 GMT
Not After : May 13 19:01:30 2026 GMT
Subject: CN=0883bbdb94f461d8117ecdc261ba7adf036da135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b3:ce:51:2b:ba:e3:5c:f5:08:36:a2:e9:56:
ca:5e:ce:56:43:d4:51:25:7d:8e:d8:59:91:d3:6f:
ae:a0:05:6e:b5:46:82:eb:0f:5e:47:ad:1d:5f:fe:
86:91:d1:9f:0d:8a:06:fa:02:fd:25:22:3a:c7:cf:
ca:c1:17:70:54:35:b7:5b:29:3e:fd:e3:81:6e:55:
f1:04:0e:46:bb:31:fe:12:06:c8:26:45:ce:10:d0:
4e:ac:64:2c:9f:ea:d5:d8:d8:ed:13:a7:a3:1a:d7:
33:26:38:6b:5b:8a:fa:8a:81:e1:64:c9:25:f2:cd:
95:db:1b:a6:82:87:44:01:4c:fb:29:bd:72:be:53:
b3:61:92:79:9c:63:4f:c9:11:37:f3:fc:6c:9e:0b:
21:36:7a:e2:83:c5:b5:15:f5:ed:ce:2c:7c:77:d7:
7a:8c:64:a7:f6:54:f2:e4:48:f7:e2:ba:4a:09:4e:
6f:94:99:ad:88:28:02:6b:02:f3:84:05:17:6f:f2:
80:c9:31:ec:ac:bd:2d:63:8b:b3:96:aa:c7:1b:20:
a2:cf:53:87:d6:da:42:46:fb:94:61:1d:ec:a5:54:
3d:6d:10:79:80:10:60:62:a2:40:8c:d0:ff:8f:8d:
92:e4:52:94:d0:07:df:18:5b:80:4c:ad:b2:cb:4e:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:BB:DB:94:F4:61:D8:11:7E:CD:C2:61:BA:7A:DF:03:6D:A1:35
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5b:82:d2:5b:eb:ff:d4:0b:ef:c5:8a:f5:6f:b3:5d:21:2a:
b0:78:7d:57:e8:f6:4a:44:ac:4e:4e:b7:46:75:55:91:01:87:
5b:d2:b4:99:dd:fa:4e:07:a7:e6:d3:8b:1a:61:e8:f5:0f:d3:
06:54:04:eb:49:a2:cd:51:57:2c:d3:ab:a5:d3:e6:18:90:df:
39:0a:cd:eb:14:95:44:b3:4f:c7:80:f6:b1:47:cb:0f:7a:21:
7a:5f:b5:85:de:15:19:b0:73:18:9d:3a:d6:b0:aa:13:98:bd:
b7:66:46:27:0f:56:13:95:05:53:30:c7:b8:7a:b7:7a:f5:06:
b9:5e:1d:71:b9:63:20:38:a4:73:d8:52:32:5d:95:65:79:c3:
9f:d1:cd:2a:7e:25:4b:b9:db:34:3d:e4:2e:65:bb:78:0a:d2:
15:db:98:9a:59:fd:bb:2d:8c:38:88:b0:fe:cb:1a:c5:7b:32:
74:59:7c:b9:90:b4:dd:50:35:c7:fd:3f:93:7f:dd:e4:ec:a5:
26:91:41:8d:5f:8b:0e:a5:d1:ad:d3:2a:b8:d6:d1:4f:b5:d1:
dd:43:36:50:92:db:78:a5:08:07:73:7d:af:36:33:cb:14:50:
0c:4c:f6:d3:77:ed:7e:fd:10:e8:a7:88:2d:a2:4c:25:bb:4e:
30:53:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:45 2026 by rpki-client