Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: SL5wqnmbKtCk6YLhnuWZpKDk4mRkGs+sjAU8Mwp4cWg=
Subject key identifier: C2:2E:76:58:6B:4C:19:1A:CA:33:A3:EA:E8:78:31:41:29:30:62:FA
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 019D284DC6E8EA48A3E48A42B67C593018A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0C73
Signing time: Thu 26 Mar 2026 04:01:18 +0000
Manifest this update: Thu 26 Mar 2026 04:01:18 +0000
Manifest next update: Fri 27 Mar 2026 04:01:18 +0000
Files and hashes: 1: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: QUdKTudA6KigTi1kSGevExCcdigB3pOTYcDvn07uXNI=)
2: F4o9chBhcKIMOIAtTun2pROHlBg.roa (hash: +agk1DW6tWQwffLIyWmvkpOAgJSFY7/mjSBbgvZfRFk=)
3: tLBl5sqYIORcYxoiPAGpkSvAEb0.roa (hash: GMSHalNloa4MLmQuNKJAMYyesz8tlVOh/OMa6p0O3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c6:e8:ea:48:a3:e4:8a:42:b6:7c:59:30:18:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Mar 26 04:01:18 2026 GMT
Not After : Mar 27 04:01:18 2026 GMT
Subject: CN=c22e76586b4c191aca33a3eae8783141293062fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:09:7f:37:de:63:a5:48:2f:84:17:c4:36:
af:ed:41:d5:1c:be:b7:c6:f9:e7:db:d6:f5:be:ab:
78:08:ac:cb:6a:0f:93:87:2d:20:7d:9b:07:fd:7f:
1f:66:29:e0:5e:71:f3:b1:6a:dd:69:e4:34:ca:93:
7f:6c:6e:fe:80:11:6d:a5:63:25:5b:b8:0f:6b:9f:
c8:3b:6f:a0:bb:77:a1:e3:f5:fa:d0:5e:d9:9b:ad:
f8:11:ae:ec:d4:22:73:53:c0:7c:64:98:15:a9:ab:
9a:af:e9:bd:21:22:a9:69:52:4a:eb:62:24:9d:0a:
a9:dc:92:94:6d:4c:3d:2c:fb:11:c0:07:da:9b:21:
f5:b6:76:4f:16:18:a1:5e:a7:d1:52:6b:b8:98:07:
b0:68:c4:20:3a:f5:73:1a:59:9e:f8:c1:53:c9:95:
dd:8c:23:17:49:64:5a:6c:04:a0:2e:dc:03:1f:8f:
e4:e6:e6:b0:65:2f:90:35:c3:6b:72:61:1e:a5:46:
7c:ae:29:10:38:fc:ef:73:95:2c:f1:2c:18:29:d7:
bb:b1:53:13:55:57:39:55:42:96:94:27:79:8b:86:
bf:8f:1c:23:46:c2:89:95:b7:03:f9:fa:8d:7b:a8:
1d:07:09:18:2e:60:8e:69:cc:1e:09:17:74:7f:40:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2E:76:58:6B:4C:19:1A:CA:33:A3:EA:E8:78:31:41:29:30:62:FA
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ed:b8:b3:88:12:d0:9e:f4:05:d7:86:55:4b:ca:97:f5:1a:
71:3b:71:f4:7c:d6:11:36:04:50:53:6e:73:a2:bf:48:55:1b:
87:e2:8d:a0:34:bc:63:72:09:4e:2d:cc:80:1a:ba:a1:20:e0:
8a:da:1f:e1:65:46:ed:5a:5e:26:aa:6d:76:d9:1d:17:bf:1c:
0f:aa:af:be:07:3f:59:a5:a4:8f:27:c7:d4:ed:58:c6:fe:fd:
5c:bd:36:3b:e8:36:9c:0e:21:d2:db:2b:82:da:02:f0:ac:ce:
57:74:ca:27:b9:f5:20:d7:28:a1:97:a6:ce:8c:c1:96:17:b1:
93:8e:be:28:02:9d:bd:1d:ef:ea:cd:4f:23:3b:96:06:d1:30:
91:99:27:a0:dc:2e:5b:23:c7:b0:a2:bf:54:17:31:aa:fd:fb:
e7:24:1d:e2:28:35:ff:88:e2:a3:e7:3e:00:1d:12:d5:b2:f0:
37:29:54:94:fa:f0:a0:a0:5e:20:65:a5:50:47:74:83:94:29:
4c:39:c9:fd:7f:b9:2f:fe:5c:c8:07:27:e4:3d:85:d8:12:bc:
07:54:75:c7:71:5f:1e:fb:91:bc:a8:dc:98:e1:28:f3:eb:64:
67:d7:5a:6f:5b:77:32:fb:24:5c:d8:7e:8a:e7:9b:c3:18:4a:
00:cd:ef:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTcbo6kij5IpCtnxZMBihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmI4NjQ5NjllOTY4MDc2NDg5OTAxNWUxNjNlY2U3N2Ji
NGNiNzYwHhcNMjYwMzI2MDQwMTE4WhcNMjYwMzI3MDQwMTE4WjAzMTEwLwYDVQQD
EyhjMjJlNzY1ODZiNGMxOTFhY2EzM2EzZWFlODc4MzE0MTI5MzA2MmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS8JfzfeY6VIL4QXxDav7UHVHL63
xvnn29b1vqt4CKzLag+Thy0gfZsH/X8fZingXnHzsWrdaeQ0ypN/bG7+gBFtpWMl
W7gPa5/IO2+gu3eh4/X60F7Zm634Ea7s1CJzU8B8ZJgVqauar+m9ISKpaVJK62Ik
nQqp3JKUbUw9LPsRwAfamyH1tnZPFhihXqfRUmu4mAewaMQgOvVzGlme+MFTyZXd
jCMXSWRabASgLtwDH4/k5uawZS+QNcNrcmEepUZ8rikQOPzvc5Us8SwYKde7sVMT
VVc5VUKWlCd5i4a/jxwjRsKJlbcD+fqNe6gdBwkYLmCOacweCRd0f0Dh4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIudlhrTBkayjOj6uh4MUEpMGL6MB8GA1UdIwQY
MBaAFAUrhklp6WgHZImQFeFj7Od7tMt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUt
Njk3MGVjZDlhNjEwLzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUtNjk3MGVjZDlhNjEw
LzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde24s4gS
0J70BdeGVUvKl/UacTtx9HzWETYEUFNuc6K/SFUbh+KNoDS8Y3IJTi3MgBq6oSDg
itof4WVG7VpeJqptdtkdF78cD6qvvgc/WaWkjyfH1O1Yxv79XL02O+g2nA4h0tsr
gtoC8KzOV3TKJ7n1INcooZemzozBlhexk46+KAKdvR3v6s1PIzuWBtEwkZknoNwu
WyPHsKK/VBcxqv375yQd4ig1/4jio+c+AB0S1bLwNylUlPrwoKBeIGWlUEd0g5Qp
TDnJ/X+5L/5cyAcn5D2F2BK8B1R1x3FfHvuRvKjcmOEo8+tkZ9dab1t3MvskXNh+
iuebwxhKAM3vWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:00 2026 by rpki-client