Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: b8eW1dhtIkru80xAl7q881PDyWrb3WlkWrPXAvg5a3Q=
Subject key identifier: 29:D4:16:0A:C5:CB:43:21:A6:BB:59:75:9B:1F:5E:BA:48:51:AF:86
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 01A0D6B9F47C283F6D3229D3AAAABF607EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0E5B
Signing time: Fri 25 Sep 2026 04:01:46 +0000
Manifest this update: Fri 25 Sep 2026 04:01:46 +0000
Manifest next update: Sat 26 Sep 2026 04:01:46 +0000
Files and hashes: 1: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: J1/t3bheZvz5bH1BKTi7vEU3VBOvC+mARZF+oJ3HeJM=)
2: F4o9chBhcKIMOIAtTun2pROHlBg.roa (hash: +agk1DW6tWQwffLIyWmvkpOAgJSFY7/mjSBbgvZfRFk=)
3: tLBl5sqYIORcYxoiPAGpkSvAEb0.roa (hash: GMSHalNloa4MLmQuNKJAMYyesz8tlVOh/OMa6p0O3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:f4:7c:28:3f:6d:32:29:d3:aa:aa:bf:60:7e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Sep 25 04:01:46 2026 GMT
Not After : Sep 26 04:01:46 2026 GMT
Subject: CN=29d4160ac5cb4321a6bb59759b1f5eba4851af86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:5c:94:5c:bf:70:be:58:30:c7:81:cc:32:
c3:aa:91:92:d5:b1:74:f7:94:83:4d:31:36:b0:2e:
5f:f0:2d:86:27:23:3b:e7:22:7d:29:b1:40:37:82:
87:f7:1b:2d:a4:14:40:8e:33:cf:2e:a3:a3:2c:db:
9b:e5:3e:c1:39:53:b7:e0:34:cf:76:41:f5:a0:46:
43:88:ea:50:47:93:61:e4:1d:df:9b:5c:dd:a6:6e:
82:e6:d0:e0:40:ea:3d:78:42:a4:80:24:77:88:74:
97:d7:ec:7c:12:1c:97:56:3a:9f:8e:c6:72:f7:1a:
ea:d3:99:bd:25:be:5f:f5:06:68:56:6a:a7:f4:ab:
d9:0f:5f:a9:34:7d:c6:5e:d8:a3:a2:0b:86:e0:09:
ef:03:b2:46:36:02:4c:34:56:aa:2e:5e:0c:2f:6a:
b7:5c:fb:e6:ab:b8:29:b9:77:40:e6:2b:ce:1e:e2:
0a:25:2a:c2:ce:e0:f4:cb:f5:97:a6:33:26:26:8e:
9d:44:28:9a:99:37:19:3c:ef:c7:ae:c7:6b:75:66:
89:2e:07:b8:41:d0:07:9d:e7:c1:9b:2f:52:9a:08:
64:25:bd:23:82:4d:c7:d7:a6:62:ad:30:04:ff:0c:
58:72:3e:1e:11:2d:87:0d:68:72:b0:2a:94:bb:64:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D4:16:0A:C5:CB:43:21:A6:BB:59:75:9B:1F:5E:BA:48:51:AF:86
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:74:43:66:06:44:b0:54:1c:97:92:b3:b2:14:d2:3d:1e:18:
a3:9c:49:1e:b1:0e:29:ae:bc:9d:2a:e7:7b:2c:bd:fc:6e:cc:
ee:63:4d:02:5a:66:aa:ee:3e:69:5f:66:af:9a:51:59:0e:a4:
b4:27:2d:34:d5:10:9a:31:cc:fe:a0:ce:ad:fb:c5:d6:06:94:
b2:11:f4:89:c1:4d:f1:bc:4d:b7:1e:44:ad:eb:59:32:8c:db:
7e:89:99:aa:be:bb:f7:3c:ab:cd:f8:2a:b5:63:9e:f0:7e:aa:
2a:56:4e:c0:58:9f:98:f0:d5:7e:cd:6e:e4:df:9b:6c:60:4e:
35:b5:9d:ca:b7:79:eb:50:f3:00:08:50:62:fb:98:06:fd:3d:
9c:80:75:47:13:42:e3:ac:88:2f:0b:b5:6c:dc:cc:03:b1:7e:
da:b4:97:72:81:09:89:24:ab:af:43:84:27:e0:ec:b4:34:d3:
fa:96:58:b0:ab:4e:d3:74:d8:1f:8c:87:fb:8e:00:8b:18:28:
a3:df:a7:6f:4d:16:7b:0a:e2:50:a3:8b:f1:b6:21:29:22:27:
e1:95:08:76:d3:92:9f:6f:25:3e:b2:fe:3c:dc:f0:4c:25:57:
dc:48:7e:36:e5:0a:93:7a:cd:c5:78:c1:63:a9:9c:28:f3:9f:
d0:54:58:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWufR8KD9tMinTqqq/YH7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmI4NjQ5NjllOTY4MDc2NDg5OTAxNWUxNjNlY2U3N2Ji
NGNiNzYwHhcNMjYwOTI1MDQwMTQ2WhcNMjYwOTI2MDQwMTQ2WjAzMTEwLwYDVQQD
EygyOWQ0MTYwYWM1Y2I0MzIxYTZiYjU5NzU5YjFmNWViYTQ4NTFhZjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshRclFy/cL5YMMeBzDLDqpGS1bF0
95SDTTE2sC5f8C2GJyM75yJ9KbFAN4KH9xstpBRAjjPPLqOjLNub5T7BOVO34DTP
dkH1oEZDiOpQR5Nh5B3fm1zdpm6C5tDgQOo9eEKkgCR3iHSX1+x8EhyXVjqfjsZy
9xrq05m9Jb5f9QZoVmqn9KvZD1+pNH3GXtijoguG4AnvA7JGNgJMNFaqLl4ML2q3
XPvmq7gpuXdA5ivOHuIKJSrCzuD0y/WXpjMmJo6dRCiamTcZPO/HrsdrdWaJLge4
QdAHnefBmy9SmghkJb0jgk3H16ZirTAE/wxYcj4eES2HDWhysCqUu2Qo9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnUFgrFy0MhprtZdZsfXrpIUa+GMB8GA1UdIwQY
MBaAFAUrhklp6WgHZImQFeFj7Od7tMt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUt
Njk3MGVjZDlhNjEwLzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUtNjk3MGVjZDlhNjEw
LzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXRDZgZE
sFQcl5KzshTSPR4Yo5xJHrEOKa68nSrneyy9/G7M7mNNAlpmqu4+aV9mr5pRWQ6k
tCctNNUQmjHM/qDOrfvF1gaUshH0icFN8bxNtx5EretZMozbfomZqr679zyrzfgq
tWOe8H6qKlZOwFifmPDVfs1u5N+bbGBONbWdyrd561DzAAhQYvuYBv09nIB1RxNC
46yILwu1bNzMA7F+2rSXcoEJiSSrr0OEJ+DstDTT+pZYsKtO03TYH4yH+44Aixgo
o9+nb00WewriUKOL8bYhKSIn4ZUIdtOSn28lPrL+PNzwTCVX3Eh+NuUKk3rNxXjB
Y6mcKPOf0FRYGg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:29:59 2026 by rpki-client