Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: 43qYzKRR8SDrF2ux/8uC3TnomUWOdaUxJVuLNUtg9Z4=
Subject key identifier: 22:DF:D5:B2:0F:94:EC:C4:EA:B1:31:E8:01:DE:2D:78:F8:B2:7A:E4
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 01A0E5F594325CD039BCDB3FD0DA65490AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 17BA
Signing time: Mon 28 Sep 2026 03:01:11 +0000
Manifest this update: Mon 28 Sep 2026 03:01:11 +0000
Manifest next update: Tue 29 Sep 2026 03:01:11 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: P0HNFWz6i/GkRX76fEdpu5Wf8Gn+TTW3Igy1zpLyKgk=)
2: sQyne1zxQXu_zdF8YvRFUzS8ZEg.roa (hash: KddIGoSYVIL2Nj4926PBtsXbFubGN3uCRL3ozwJnP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:94:32:5c:d0:39:bc:db:3f:d0:da:65:49:0a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Sep 28 03:01:11 2026 GMT
Not After : Sep 29 03:01:11 2026 GMT
Subject: CN=22dfd5b20f94ecc4eab131e801de2d78f8b27ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:43:f1:97:6a:77:5c:2a:d4:37:25:4a:55:
82:2a:63:81:0c:ad:92:69:7f:5a:09:34:44:36:d5:
11:55:c7:18:36:78:ab:d8:7c:0e:0c:90:79:c5:04:
7e:a9:95:a9:4e:9e:3f:3b:89:30:cf:84:3d:59:43:
be:d8:cc:0c:88:3e:5e:12:94:79:4e:bc:4e:a7:d0:
a2:33:6e:41:06:77:56:e3:b9:58:af:cd:e6:8c:fb:
41:04:67:29:e0:b6:b7:95:6f:05:c7:2d:53:74:e2:
cd:0e:af:96:5a:c9:39:22:44:0a:53:df:f9:56:9b:
86:d3:11:fe:64:5f:58:ed:9d:40:09:d3:e1:2a:b1:
dd:e9:0c:4d:a1:22:83:63:6c:2c:b1:9a:7b:1a:c9:
f6:19:99:53:fb:08:e3:14:a1:d6:e6:dc:1b:4c:cd:
69:a8:b1:9c:a9:63:92:ce:38:e8:79:bf:c3:65:bc:
94:e3:28:e3:ec:a9:1f:f4:99:0a:c6:05:b2:c9:14:
f8:2f:b5:d6:2a:ab:d3:3c:30:75:43:ac:a4:b6:c3:
c3:dc:ba:51:9c:44:21:03:cc:4a:f3:5a:a5:94:1b:
ba:c2:03:d5:92:4c:12:85:eb:12:d4:30:d0:3e:04:
e4:be:a4:d3:1b:5c:a6:10:6e:6f:38:f7:31:b1:54:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:D5:B2:0F:94:EC:C4:EA:B1:31:E8:01:DE:2D:78:F8:B2:7A:E4
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ed:23:f2:6a:93:30:eb:50:22:a2:bf:70:81:1c:47:af:8f:
9e:2d:df:8c:4b:4c:35:cb:dc:38:bb:71:74:31:34:9c:df:55:
4f:a5:02:25:38:93:2a:e3:af:ac:05:5b:a4:02:df:0f:41:c8:
7a:51:dc:b7:4f:80:a6:ec:30:73:34:e0:a0:70:69:69:94:3b:
56:2e:f6:d3:44:75:36:e1:15:67:e3:9b:a8:83:37:b3:7b:9c:
35:78:f6:dd:4e:89:8a:fc:f7:3f:ca:eb:7a:de:84:bf:82:14:
87:d3:a3:83:4c:f8:8c:d1:4c:a1:a1:3b:4c:4a:65:6e:62:24:
5a:36:9b:ad:5a:0f:39:20:d7:8c:bf:30:43:b8:d2:36:f4:9b:
02:ca:6b:11:d2:fb:e1:7e:8c:d9:ad:9b:39:48:e4:5d:5e:7d:
b7:d3:e9:26:03:37:cc:0d:32:ae:77:ce:49:29:71:f4:1a:32:
96:31:75:d9:93:04:af:b6:12:b9:02:b1:8f:b4:44:84:dd:12:
4d:bf:cc:34:85:db:dd:bf:29:69:71:66:37:39:4e:33:c1:2f:
9a:d3:8e:54:42:69:c7:d2:93:ea:4d:fe:4f:bf:62:18:dc:6c:
a8:c4:77:6f:c5:c4:4c:a5:f5:38:04:90:d5:ff:d1:b8:2d:78:
a9:46:05:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:23:36 2026 by rpki-client