Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/BsLe_0asEgDaEhhhtgiBorRpAaM.mft
File: BsLe_0asEgDaEhhhtgiBorRpAaM.mft (raw, json)
Hash identifier: hz8/dU0Cy6wWLtct7JQ7fVYvyzUhAXyAkiiuP0EK/QY=
Subject key identifier: B2:5E:B4:B5:BD:61:DE:A5:B1:54:37:AA:97:45:B8:26:BD:46:25:82
Authority key identifier: 06:C2:DE:FF:46:AC:12:00:DA:12:18:61:B6:08:81:A2:B4:69:01:A3
Certificate issuer: /CN=06c2deff46ac1200da121861b60881a2b46901a3
Certificate serial: 01A1DEA7A514918806B5357C39C38E789BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsLe_0asEgDaEhhhtgiBorRpAaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/BsLe_0asEgDaEhhhtgiBorRpAaM.mft
Manifest number: 1F
Signing time: Sun 15 Nov 2026 10:01:31 +0000
Manifest this update: Sun 15 Nov 2026 10:01:31 +0000
Manifest next update: Mon 16 Nov 2026 10:01:31 +0000
Files and hashes: 1: BsLe_0asEgDaEhhhtgiBorRpAaM.crl (hash: WB6D84ofYIqRsbVYAh00J7ANGH7zLCrk3LBBHLgph14=)
2: S9DRlZSxOCUy_vfhA7p4MAW2H_o.roa (hash: ubSfjTbFEJE4yQZULDcAUJBM6v4tk1C6cKvO6EK7KFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/BsLe_0asEgDaEhhhtgiBorRpAaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/BsLe_0asEgDaEhhhtgiBorRpAaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsLe_0asEgDaEhhhtgiBorRpAaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:a5:14:91:88:06:b5:35:7c:39:c3:8e:78:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2deff46ac1200da121861b60881a2b46901a3
Validity
Not Before: Nov 15 10:01:31 2026 GMT
Not After : Nov 16 10:01:31 2026 GMT
Subject: CN=b25eb4b5bd61dea5b15437aa9745b826bd462582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:31:b0:c8:5b:71:3f:0e:db:aa:b5:13:12:9e:
4d:94:d6:06:b9:5a:43:25:df:a5:58:6f:32:fa:c4:
f6:22:60:ab:a8:81:41:82:e4:d5:9f:e2:93:60:d5:
0b:ba:8c:29:6e:da:e8:08:17:c5:85:4a:6f:95:c0:
86:eb:a8:e3:f1:9c:f9:b8:4d:35:a1:ff:22:0d:b4:
7d:96:95:8f:ac:5c:28:07:5d:e7:34:19:3e:28:23:
79:7a:e9:f0:f7:e7:98:a7:5f:bb:49:2b:c1:de:87:
7b:37:2b:81:9a:29:0e:38:79:d8:9e:42:7e:81:b1:
f4:c8:e8:56:92:f8:f1:c1:00:68:77:02:1f:10:64:
9d:c5:15:52:93:4a:41:1c:84:78:da:0b:83:a8:9a:
3f:e5:e6:a8:64:56:52:b2:7f:5a:50:94:0c:71:4f:
90:f4:b9:e4:1b:21:a4:4e:9c:f6:b5:c7:f9:b3:e5:
72:e0:53:15:48:63:70:e5:0d:fd:e0:d6:0c:9f:5c:
0f:9f:29:a4:3f:ee:4e:93:5c:ab:69:1d:ab:d3:fa:
11:1a:c0:4e:f9:07:44:5d:85:0d:94:80:3d:70:dd:
72:d6:dd:7d:63:27:0c:5b:cc:46:85:70:ed:a7:9b:
c7:16:25:77:2d:e6:32:71:dc:4d:cb:4a:05:f5:b2:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:B4:B5:BD:61:DE:A5:B1:54:37:AA:97:45:B8:26:BD:46:25:82
X509v3 Authority Key Identifier:
keyid:06:C2:DE:FF:46:AC:12:00:DA:12:18:61:B6:08:81:A2:B4:69:01:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsLe_0asEgDaEhhhtgiBorRpAaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/BsLe_0asEgDaEhhhtgiBorRpAaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/BsLe_0asEgDaEhhhtgiBorRpAaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:42:b9:37:bf:70:1b:45:bc:0f:d3:c5:67:ef:a2:e3:c2:a1:
ce:b4:21:d9:e7:a9:f1:20:ff:76:5b:06:0e:77:e0:c4:c0:d3:
7a:51:68:f2:55:f7:34:76:87:b7:59:d6:1c:5b:f7:1e:c5:ad:
e5:84:20:83:2c:d5:d2:04:8f:a3:e7:c3:8a:42:df:ee:69:13:
45:9f:f8:6a:8a:8b:84:26:1b:a6:ec:76:16:4d:dc:18:e8:32:
8c:94:04:ee:d2:b2:0c:4f:a7:96:68:21:14:37:fb:4c:5b:a8:
f2:ca:24:b2:3a:83:fb:9b:0e:f5:4b:66:a3:f9:60:8c:77:9a:
22:68:d2:f9:07:a7:83:ae:41:84:9c:6e:ee:e5:ba:43:cd:40:
88:b3:85:17:76:5a:2e:07:57:c6:1b:e7:7c:a0:d7:bc:ea:74:
5f:4f:b2:0a:c2:bf:a7:74:66:d0:e5:36:a6:0f:82:23:46:7e:
23:0c:08:53:88:00:6c:47:5c:08:d2:9d:bd:19:cc:04:da:53:
32:21:7e:58:4f:8e:5c:71:63:03:2f:29:4e:b6:c9:46:eb:49:
de:79:51:f8:b5:d0:78:94:60:00:d6:9d:db:83:6c:71:12:58:
b7:54:42:ba:b7:83:dd:06:7f:05:7c:fd:f2:93:3d:9c:55:13:
b9:27:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:15:46 2026 by rpki-client