Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
File: BSAFu2w9aGW4nBDzOwuZS3Svljs.mft (raw, json)
Hash identifier: /F/BKF9QGgI4ip1eDXzMucibASQd+YgPWn75ZZ0Fmvs=
Subject key identifier: 53:E3:FB:40:0A:45:B4:29:61:04:A4:5D:FE:1B:8B:45:E7:FC:54:2F
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 01A0CA7DAF7D2309C216A3739339EE4D964C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 19:00:29 +0000
Manifest this update: Tue 22 Sep 2026 19:00:29 +0000
Manifest next update: Wed 23 Sep 2026 19:00:29 +0000
Files and hashes: 1: BSAFu2w9aGW4nBDzOwuZS3Svljs.crl (hash: z9uP657U01BpRS98UjeR+/Vu8ERgTYXN0LuS9qKXC5c=)
2: TkHWb7A0dCU6pE1AWMAvWtYjFGQ.roa (hash: SNUkFMiS55HofBAwrMgQasrnX+p3nqcULIOMMHj9Bv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:af:7d:23:09:c2:16:a3:73:93:39:ee:4d:96:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Sep 22 19:00:29 2026 GMT
Not After : Sep 23 19:00:29 2026 GMT
Subject: CN=53e3fb400a45b4296104a45dfe1b8b45e7fc542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:db:0a:39:75:d4:3c:70:59:b1:e6:e9:24:
1e:3a:25:e1:d5:1d:28:25:00:57:3e:b3:c2:d3:de:
11:ed:3a:82:31:ce:75:b2:43:7b:b6:d1:3b:b9:8a:
20:8f:72:05:58:17:f5:3b:ba:fd:da:9f:3c:7c:5f:
7b:37:97:37:03:c0:be:82:a4:0d:52:41:ef:06:35:
e3:81:52:2e:6c:1a:10:c6:cb:e3:2d:ce:25:9c:a6:
4b:c5:0c:7d:84:f5:72:dd:81:cd:98:ee:ec:90:72:
e0:9f:e7:7a:d5:63:04:22:2e:0f:5a:a7:e9:d3:59:
d7:ae:24:19:25:03:f9:ab:95:9e:c3:c8:63:66:ab:
40:23:e8:3a:06:dd:05:e4:dc:b6:4c:19:fa:85:2e:
3d:55:c3:ab:b5:7d:9e:22:f0:90:b2:b9:8f:89:0a:
e4:89:b5:b6:85:3a:4f:f7:83:b4:5d:be:c8:fa:f0:
34:b4:b0:b2:b3:27:75:a5:b7:06:41:0f:74:f3:48:
b4:ca:d0:6b:22:01:3e:4a:bf:ba:34:b9:9b:7d:4f:
9b:1e:46:6b:40:9c:b4:76:b5:6b:91:54:cc:82:8f:
f1:1d:7e:85:c8:5f:1b:82:c7:9a:5b:72:33:0b:1d:
7b:89:33:e2:d5:3e:94:6d:b1:ce:bc:df:94:ae:30:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:FB:40:0A:45:B4:29:61:04:A4:5D:FE:1B:8B:45:E7:FC:54:2F
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:50:97:16:48:2e:91:5b:51:a0:52:17:84:46:8d:37:1d:26:
6f:4a:dd:f6:d9:db:92:8d:a4:b8:d4:5e:b3:68:1c:55:9a:4a:
74:32:09:8d:fb:32:ed:ce:c7:fe:6c:dc:be:47:64:6e:23:25:
79:74:70:a1:b7:4a:08:f5:59:21:ae:4b:81:16:72:bf:83:02:
ad:56:47:8b:af:a3:80:58:29:03:51:52:a7:b8:67:1a:38:10:
57:81:30:88:04:c9:b9:d0:13:04:93:29:aa:ba:b9:7f:de:c6:
39:ef:e0:e3:37:b7:8d:f9:ec:29:83:1f:5b:29:7a:d3:f4:cc:
1b:b8:81:09:02:9b:c8:b1:32:39:4f:b6:11:c1:82:04:d6:9e:
a5:33:a6:52:40:33:db:23:fe:0d:69:ed:f5:b4:e6:2d:ab:e3:
ad:94:0e:ca:dd:72:24:15:e9:88:8a:29:9f:17:d2:23:b5:34:
d6:37:14:09:95:3d:93:96:82:21:c0:0e:ed:0c:2f:50:b6:01:
2c:42:05:5b:a3:50:2e:c5:38:5a:f3:c0:4a:f3:6d:3d:c1:de:
96:8c:7f:79:52:92:66:7c:b2:71:32:2a:ee:28:17:3f:31:34:
af:59:36:c2:22:79:dd:0a:f9:5f:8a:7a:e6:79:20:42:cf:9b:
e7:d8:60:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:21:15 2026 by rpki-client