Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
File: BSAFu2w9aGW4nBDzOwuZS3Svljs.mft (raw, json)
Hash identifier: sZmtOo6CmapWFx533WB84uW47IXifOyRNT+rd1BvEZY=
Subject key identifier: 3D:E4:84:EE:D7:2D:CF:D6:86:69:6F:EA:75:F0:FF:B7:08:79:0F:90
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 01A1DEA785B369A4695F8D68DCF69B0D0453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 10:01:22 +0000
Manifest this update: Sun 15 Nov 2026 10:01:22 +0000
Manifest next update: Mon 16 Nov 2026 10:01:22 +0000
Files and hashes: 1: BSAFu2w9aGW4nBDzOwuZS3Svljs.crl (hash: nJ5xam2/6ELmlf/EuLtSK2iGY7qqUW8V/xd9F8efOj4=)
2: TkHWb7A0dCU6pE1AWMAvWtYjFGQ.roa (hash: SNUkFMiS55HofBAwrMgQasrnX+p3nqcULIOMMHj9Bv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:85:b3:69:a4:69:5f:8d:68:dc:f6:9b:0d:04:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Nov 15 10:01:22 2026 GMT
Not After : Nov 16 10:01:22 2026 GMT
Subject: CN=3de484eed72dcfd686696fea75f0ffb708790f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:9f:d3:0d:cc:b5:a7:a4:7e:91:2f:aa:bd:
56:81:80:cf:66:69:20:e7:26:f7:6a:82:57:57:d1:
25:1a:3a:cc:14:74:13:40:8f:30:83:02:fc:9f:7c:
dc:eb:c3:d8:47:32:38:b0:9a:71:bd:f1:40:4e:8e:
7f:21:1e:3d:92:20:e2:54:7f:b9:5f:ad:3a:36:9a:
52:7f:92:06:51:f6:47:55:bc:c6:24:a3:8e:ed:84:
6a:19:d1:94:e6:fa:5f:86:de:b4:46:1b:3c:4c:3b:
d0:81:1d:5a:98:54:b7:78:53:ba:2c:e1:50:5c:78:
7d:a2:c1:38:9b:f5:98:51:df:37:21:da:7a:f5:03:
a3:52:5d:01:db:68:0f:d2:94:5f:b7:5d:e6:4d:61:
74:41:e1:5c:fc:d1:c8:63:f0:88:f0:66:4d:ec:59:
51:de:c8:c5:22:b9:b3:f4:27:1b:5c:42:c9:32:96:
a7:66:ca:ff:48:ba:5d:cc:31:73:f3:77:83:de:c3:
26:f9:3b:2e:a0:3b:63:84:80:44:d2:68:a5:ba:df:
24:13:b4:f9:1d:30:ab:2b:b5:3b:2f:f9:65:81:6c:
12:18:6a:05:11:bc:00:b4:c6:97:96:d4:9b:57:30:
ab:03:6a:a2:56:f5:16:e6:c9:33:bc:68:89:89:58:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:84:EE:D7:2D:CF:D6:86:69:6F:EA:75:F0:FF:B7:08:79:0F:90
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:c9:0e:d7:2a:6f:99:bf:e1:7b:ad:0b:de:bb:e6:28:3e:
4d:44:83:01:05:20:1d:9d:41:6c:a8:d4:88:e2:97:48:81:d0:
fc:80:cf:d1:f7:ed:90:fe:50:11:ee:cd:50:2c:c7:84:83:30:
3a:58:06:c3:08:f6:0a:da:23:38:2e:a9:d5:c9:0d:54:8c:7d:
ee:59:8f:74:3f:30:d9:da:49:8b:99:4c:76:78:58:c3:e8:de:
0f:e1:2e:67:88:87:7a:79:ae:e1:45:a8:83:1c:3e:27:be:42:
8c:e0:64:78:f7:7d:0d:db:85:ce:55:f2:3c:58:5f:21:2a:17:
78:8d:61:eb:06:47:a9:f8:67:be:1d:1e:49:be:71:40:cf:32:
63:16:f9:98:6e:9c:f4:13:66:f3:24:4d:34:26:b3:71:3e:10:
4c:01:15:46:4c:21:47:65:47:66:6e:17:fd:62:62:01:09:b9:
47:f8:cc:36:2c:b0:64:c8:9f:52:da:08:79:02:9c:de:ef:56:
35:c4:b0:8c:87:ab:cf:f1:0a:57:f3:80:e0:d9:1c:65:e0:aa:
80:53:8f:53:77:c8:db:ac:17:1b:68:1d:b8:7e:9c:88:84:6c:
63:1c:01:9e:fd:44:14:b8:46:3d:98:07:a0:f2:f5:69:f7:6e:
5c:4d:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:33:25 2026 by rpki-client