Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
File: BSAFu2w9aGW4nBDzOwuZS3Svljs.mft (raw, json)
Hash identifier: im9/ApKy6GfzcWMHgB+hWCanMiSGWhggpJfGE9exiyY=
Subject key identifier: 21:26:23:05:92:9E:42:E5:1A:52:49:F8:28:C0:63:72:21:5E:ED:BE
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 019F91A40067B3CBBDB00FE29A54E52E2AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 01:01:12 +0000
Manifest this update: Fri 24 Jul 2026 01:01:12 +0000
Manifest next update: Sat 25 Jul 2026 01:01:12 +0000
Files and hashes: 1: BSAFu2w9aGW4nBDzOwuZS3Svljs.crl (hash: fURM9TVtMe+M8pHeATurEbTrkQvfNxYLzm2+J118gnI=)
2: TkHWb7A0dCU6pE1AWMAvWtYjFGQ.roa (hash: SNUkFMiS55HofBAwrMgQasrnX+p3nqcULIOMMHj9Bv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:00:67:b3:cb:bd:b0:0f:e2:9a:54:e5:2e:2a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Jul 24 01:01:12 2026 GMT
Not After : Jul 25 01:01:12 2026 GMT
Subject: CN=21262305929e42e51a5249f828c06372215eedbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f8:fd:9e:a1:60:84:79:95:1c:53:53:1b:18:
e6:9b:5e:f6:fe:64:60:ea:0a:33:95:9d:af:c3:78:
75:22:05:3d:87:82:7c:00:83:59:06:83:5e:99:17:
cb:1a:4b:e4:44:50:0d:98:c4:cd:a2:83:ca:1d:27:
94:03:a8:8e:41:b0:9d:63:d6:27:56:be:34:41:4d:
f9:8c:77:4a:62:2b:6b:2e:94:c1:3c:e9:c6:dd:b9:
bf:70:74:3e:a6:78:b7:a8:28:5b:0c:50:90:bc:16:
06:2e:63:72:98:e8:4f:3b:00:3d:87:37:d3:cc:1a:
44:b5:1e:af:fe:fc:cf:b5:68:63:b9:a3:49:7e:3c:
f4:87:67:6e:89:ff:71:3f:a3:cc:f7:07:bc:8a:0b:
27:84:d4:2f:4b:85:61:4a:80:78:cc:95:41:2e:7b:
15:27:9a:4c:94:74:74:95:0b:12:f5:57:03:b2:c0:
91:48:17:72:21:39:ec:e9:3e:71:91:8b:71:de:8f:
44:62:ab:57:d7:b6:f0:42:71:02:95:a6:ac:03:29:
87:3d:80:8d:98:94:1a:b3:07:08:d0:22:da:fd:95:
2a:4f:e9:44:78:d4:6c:ad:f6:2c:60:6b:ad:4a:50:
47:ca:79:58:4b:b8:fb:e8:05:19:a3:67:46:b8:d4:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:23:05:92:9E:42:E5:1A:52:49:F8:28:C0:63:72:21:5E:ED:BE
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f6:b0:3e:8a:fa:d7:85:40:4b:47:22:c2:e2:31:8f:70:bf:
83:9f:88:38:35:26:d3:9f:a0:33:70:bf:25:7c:10:0b:d8:71:
8a:ae:28:cb:c1:4e:b0:8f:d0:04:a1:24:cf:6f:1c:48:b2:92:
4a:aa:4f:53:d3:75:86:19:90:00:bc:bc:84:2c:6f:2f:e4:0c:
14:57:7e:59:ba:ad:bb:7d:23:23:6c:3e:a3:02:4b:54:37:c6:
d2:df:cf:bd:28:22:e1:f8:35:71:fb:e5:b5:55:1d:7d:7c:6e:
84:c5:41:3b:e2:4a:40:8d:06:bd:a9:ae:04:57:33:32:7c:11:
4f:01:51:f4:be:11:2f:e1:7d:27:eb:7c:2b:92:a3:63:a9:f5:
8a:2b:68:42:09:e3:d3:13:6f:26:f9:1b:4a:9e:02:b2:d0:d1:
5d:b6:f1:d1:1f:17:c9:e7:04:32:df:8f:05:0d:46:16:36:f6:
62:11:5d:7b:f7:68:ca:0f:78:18:6c:08:24:5b:48:d6:b3:0b:
c6:a8:e4:93:ca:59:0c:e4:e8:78:9b:96:9e:a2:82:5b:2c:27:
1d:ef:0b:50:2a:8c:67:97:17:07:e7:71:a4:12:13:e1:4d:cf:
c6:63:15:c4:89:00:7b:6e:ec:0d:63:eb:59:4c:eb:84:b9:95:
d5:ee:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:03 2026 by rpki-client