Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: GUo57gca7poUI68v1nqrFpn/3ztlF+QZvS+C4+B++ic=
Subject key identifier: 27:CD:2F:01:45:79:AC:E9:28:08:FC:4A:6F:33:9C:48:B2:0A:E4:85
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 019F90FF4BFEE5731D59347E3F7E76152A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 13FA
Signing time: Thu 23 Jul 2026 22:01:17 +0000
Manifest this update: Thu 23 Jul 2026 22:01:17 +0000
Manifest next update: Fri 24 Jul 2026 22:01:17 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: RBOwOkMwvREM8EE1av5SJV9dyAIo3JSgwkcgiXcRTtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:4b:fe:e5:73:1d:59:34:7e:3f:7e:76:15:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Jul 23 22:01:17 2026 GMT
Not After : Jul 24 22:01:17 2026 GMT
Subject: CN=27cd2f014579ace92808fc4a6f339c48b20ae485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:6e:f3:32:f5:86:52:fc:85:49:08:73:6c:
7a:d0:c8:b4:7c:51:b6:95:f8:e4:07:0e:29:e4:3f:
4b:a3:68:35:cd:f8:97:28:2e:4c:33:fb:b9:50:a1:
f4:ba:77:86:31:21:93:aa:bf:75:70:06:3d:9d:5f:
bf:c9:8d:36:5e:75:2a:3a:0d:a3:c2:e2:8a:8b:58:
c2:c1:29:09:ce:eb:e2:5a:0e:b9:11:56:f9:93:45:
04:34:45:29:46:69:25:a6:08:a5:d4:1d:25:68:dc:
b6:7e:55:3e:17:c3:b5:e4:12:c5:da:f8:3f:25:80:
85:ed:32:ec:cd:aa:6a:a8:7a:5a:60:d4:0b:b8:fe:
2e:3d:14:66:36:18:77:2d:c0:15:dc:4b:eb:81:55:
fd:d3:fc:d0:11:76:37:4a:ec:2c:23:77:64:08:75:
3d:1a:f3:3b:a4:f9:4a:e5:d2:ba:1c:51:e0:b9:de:
81:c8:35:74:ce:f2:bc:be:d0:3d:2a:7f:ea:ac:03:
c1:cb:e1:de:2a:b2:a4:d9:8c:71:a6:0d:94:48:fb:
e9:84:da:a3:cc:3d:99:aa:41:27:2c:58:1f:ad:f8:
97:4c:42:12:93:24:71:33:d8:fd:5d:c1:da:2c:c1:
00:b7:10:c3:94:95:ee:06:67:ad:91:2c:1b:56:5c:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CD:2F:01:45:79:AC:E9:28:08:FC:4A:6F:33:9C:48:B2:0A:E4:85
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:49:60:c1:28:c8:1a:70:8d:c1:08:4c:98:fa:29:61:92:92:
9d:77:2c:5f:03:2e:2e:4d:44:40:64:cc:fb:a3:57:13:aa:82:
5f:18:3a:73:7d:d9:2d:3f:84:4d:30:3c:fb:14:94:69:01:a6:
40:46:ac:0f:61:8c:0c:74:97:28:92:1b:99:d9:10:c1:db:db:
62:85:94:f6:d6:47:83:d1:20:a1:49:fd:d3:d8:b5:68:90:a0:
7a:b0:51:b3:c3:ac:19:f0:7e:c2:e0:df:df:fa:02:fb:d4:6f:
23:aa:11:30:0f:f9:eb:47:18:97:91:3a:55:66:d8:fd:ed:70:
6e:1c:db:9c:7c:74:06:3b:c5:94:e4:6c:6d:fc:eb:d5:3b:ed:
35:19:d5:75:0f:c4:1e:95:26:c8:d9:58:55:a8:9b:5a:fb:c1:
76:16:c8:30:5a:a2:4a:45:a0:ad:a6:62:d8:e4:07:f1:43:2d:
63:83:30:db:b7:07:49:74:2d:85:da:e1:76:2d:e8:e2:04:18:
c1:44:59:f1:87:fb:4a:48:a4:08:b0:4b:b7:55:ce:dc:3f:d8:
d3:96:a1:0f:9e:23:28:03:80:09:96:1f:a6:cb:64:97:f3:78:
71:04:6b:5f:1b:b8:12:9d:fd:e7:15:5d:4c:68:ad:9d:77:22:
13:1e:5e:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/0v+5XMdWTR+P352FSoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzJmNzM1ZjcxNDVmNzBkMjcwMjYwMmVlOGM4MTU2NDll
YjJlNDUwHhcNMjYwNzIzMjIwMTE3WhcNMjYwNzI0MjIwMTE3WjAzMTEwLwYDVQQD
EygyN2NkMmYwMTQ1NzlhY2U5MjgwOGZjNGE2ZjMzOWM0OGIyMGFlNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15tu8zL1hlL8hUkIc2x60Mi0fFG2
lfjkBw4p5D9Lo2g1zfiXKC5MM/u5UKH0uneGMSGTqr91cAY9nV+/yY02XnUqOg2j
wuKKi1jCwSkJzuviWg65EVb5k0UENEUpRmklpgil1B0laNy2flU+F8O15BLF2vg/
JYCF7TLszapqqHpaYNQLuP4uPRRmNhh3LcAV3EvrgVX90/zQEXY3SuwsI3dkCHU9
GvM7pPlK5dK6HFHgud6ByDV0zvK8vtA9Kn/qrAPBy+HeKrKk2Yxxpg2USPvphNqj
zD2ZqkEnLFgfrfiXTEISkyRxM9j9XcHaLMEAtxDDlJXuBmetkSwbVlyZrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfNLwFFeazpKAj8Sm8znEiyCuSFMB8GA1UdIwQY
MBaAFAbC9zX3FF9w0nAmAu6MgVZJ6y5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTczMjgtNzdjNi00Y2EzLThiNmQt
MWZmNjMwYzM1MGZmLzEvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNTczMjgtNzdjNi00Y2EzLThiNmQtMWZmNjMwYzM1MGZm
LzEvQnNMM05mY1VYM0RTY0NZQzdveUJWa25yTGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0lgwSjI
GnCNwQhMmPopYZKSnXcsXwMuLk1EQGTM+6NXE6qCXxg6c33ZLT+ETTA8+xSUaQGm
QEasD2GMDHSXKJIbmdkQwdvbYoWU9tZHg9EgoUn909i1aJCgerBRs8OsGfB+wuDf
3/oC+9RvI6oRMA/560cYl5E6VWbY/e1wbhzbnHx0BjvFlORsbfzr1TvtNRnVdQ/E
HpUmyNlYVaibWvvBdhbIMFqiSkWgraZi2OQH8UMtY4Mw27cHSXQthdrhdi3o4gQY
wURZ8Yf7SkikCLBLt1XO3D/Y05ahD54jKAOACZYfpstkl/N4cQRrXxu4Ep395xVd
TGitnXciEx5e7A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:25 2026 by rpki-client