Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: 90sK2Sen6Ft0+9kJpRJlsHC5ZXrqrhBerewf9cLyEm4=
Subject key identifier: 2D:E8:68:70:7C:52:F1:CE:85:37:43:A9:94:4C:35:85:67:9C:A3:84
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 01A0D5708A8680D98D65EB7F047C918376A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 14A2
Signing time: Thu 24 Sep 2026 22:01:57 +0000
Manifest this update: Thu 24 Sep 2026 22:01:57 +0000
Manifest next update: Fri 25 Sep 2026 22:01:57 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: F70iJtebj0+pn6CKvuK+Jd1SiAFl3J95VVkAqh9p7gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:8a:86:80:d9:8d:65:eb:7f:04:7c:91:83:76:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Sep 24 22:01:57 2026 GMT
Not After : Sep 25 22:01:57 2026 GMT
Subject: CN=2de868707c52f1ce853743a9944c3585679ca384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:d0:29:2f:a7:de:37:19:31:fb:c3:9b:01:
52:80:3e:68:9b:c5:d6:81:4c:f0:3c:57:b7:8b:07:
35:eb:74:e7:b1:24:f2:d0:5a:63:f2:6a:7e:c9:6f:
b7:dc:10:91:10:d4:db:a9:6c:a5:8e:42:94:c1:40:
c1:ef:ab:81:d9:be:de:e7:9b:e0:28:53:8d:f9:52:
25:66:06:8d:c7:06:f3:66:17:aa:1d:07:b3:47:c8:
80:6a:f3:22:08:93:cb:2f:81:20:8e:64:4b:61:c8:
4a:d0:fd:c1:32:cb:c8:f0:6f:c8:c7:74:96:64:5f:
8c:ca:fa:86:6c:25:8e:7c:70:a9:83:21:4d:6e:72:
f0:6c:50:51:6f:2d:18:ed:7f:c2:b7:1d:f9:a5:96:
9c:78:c7:07:97:f1:79:eb:95:8d:43:f5:9c:a6:a0:
a9:bb:e9:ec:22:a9:a0:d9:66:20:88:35:52:ab:80:
3f:6a:e8:2d:6f:27:76:82:63:6e:c2:b5:dc:18:95:
6f:f3:6d:40:4e:86:ad:3f:f8:d2:6e:50:cb:9b:7c:
12:51:16:cc:ff:78:0a:d6:38:14:d4:c0:4f:48:73:
e6:f6:f8:00:af:c5:bc:a0:9d:c3:8c:1b:54:de:c6:
f9:97:53:13:05:fe:1d:ab:64:e9:7e:e0:82:ff:19:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E8:68:70:7C:52:F1:CE:85:37:43:A9:94:4C:35:85:67:9C:A3:84
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f9:67:fb:1b:1c:d9:e4:c3:c5:5e:d5:90:d9:6b:c1:c2:26:
a7:b5:b7:00:9f:c9:cd:fb:c8:cc:f2:8c:1d:b9:ce:ad:e0:42:
26:f4:d1:80:5f:42:70:4c:9e:17:5b:52:5d:f3:bd:38:7d:d9:
fc:c9:c5:a8:9b:9c:d3:57:ad:0a:86:76:68:34:af:81:5f:38:
8f:4f:70:72:8a:ef:ad:c6:40:2a:6d:b1:74:02:13:cc:ec:1c:
fa:b0:a6:45:45:c9:d2:ee:20:05:1b:32:5c:96:b7:bb:90:08:
12:d8:86:b1:c6:a5:e7:db:2b:92:88:3a:3e:43:a4:03:a8:fa:
1b:d2:ab:22:c1:1e:f5:2e:53:ab:81:09:24:ef:9a:27:b7:55:
45:be:e1:2d:ab:9c:43:8e:c7:ae:c5:d1:d7:b3:ae:f0:81:ff:
4f:62:71:3c:ce:a4:0c:61:77:9f:c3:8d:2b:3b:79:48:f7:2d:
7e:f8:9d:32:b8:33:49:59:a5:2d:1d:ad:0e:41:82:12:71:b5:
6b:c3:a3:db:04:c7:26:1d:8a:03:75:6e:3f:f4:61:32:38:fd:
e8:be:cf:73:8c:80:a0:be:2a:26:1a:8d:ac:41:b2:ba:fd:fa:
2b:b5:cb:9a:0e:bb:46:9d:72:3f:50:8a:44:e2:2f:9e:c8:40:
bd:bf:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:22:11 2026 by rpki-client