Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: ZO0JyakONnGi3RWOHQ78qPvalLKfEGbgLpqu8lJN5ZU=
Subject key identifier: B5:D3:AE:87:C7:15:FE:0E:A8:7B:4F:BC:4A:13:0F:7D:B9:4F:47:79
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 019E1E353695BA8BDD56307FFA4ADE1DC029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 133A
Signing time: Tue 12 May 2026 22:01:04 +0000
Manifest this update: Tue 12 May 2026 22:01:04 +0000
Manifest next update: Wed 13 May 2026 22:01:04 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: qH2/H5Hw3mFpSuc3B/evlm83wL1kPO3BUZKxg8Gtlgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:36:95:ba:8b:dd:56:30:7f:fa:4a:de:1d:c0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: May 12 22:01:04 2026 GMT
Not After : May 13 22:01:04 2026 GMT
Subject: CN=b5d3ae87c715fe0ea87b4fbc4a130f7db94f4779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:08:b5:4f:9c:e0:e9:78:e2:e7:5c:e1:e4:
a1:dd:60:e4:f1:f5:82:12:78:bd:62:be:a4:0a:b5:
36:bf:7f:f6:46:d2:8f:8d:86:24:33:33:67:7c:de:
ac:f1:0f:c6:a3:a4:66:6b:37:20:3b:79:d0:7e:f4:
c6:27:ca:b4:f6:5f:8c:c7:23:d5:66:0c:e5:30:43:
a0:5c:46:35:33:4b:62:46:eb:67:20:29:4d:c4:e5:
28:67:71:e4:95:a7:7d:16:d3:e7:bd:67:a5:3b:b6:
80:61:9b:40:66:e3:46:d5:9e:cf:bb:72:cf:d8:57:
e9:ec:aa:16:e6:ba:8c:23:30:4e:a1:4e:e1:c5:a3:
ec:8c:dd:32:80:eb:15:94:7c:eb:74:52:2f:eb:db:
67:72:77:3b:d6:97:14:1c:45:16:f2:2f:68:95:b5:
47:c1:72:eb:ab:88:7f:65:9a:53:92:45:ab:a2:4f:
9f:d1:91:51:e2:e5:cf:f7:4d:38:04:14:be:3a:7e:
de:8e:88:96:97:df:6b:ee:ae:c7:01:c5:fc:6c:4d:
38:7e:d7:15:da:45:3d:72:51:f3:12:8f:64:87:0b:
93:b4:1b:f2:d7:1e:44:9a:26:d1:fa:1e:cf:bb:10:
f0:34:51:e0:70:d3:57:e3:cd:4f:a8:44:23:3b:c3:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:AE:87:C7:15:FE:0E:A8:7B:4F:BC:4A:13:0F:7D:B9:4F:47:79
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:32:5b:80:90:df:09:df:1d:b0:29:5f:42:85:cc:24:84:47:
d4:13:18:74:1c:44:08:79:01:aa:a7:d0:79:d7:08:1b:52:d8:
09:cc:6a:43:0b:19:65:cc:2f:ec:b7:26:01:90:93:37:47:7a:
08:26:c0:2f:6b:8c:41:61:c7:e2:4b:a4:9c:7f:1c:5e:75:79:
3b:ee:ee:0f:95:0b:8e:b9:3f:6f:49:f9:3c:af:58:a5:c7:41:
7d:01:6a:be:9b:ae:63:cb:e0:bf:a2:e1:ad:34:ec:8c:dd:65:
1c:e2:7f:4c:4b:02:14:8d:13:8e:93:9b:86:a5:d0:21:3b:85:
50:84:5b:da:83:d3:b9:fc:0b:ad:14:79:49:36:97:61:7a:c8:
f0:b9:7d:da:d9:a5:bd:ad:18:1f:16:27:56:44:66:64:72:36:
c8:d4:a3:52:8f:d3:58:b5:20:56:8b:d2:8a:db:3c:7c:45:d9:
a2:4e:04:ac:a8:d9:78:94:dc:06:1a:61:f1:39:3d:c6:30:17:
58:5d:10:92:8c:55:5f:d3:a8:65:6b:ee:c1:29:c9:3d:bb:61:
9d:c7:ac:e6:5e:06:03:db:16:a0:aa:81:1b:55:d4:e2:a6:6d:
0c:9c:c4:8d:db:33:2d:cd:eb:47:53:8d:11:f6:4b:4c:96:61:
aa:88:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:00 2026 by rpki-client