Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: lvMZOeXP5zH0nAugIaJKFUm53oEpexGyWt3fV9fZiIc=
Subject key identifier: E5:D1:F6:38:79:F7:DF:78:63:10:EC:1A:5E:66:99:3E:D9:15:DE:D7
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 01A1DE0250DE9183F07BAB72CE50C9D6AA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 152B
Signing time: Sun 15 Nov 2026 07:00:55 +0000
Manifest this update: Sun 15 Nov 2026 07:00:55 +0000
Manifest next update: Mon 16 Nov 2026 07:00:55 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: lGSieLc6obDXh4dEMPySrk7thKuQ+L/n2x00zcFRMyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:50:de:91:83:f0:7b:ab:72:ce:50:c9:d6:aa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Nov 15 07:00:55 2026 GMT
Not After : Nov 16 07:00:55 2026 GMT
Subject: CN=e5d1f63879f7df786310ec1a5e66993ed915ded7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:a4:89:db:55:b0:01:94:79:46:cb:d6:93:
e5:e6:c5:be:85:9f:60:7f:a2:4c:ea:71:e1:8d:e0:
5c:cd:d1:42:4d:c3:44:6f:cb:2c:91:04:a0:18:89:
32:3f:64:11:d1:e4:b6:17:14:14:03:6f:36:20:6a:
10:c0:d1:09:1f:17:20:80:87:32:68:6e:d6:10:e7:
a6:63:9d:f5:14:1c:73:52:38:66:5a:5f:c1:14:bd:
a4:72:99:1e:25:c0:5a:24:4f:92:2d:a9:d4:7d:82:
6d:63:dd:06:d7:65:23:71:cf:37:ca:60:4d:1b:d1:
37:53:5f:f8:42:f7:9f:74:d3:4a:bd:97:5e:d5:4b:
df:4c:36:cf:91:f0:ae:24:67:53:e0:e5:44:76:73:
50:a9:d8:88:ec:df:ae:58:85:5b:8e:b6:73:a2:d8:
db:bf:10:26:65:83:4c:5d:78:39:34:3a:86:fb:04:
36:0b:bc:16:36:fb:f3:72:8b:39:aa:c2:19:8d:d8:
5b:e9:82:bc:5d:d0:ad:6d:8d:d8:f5:d4:80:fe:f9:
1e:61:33:de:f8:e5:cf:89:1a:11:e8:f4:02:03:c0:
ba:fd:71:30:99:21:f3:ba:cd:62:fe:47:b3:ee:19:
32:99:8e:6d:95:49:7b:e6:8a:69:9f:fb:72:f6:54:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D1:F6:38:79:F7:DF:78:63:10:EC:1A:5E:66:99:3E:D9:15:DE:D7
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:59:6c:e4:36:06:2a:16:28:0b:86:46:44:ad:d0:4c:a7:5f:
8a:ef:56:15:b8:d1:c9:dd:e8:fb:15:ab:f6:45:7b:65:3b:11:
65:dd:aa:9a:a7:cf:67:2e:ee:e1:80:8a:23:15:66:44:52:a4:
a1:b3:46:01:68:e8:a4:8b:ef:97:5d:d0:ea:62:59:5a:f5:39:
e4:d5:0f:51:45:4a:89:d1:d8:e3:1d:7a:57:b3:7c:56:82:8b:
61:cb:51:47:14:70:8a:3b:98:51:32:7d:bb:a0:cc:e3:ba:9c:
0f:ad:cd:92:96:86:27:2d:f8:c5:55:7a:26:91:52:ee:11:ff:
de:e8:ea:de:de:4e:23:9d:0b:7b:ee:02:d4:9c:15:fc:94:f6:
c7:ce:87:e3:15:66:8e:12:be:92:be:d8:cf:a8:60:87:19:e6:
cd:d4:99:89:21:86:a2:40:fc:95:67:70:87:06:d4:0f:7c:0d:
f7:98:f0:76:cb:9e:9d:91:52:aa:e6:dd:61:d4:a1:ad:20:63:
41:34:6d:d8:a9:1f:6b:cb:a7:d8:a2:29:c5:fe:97:51:12:58:
ce:fd:10:ca:41:c4:cd:1a:68:84:35:1b:2c:ee:61:90:b1:4a:
a6:49:d0:28:fa:81:99:13:ab:09:ca:6e:7a:27:c0:06:27:83:
65:6d:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:47:54 2026 by rpki-client