Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier: kGxi/NHxtKJEGlVaf7R33ucDw1n4FnNASp70gf0CzKA=
Subject key identifier: A7:B3:37:AC:A8:20:66:BC:46:03:DB:B6:27:D0:41:3A:99:FC:3F:08
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer: /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial: 23AAAD4409F0EAE976534DAB71B1B11C62830E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number: 7E
Signing time: Wed 25 Mar 2026 23:17:56 +0000
Manifest this update: Wed 25 Mar 2026 23:12:56 +0000
Manifest next update: Fri 27 Mar 2026 02:27:56 +0000
Files and hashes: 1: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: ZXl2XG9qh/+r17VLJAEPqnYCZGVIuQmR9DYwDILdojg=)
2: AS210352.asa (hash: yJKjNm+xhc7AeViPGq0DwAZi8QKfbStRh5PMX1pqlWs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:aa:ad:44:09:f0:ea:e9:76:53:4d:ab:71:b1:b1:1c:62:83:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Validity
Not Before: Mar 25 23:12:56 2026 GMT
Not After : Mar 27 02:27:56 2026 GMT
Subject: CN=A7B337ACA82066BC4603DBB627D0413A99FC3F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:54:d7:e9:88:77:9e:51:e8:47:c2:ac:4d:
17:93:6f:17:2e:27:5c:08:87:41:8c:89:9a:cd:0f:
d9:c8:83:72:f8:04:51:d0:4f:38:9e:0b:bb:42:98:
c4:a9:e5:dd:e2:1b:90:e3:ca:e3:12:95:88:c1:1e:
a8:83:0e:00:dc:cb:d0:45:00:8a:a6:d4:bc:19:73:
19:5c:6c:8d:28:40:89:9f:bc:c4:29:f4:b2:9c:58:
6b:0a:66:f5:f1:72:63:54:09:96:be:21:b6:6c:2c:
4f:f3:48:16:29:26:a6:3e:bb:00:41:6b:6a:5f:d7:
95:b0:43:5e:40:06:c0:89:22:73:d3:5c:99:b7:cf:
4e:bf:33:8c:23:12:d9:ce:63:aa:d7:83:cb:7a:7e:
bd:02:30:46:03:e3:1d:16:a1:3b:ec:a7:f3:9e:16:
01:e5:09:12:5b:c7:1b:24:da:25:ec:4d:6a:1f:c0:
fa:b9:19:4d:3d:f1:0f:8a:e4:4c:ef:27:23:7f:66:
51:a5:b6:ec:f2:1b:af:36:e8:ab:31:0f:c9:26:34:
51:ca:70:1f:00:fa:a4:65:3d:dc:49:b1:2c:85:4a:
6c:d5:99:b9:38:39:bd:9a:69:af:23:f8:c8:26:72:
fa:e7:2d:1c:cf:90:f7:a1:77:a8:6a:25:9e:92:a1:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B3:37:AC:A8:20:66:BC:46:03:DB:B6:27:D0:41:3A:99:FC:3F:08
X509v3 Authority Key Identifier:
keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a0:a6:62:7e:bd:84:29:89:ff:16:cb:10:f1:88:7a:cb:56:
a3:f0:61:19:e2:02:4e:36:0a:91:4e:61:b1:cb:38:a7:07:e9:
7a:0c:39:e6:f9:2d:c0:00:ad:9d:16:29:94:e1:65:f1:0d:55:
e2:02:44:4c:2d:8c:c1:2c:79:28:e5:99:49:cd:31:6d:f1:d0:
c9:7d:e6:cb:64:f8:55:83:9f:f3:5e:6b:09:1a:b1:0d:05:80:
5e:1f:e5:d3:20:d5:71:ae:a2:8b:a5:28:ff:95:03:e7:37:67:
1d:eb:48:6d:dc:90:f9:fa:c2:aa:66:15:7c:7c:a2:a4:ba:76:
17:61:95:9d:d6:8a:2d:b0:7f:e8:dd:ac:8b:6c:97:54:d8:16:
d6:94:c3:4e:3c:7c:a7:9a:d6:a8:7d:40:06:43:9e:42:19:fa:
be:85:97:80:e3:a5:d0:9d:11:3f:61:a0:2a:60:9c:ec:d6:bf:
ef:6c:29:0f:cd:0e:16:b3:61:be:54:39:25:27:6a:62:9b:f3:
a5:60:8b:87:36:79:ab:e8:42:7a:37:9f:61:86:7e:de:6a:55:
1b:50:af:10:b4:3e:8d:7f:f3:ce:11:6a:7e:4c:d8:af:a4:04:
b9:01:f8:8a:76:b0:0d:fa:7f:d5:5a:00:0e:03:6d:d5:5e:59:
7e:8c:7b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:31 2026 by rpki-client