Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier: ks4nASxJUrKjRUIMh14njqPgyQ3m5Cdq2dXDF/kqwUE=
Subject key identifier: 28:7B:D1:39:D4:8F:07:1C:47:53:B8:BC:85:CC:4E:F4:D7:55:E7:0B
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer: /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial: 772935F59BC3EB369FA2C217F707F02DF00AFDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number: 0171
Signing time: Wed 23 Sep 2026 11:16:53 +0000
Manifest this update: Wed 23 Sep 2026 11:11:53 +0000
Manifest next update: Thu 24 Sep 2026 14:31:53 +0000
Files and hashes: 1: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: NfD8AvOe8CqGeMVTEj1Xce3Rha/XryvrekSbEdU/BU8=)
2: AS210352.asa (hash: WqkTlne3/PzZhS7gktPpiLfhPwbSstLzxT2iS1wyOYc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:29:35:f5:9b:c3:eb:36:9f:a2:c2:17:f7:07:f0:2d:f0:0a:fd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Validity
Not Before: Sep 23 11:11:53 2026 GMT
Not After : Sep 24 14:31:53 2026 GMT
Subject: CN=287BD139D48F071C4753B8BC85CC4EF4D755E70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:31:78:65:a8:87:1b:e0:5e:e2:3b:18:21:
d0:a0:59:46:54:9a:07:ae:0e:5f:4c:f1:bb:f6:19:
b8:09:55:13:45:6d:bf:cf:76:e6:35:45:6f:c2:79:
c0:02:de:3b:2b:57:29:61:d5:d2:74:3a:dc:da:4d:
d2:a1:5c:24:ac:5d:66:c2:e1:c6:5d:3a:52:7d:aa:
2f:dc:af:55:b0:f6:79:b9:25:cc:ed:e5:cd:b5:31:
05:fc:4c:81:9f:a9:3d:2a:88:29:b9:4d:13:e3:b9:
14:fa:0f:bd:0f:ba:6c:fb:08:10:fe:a6:cf:3c:b9:
51:8a:b4:b3:0a:b0:f0:f2:d4:7b:15:2c:62:1a:00:
3d:58:35:64:87:27:56:97:09:b4:8c:81:1d:4c:1e:
e8:d0:0a:66:c2:33:80:54:35:e0:8d:6a:44:7c:19:
0c:21:c1:01:cd:c6:45:a6:30:e3:94:66:ec:7b:0d:
0b:b9:e3:18:ff:e1:5c:fb:9d:42:c1:81:72:2b:4b:
32:b8:0b:cb:f6:70:d5:dc:54:8a:28:10:0c:0c:36:
6b:be:1e:12:cb:73:eb:9a:8d:89:66:42:10:cd:8c:
20:29:08:f5:da:60:56:c9:4e:8c:ba:ba:ce:b2:b3:
41:3e:42:8f:2c:ab:1f:be:07:d9:b9:3f:6e:f9:e8:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7B:D1:39:D4:8F:07:1C:47:53:B8:BC:85:CC:4E:F4:D7:55:E7:0B
X509v3 Authority Key Identifier:
keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:37:4f:f2:2c:a0:43:21:ce:79:d8:b2:ac:e9:9b:bc:9c:a7:
64:fb:01:52:2a:d1:e3:1e:fe:ee:4d:6f:72:0d:35:5a:1e:fe:
90:a2:71:3b:c1:4e:6e:f9:e0:2c:22:cb:d3:20:55:b5:76:11:
9b:dd:a7:0d:dc:1a:87:d0:44:c4:2f:70:c4:10:68:23:61:9e:
3d:dc:b4:15:76:04:5f:9f:74:6d:26:04:7a:27:bf:08:1c:c4:
18:8d:8b:86:07:af:50:b9:c1:be:fe:17:d8:2e:be:d9:37:f7:
e3:6d:d2:d6:66:af:4b:94:d6:7b:46:27:bb:a1:69:d4:e8:7c:
df:a4:4a:96:fc:3a:c5:7c:08:9f:ff:93:7a:8b:a4:52:7b:31:
52:9a:c8:cd:94:75:81:eb:3f:d3:2c:57:d9:b6:99:43:f3:67:
40:46:19:79:ac:e4:0c:77:e5:0e:e8:55:cc:e3:9f:81:db:a3:
1c:af:8d:26:ea:df:7b:f0:31:43:cd:2c:fd:fb:fd:bb:b7:ae:
d6:5c:90:06:17:ce:80:4e:72:4c:d8:be:42:60:8b:64:9c:d3:
c2:c2:2c:fb:4e:3c:42:14:b0:14:7e:4c:08:a2:5c:56:c3:f7:
c7:03:30:1c:e5:a1:87:0f:00:ff:c9:62:75:f2:4a:46:8d:0e:
53:46:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:24:28 2026 by rpki-client