Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier: P5f1LEeJu1ONlDoBWvGEOhiQnlyGXjkGlWaDHJIsN08=
Subject key identifier: 60:38:B0:74:70:69:41:E8:26:82:DF:01:A5:7D:C1:FF:F1:0F:7F:E6
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer: /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial: 74628AC18FD0984DF4D614A0366F8E273CE301FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number: BD
Signing time: Tue 12 May 2026 12:44:11 +0000
Manifest this update: Tue 12 May 2026 12:39:11 +0000
Manifest next update: Wed 13 May 2026 13:46:11 +0000
Files and hashes: 1: AS210352.asa (hash: M8+p/q+fWYKtpnuLMBZfSfWyS3K0URFrC79TnsXorAY=)
2: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: CMtk+QRhXSGCKYXKsYozH2rX+pidGgxnJFObfUN1Qno=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:62:8a:c1:8f:d0:98:4d:f4:d6:14:a0:36:6f:8e:27:3c:e3:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Validity
Not Before: May 12 12:39:11 2026 GMT
Not After : May 13 13:46:11 2026 GMT
Subject: CN=6038B074706941E82682DF01A57DC1FFF10F7FE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:65:40:8c:93:b5:b1:46:66:38:23:ed:1e:
be:41:d1:9b:6c:f8:99:b9:bb:47:77:9f:d5:ef:ca:
dd:cf:aa:09:26:41:b8:22:b6:41:46:a1:d4:64:18:
16:c9:70:7a:6a:2b:b6:b3:fd:f4:5c:29:64:cb:e8:
26:16:41:50:ba:9f:2a:40:04:91:fc:ea:ac:44:d2:
f6:43:5e:7e:97:a3:6e:9e:3b:82:d1:cf:cd:92:3a:
db:7d:c2:a8:f4:bd:d0:2a:aa:0e:28:6c:0d:93:f0:
7c:d4:fc:05:e2:85:6e:94:d0:70:a0:63:9f:fb:9c:
b2:e0:16:13:f7:7f:44:6e:4f:2b:eb:58:1d:08:1f:
1d:c1:78:d7:61:85:27:fa:8d:df:fa:a2:9a:35:19:
0f:29:5a:3e:da:6d:9b:98:73:03:45:b9:42:b1:32:
24:3a:5d:52:cc:e4:d8:65:05:b8:b0:8d:7c:95:46:
f1:8a:0e:d3:79:a0:04:68:57:65:db:e8:00:e7:d2:
ba:2e:53:f0:23:4f:e6:16:49:a9:e1:65:8a:d5:05:
ca:19:ba:44:b9:3d:72:d9:7e:45:31:c4:9e:4b:82:
da:8d:d2:5d:80:5f:fa:44:20:1d:55:e6:86:54:3f:
66:15:6a:e2:6d:6d:84:01:2d:d9:dc:5a:58:35:e8:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:B0:74:70:69:41:E8:26:82:DF:01:A5:7D:C1:FF:F1:0F:7F:E6
X509v3 Authority Key Identifier:
keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3e:ba:ba:bb:54:89:42:5a:8b:30:98:c8:41:19:be:80:31:
a5:a4:47:df:4a:ae:fc:a6:e7:88:3b:d9:20:bb:57:37:08:67:
df:03:45:60:00:35:97:27:a8:b7:64:6b:99:7f:08:fd:ca:4c:
8c:6f:5a:be:27:00:cb:71:36:51:f6:88:5b:a4:dd:35:38:61:
22:1e:29:df:86:98:fc:c2:c3:9b:29:e5:23:8c:72:5a:85:08:
fe:07:f9:8e:81:38:95:84:87:c7:fb:ed:19:7f:a8:b4:b8:8c:
1d:a5:a7:71:96:de:3f:18:7f:b5:f8:0c:ea:f6:e4:66:f0:6c:
74:1e:66:ed:23:20:4a:f6:31:5b:ae:bf:71:1a:ab:54:68:56:
c1:02:af:a2:36:8e:1c:6c:bf:db:01:d2:a2:70:d2:e4:fe:6f:
4d:8e:80:98:01:9c:4e:c6:57:04:0e:7f:35:91:04:d2:3c:c1:
0e:49:7e:d3:df:02:ba:13:01:09:e3:12:72:a3:5a:3a:38:96:
c5:6c:43:19:6a:ae:33:c5:19:83:36:00:bd:1f:ca:04:0e:ac:
62:5b:2f:e3:3f:ab:46:d5:43:a0:b7:ba:ae:89:c4:43:9a:01:
c8:d6:0a:e8:a8:4a:2f:86:00:f2:71:4f:11:74:46:82:26:a9:
df:43:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:38 2026 by rpki-client