Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
File: BSL3Drmq76srTsTh4CLsBrVEeqg.mft (raw, json)
Hash identifier: DCZZTRRMWLzWBJe8thjYYSTmtQD7frNzVlcysHNuhXo=
Subject key identifier: A4:D1:4E:26:EB:1F:27:3F:1A:BE:87:0A:8D:F3:99:32:EF:94:DD:D9
Authority key identifier: 05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
Certificate issuer: /CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Certificate serial: 01A176281366736CBB59161E0C45AA42C438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
Manifest number: EA
Signing time: Mon 26 Oct 2026 03:01:40 +0000
Manifest this update: Mon 26 Oct 2026 03:01:40 +0000
Manifest next update: Tue 27 Oct 2026 03:01:40 +0000
Files and hashes: 1: BSL3Drmq76srTsTh4CLsBrVEeqg.crl (hash: eBH0FSKzpKCFmn//iuDVzZ6lf1Wa9WPSBibER+NF04Y=)
2: WA_ut0USwXJap-5nUQJ8KuZlhZ8.roa (hash: RswQlJLr5XOk/2t0RRal0mPaooe1UtDVQeW1q2GorOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:28:13:66:73:6c:bb:59:16:1e:0c:45:aa:42:c4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Validity
Not Before: Oct 26 03:01:40 2026 GMT
Not After : Oct 27 03:01:40 2026 GMT
Subject: CN=a4d14e26eb1f273f1abe870a8df39932ef94ddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:f0:3e:1a:6e:ab:e2:c9:bd:6b:38:99:1b:
19:b3:08:6e:4c:23:03:e1:48:e4:71:ce:ca:09:60:
01:72:da:64:e5:04:75:b6:c7:be:22:7e:98:b8:15:
80:b5:46:4c:c5:7d:ae:92:db:1b:24:2d:40:fc:98:
a0:28:a3:0e:6b:7c:db:0f:6a:2a:18:7a:c8:87:0b:
70:fb:71:ba:b8:1a:cc:f9:ef:2c:4c:ce:cb:58:fe:
4d:e4:16:5f:33:55:96:8e:8d:7d:3b:67:73:b4:a3:
ab:c2:b2:90:c2:5b:8a:b9:0a:0c:25:9f:34:2b:d6:
6e:da:63:4b:ad:cf:f0:f6:da:b5:53:a3:35:25:9c:
72:0a:74:fb:df:b7:c3:b5:fd:dd:14:cc:9a:51:e7:
9d:9c:84:d4:3d:38:97:fe:22:2e:69:6d:36:a4:a8:
5c:8b:9a:96:41:50:39:51:7b:89:3a:e0:1a:00:d9:
73:76:a8:43:c8:08:5a:64:19:84:4a:db:41:2d:b6:
37:30:62:ff:6b:20:97:11:6d:8e:d3:28:b3:15:b2:
d7:b5:55:56:21:8d:45:a3:f6:f4:9b:6d:8c:0a:2c:
6a:62:fa:0b:42:22:7e:11:e0:cd:2e:41:06:94:07:
8c:99:b1:11:74:cf:b2:be:fc:29:df:50:20:e9:74:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:4E:26:EB:1F:27:3F:1A:BE:87:0A:8D:F3:99:32:EF:94:DD:D9
X509v3 Authority Key Identifier:
keyid:05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:54:59:7f:f8:35:41:33:6d:5e:87:c2:bd:61:4c:eb:4a:f5:
c7:33:f6:b0:18:23:90:06:fc:53:01:e1:45:22:c3:c1:ff:c3:
b9:39:2e:2d:c6:89:67:47:ac:84:83:e8:bc:5e:f9:99:0d:fa:
3a:9b:e9:a0:75:18:d9:9a:4b:c5:20:d2:9b:cb:0c:5a:95:19:
bf:35:25:0c:fe:ee:43:e0:5b:37:a5:2a:69:be:3b:c9:78:97:
ca:15:b5:00:28:49:e0:01:00:9e:e9:c8:19:23:8a:96:ef:1e:
90:c8:ac:6d:0f:b3:ab:79:d8:f8:24:37:06:bf:af:fd:5d:ba:
57:35:e5:bc:4b:13:fe:df:7c:78:4b:a7:bc:51:e7:cd:f0:34:
27:46:aa:aa:58:e9:a1:0a:06:f8:51:a3:b5:42:f9:d4:6e:e3:
1e:5b:dc:da:08:4d:bb:b0:8f:25:d1:ac:5f:3e:1d:25:de:66:
f4:a1:49:2d:f0:eb:e6:90:91:8b:c5:bd:31:2c:36:f5:a6:32:
d7:1c:52:8e:3c:a2:3f:d1:8a:8d:62:d4:5b:27:75:c5:ac:78:
ad:13:89:17:ad:fc:a7:b1:6c:87:88:92:31:f2:26:3c:36:08:
d8:c3:b4:62:52:c8:5d:90:73:5b:f9:9a:b7:9d:96:8e:87:e1:
31:3b:c2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:45:29 2026 by rpki-client