Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
File: BSL3Drmq76srTsTh4CLsBrVEeqg.mft (raw, json)
Hash identifier: nJs+Gn3DO//wV0Jdiu1lyfqpXbnVmtkfEoPluRWwO18=
Subject key identifier: E6:FD:F4:67:D1:70:A3:F8:A0:CC:BE:AC:B8:20:C3:6E:A9:4E:2B:14
Authority key identifier: 05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
Certificate issuer: /CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Certificate serial: 01A040BBD7DE6E0B15545D78BA2F0F174393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
Manifest number: 48
Signing time: Thu 27 Aug 2026 01:00:47 +0000
Manifest this update: Thu 27 Aug 2026 01:00:47 +0000
Manifest next update: Fri 28 Aug 2026 01:00:47 +0000
Files and hashes: 1: BSL3Drmq76srTsTh4CLsBrVEeqg.crl (hash: RawMvqUAEGR3RE8NF/n2Sk8jUhj7KrkG07v1sgfsd7Y=)
2: uqf0NqEmEtW9g1zp6LsgLBDNkA0.roa (hash: nfv/SExuImIwGY8sYIZ92OGt7LWODVCJxszD6Vhf6s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:d7:de:6e:0b:15:54:5d:78:ba:2f:0f:17:43:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Validity
Not Before: Aug 27 01:00:47 2026 GMT
Not After : Aug 28 01:00:47 2026 GMT
Subject: CN=e6fdf467d170a3f8a0ccbeacb820c36ea94e2b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:be:0d:d3:b6:dc:18:04:0f:59:89:51:c6:d6:
ba:17:45:ba:5c:ac:37:36:37:1b:7d:2a:6b:13:81:
2f:17:30:66:b0:bc:5b:bf:7d:e0:12:9f:81:3a:1a:
c8:69:7d:16:cb:7f:9e:aa:3c:ea:12:7f:78:ab:9c:
57:ea:c2:8d:57:ba:f3:b3:19:89:1d:78:8a:f6:51:
0f:01:23:1f:65:73:15:4b:9b:d1:dd:f4:d4:01:2a:
f5:e1:f8:11:08:3a:69:2e:a1:7d:7f:05:85:dd:0d:
49:42:38:f3:19:d9:98:cc:32:51:bb:dc:99:bb:18:
78:3d:11:f4:8a:85:ea:cb:bc:34:81:7a:90:90:55:
97:22:37:e1:52:6d:a6:b8:99:1f:31:a2:80:84:92:
59:82:90:38:50:f5:bd:b2:d6:3e:12:61:8f:c8:9e:
fe:c3:9b:33:c5:80:d6:6a:b6:ce:53:ed:6e:e4:d7:
22:15:41:e3:59:e9:52:15:69:a6:cc:3c:36:e0:87:
5e:44:89:8f:94:8a:ba:37:37:28:5d:6d:f6:a3:83:
1e:e6:1e:aa:3e:b9:a2:3e:b1:13:76:4e:67:47:74:
80:9f:d6:9b:1d:68:bd:8f:b5:80:ae:ab:a2:ea:98:
2e:9e:eb:fb:a0:1c:59:17:f7:ce:51:a3:62:5e:d1:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FD:F4:67:D1:70:A3:F8:A0:CC:BE:AC:B8:20:C3:6E:A9:4E:2B:14
X509v3 Authority Key Identifier:
keyid:05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d2:d3:6f:d9:c9:b5:cf:41:14:b5:58:09:cd:bc:2a:a8:77:
47:4e:11:f9:3a:14:df:be:71:9a:d3:52:a9:ba:14:e1:0a:b4:
4e:81:2f:32:be:d2:c3:93:01:26:6b:ac:5c:96:0e:6c:ad:81:
f1:00:41:a5:63:82:f7:92:3e:66:be:c4:ad:6e:63:69:a7:d1:
6e:04:64:16:20:32:93:f3:6d:81:0f:23:a8:74:1e:c3:91:56:
29:d5:a9:0e:33:21:75:d8:8e:cd:ef:6b:84:78:08:13:1a:54:
68:84:ce:50:a1:60:fe:91:88:06:a9:f2:1f:97:cb:da:cc:64:
a3:52:6e:b9:1f:4a:61:d7:d4:e4:81:6f:dd:03:ef:6e:c1:5d:
03:84:9a:25:ea:3e:13:26:39:39:a4:d7:12:98:ac:72:10:0b:
af:d4:65:25:d1:ab:24:fc:83:96:7f:37:5c:90:61:30:1c:4a:
fe:fd:4b:46:95:03:9d:09:a3:aa:bb:12:78:c5:a6:89:2d:f3:
19:6a:6b:b1:61:7f:c5:63:ef:81:e2:05:aa:73:46:d4:d7:90:
5a:17:93:20:72:32:9b:ae:05:78:59:74:42:b8:2f:08:f9:c3:
3a:fc:04:e3:63:6b:9e:65:79:f8:51:15:3c:3f:bc:64:8d:91:
69:1d:66:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:29:32 2026 by rpki-client