Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: h5DqRdSjfK1qGDojgC5YoajGxcNT/dTSNxABOxr/1Cw=
Subject key identifier: 8F:69:31:2F:9C:D0:7E:F6:87:2C:12:40:EF:63:4B:9D:C1:6E:AA:3F
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 01A00214048814F7CB4566B42265BABDC24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 0A78
Signing time: Fri 14 Aug 2026 21:01:01 +0000
Manifest this update: Fri 14 Aug 2026 21:01:01 +0000
Manifest next update: Sat 15 Aug 2026 21:01:01 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: Nstv2KC0KRX6vOHztdmLrrpjOQCsa+9DP4VuPUzh+5Y=)
2: NBGlz4BOwm_Rb4kwh-h4UA65oDk.roa (hash: Ugv5nwQuiMqwOwqv6jAyXgwzxe6xlFAAFYW63xYA81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:04:88:14:f7:cb:45:66:b4:22:65:ba:bd:c2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Aug 14 21:01:01 2026 GMT
Not After : Aug 15 21:01:01 2026 GMT
Subject: CN=8f69312f9cd07ef6872c1240ef634b9dc16eaa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:e1:0a:11:34:8a:06:30:83:4a:9d:8a:bd:
70:de:08:f7:04:0d:5b:80:03:3d:ba:b0:2a:4f:38:
4d:c3:53:cb:ee:dd:c9:fd:f1:b8:28:59:ea:f4:fa:
55:f2:71:a6:20:c9:db:49:b8:26:3e:5b:ee:d5:68:
bb:f8:b8:5c:0c:53:7f:79:0e:c2:07:b4:66:c6:f2:
f9:93:c4:69:fb:d3:db:7b:65:18:bb:3d:8c:be:ac:
54:5e:6f:98:fd:5d:23:ed:97:b2:57:84:86:57:6a:
bb:45:a0:f0:52:e2:82:06:1a:4a:40:bf:b4:53:8d:
e0:f8:cf:d8:1f:bb:c4:51:ca:ec:5e:f8:5e:e4:fb:
8b:7b:1d:83:5b:a1:5e:35:1c:69:a5:a6:bd:4a:a9:
b3:9b:4c:a3:47:5c:13:b1:45:60:79:85:a7:5f:c1:
41:e0:27:1d:48:4f:07:2f:a8:7a:c7:20:3e:2a:da:
5d:2b:77:5b:9b:1b:46:50:55:7e:05:75:c1:a8:5d:
51:a5:16:40:01:03:02:50:fe:93:9b:f3:08:85:a8:
d2:aa:31:2d:b3:51:5e:f3:48:33:17:f2:3f:3f:f3:
dd:dd:1f:a0:b3:8e:96:15:b1:73:a5:d1:6c:2f:d4:
d3:9a:98:e0:fd:95:d3:61:6a:27:55:7d:c8:38:6c:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:69:31:2F:9C:D0:7E:F6:87:2C:12:40:EF:63:4B:9D:C1:6E:AA:3F
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:d0:76:b7:b2:7a:60:00:d8:27:ec:ec:6a:75:ad:c4:c0:
34:61:3f:c5:8c:af:cc:92:ef:f9:2d:87:b4:ec:40:a6:45:2f:
8b:78:5f:f0:65:bb:bc:c1:ee:8b:94:dc:9b:5c:a0:d3:77:f0:
ed:58:6e:35:6d:d5:d9:2a:8a:d5:1a:8c:9c:3e:5c:da:6a:b0:
bc:3a:e4:47:20:44:23:83:d3:d9:05:45:a6:43:41:1e:c4:c2:
3b:ca:d1:79:5a:26:64:9d:b9:97:1d:07:19:39:35:42:19:f4:
58:c6:05:b1:ae:2c:21:db:91:d5:45:14:5d:c2:56:9a:0b:39:
8d:66:27:d5:23:61:87:20:3c:f0:fa:c4:48:4e:e6:79:0d:be:
f6:13:38:d2:cd:58:5c:c9:cd:0b:73:80:42:f3:f7:fa:04:00:
24:1a:66:90:cc:00:98:0f:0e:ad:41:01:f5:6c:67:d7:48:10:
f0:a7:d5:47:a3:84:38:db:e0:16:b8:ca:dd:0c:39:5c:5a:ff:
cb:50:43:f7:50:be:22:55:3f:69:7d:3d:fa:89:55:62:48:fa:
86:b2:a0:b3:17:ce:a3:64:88:99:ef:d8:f7:0e:60:06:a7:d1:
35:19:a4:40:31:69:0d:a6:0c:aa:15:cd:9e:5a:1d:a5:8e:9f:
00:82:23:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACFASIFPfLRWa0ImW6vcJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Yzc0NmNkN2Q0ZGY5NWE2ZDAzY2E5NTU0YTc1NDc2MGQ1
ZTRlMDYwHhcNMjYwODE0MjEwMTAxWhcNMjYwODE1MjEwMTAxWjAzMTEwLwYDVQQD
Eyg4ZjY5MzEyZjljZDA3ZWY2ODcyYzEyNDBlZjYzNGI5ZGMxNmVhYTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDrhChE0igYwg0qdir1w3gj3BA1b
gAM9urAqTzhNw1PL7t3J/fG4KFnq9PpV8nGmIMnbSbgmPlvu1Wi7+LhcDFN/eQ7C
B7RmxvL5k8Rp+9Pbe2UYuz2MvqxUXm+Y/V0j7ZeyV4SGV2q7RaDwUuKCBhpKQL+0
U43g+M/YH7vEUcrsXvhe5PuLex2DW6FeNRxppaa9Sqmzm0yjR1wTsUVgeYWnX8FB
4CcdSE8HL6h6xyA+KtpdK3dbmxtGUFV+BXXBqF1RpRZAAQMCUP6Tm/MIhajSqjEt
s1Fe80gzF/I/P/Pd3R+gs46WFbFzpdFsL9TTmpjg/ZXTYWonVX3IOGziywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9pMS+c0H72hywSQO9jS53Bbqo/MB8GA1UdIwQY
MBaAFAbHRs19TflabQPKlVSnVHYNXk4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYt
YjBhZmQ0NWRjZDc4LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYtYjBhZmQ0NWRjZDc4
LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdd7Qdrey
emAA2Cfs7Gp1rcTANGE/xYyvzJLv+S2HtOxApkUvi3hf8GW7vMHui5Tcm1yg03fw
7VhuNW3V2SqK1RqMnD5c2mqwvDrkRyBEI4PT2QVFpkNBHsTCO8rReVomZJ25lx0H
GTk1Qhn0WMYFsa4sIduR1UUUXcJWmgs5jWYn1SNhhyA88PrESE7meQ2+9hM40s1Y
XMnNC3OAQvP3+gQAJBpmkMwAmA8OrUEB9Wxn10gQ8KfVR6OEONvgFrjK3Qw5XFr/
y1BD91C+IlU/aX09+olVYkj6hrKgsxfOo2SIme/Y9w5gBqfRNRmkQDFpDaYMqhXN
nlodpY6fAIIjfQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:40 2026 by rpki-client