Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: QnupO0fdnFO9DIe++vS1ncz/LY4vSSfpoFD7VvYgZQU=
Subject key identifier: 02:51:1B:52:3C:84:79:81:53:90:63:7F:CB:7E:EB:EC:CC:4A:9D:05
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 019E30A9CCCE7EE1AC0C9C01144094A782E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 0987
Signing time: Sat 16 May 2026 12:01:34 +0000
Manifest this update: Sat 16 May 2026 12:01:34 +0000
Manifest next update: Sun 17 May 2026 12:01:34 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: ERI4KErmk3e8ZUbzk21MwEN9Q8DC2F1ZVtcJHfFyLLI=)
2: NBGlz4BOwm_Rb4kwh-h4UA65oDk.roa (hash: Ugv5nwQuiMqwOwqv6jAyXgwzxe6xlFAAFYW63xYA81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:cc:ce:7e:e1:ac:0c:9c:01:14:40:94:a7:82:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: May 16 12:01:34 2026 GMT
Not After : May 17 12:01:34 2026 GMT
Subject: CN=02511b523c8479815390637fcb7eebeccc4a9d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:11:b9:da:c9:13:b7:8d:81:87:83:2c:9d:
eb:30:d4:2c:de:c1:5a:be:d9:60:e1:da:cf:65:d8:
33:79:bb:ba:59:c4:e1:36:31:7a:da:b4:59:91:52:
04:7b:f1:cb:e9:a8:3d:53:a5:f2:bc:74:61:26:4d:
c4:ec:23:06:6c:01:64:2f:7c:4c:8d:95:59:75:9f:
d0:01:b6:7b:fe:2e:fc:61:41:1d:84:ec:86:55:2e:
9a:a2:77:a0:88:5a:84:ce:d3:04:58:69:f7:4c:cb:
69:c9:af:8d:05:fc:70:7b:76:65:09:27:58:aa:48:
7d:4e:63:5e:45:7b:a8:c6:03:f6:37:3a:52:29:1d:
d6:d3:e0:db:44:01:44:fd:c6:38:58:e5:09:3f:f1:
47:68:bf:19:b9:8b:f1:58:05:39:02:06:f3:dd:7a:
23:f6:a6:c7:70:0a:4b:9f:dd:ea:49:ce:cb:dc:d4:
04:de:ce:df:e5:39:ce:95:35:70:cd:1a:f3:e5:70:
84:66:9f:40:28:29:c0:fb:b8:5b:e8:ed:39:23:dc:
ee:de:20:c5:31:75:35:ff:d7:48:15:e8:a5:11:c0:
e4:2b:ed:01:c8:df:2a:e6:ca:59:3e:fb:06:4e:3d:
f4:75:85:f5:d8:96:0f:c2:fd:d2:54:0b:4d:77:00:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:51:1B:52:3C:84:79:81:53:90:63:7F:CB:7E:EB:EC:CC:4A:9D:05
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:78:54:e5:d6:89:1a:cd:10:3e:15:29:6f:b4:d8:c5:29:25:
0e:6b:f4:d7:5b:67:5e:43:ca:7a:5c:95:dc:97:b2:43:bb:ce:
3b:26:a5:fa:42:6d:b1:12:08:06:76:a4:40:cb:a5:12:9b:6f:
86:1c:4f:aa:22:ab:7c:cb:64:37:6e:4b:dd:fb:3f:0d:16:ae:
18:0f:68:69:74:59:fa:3b:bf:ac:02:fa:1d:69:5b:87:02:d8:
b0:d8:86:d0:0f:4b:72:de:a7:2c:ab:5e:a5:36:f5:06:fd:0b:
d9:dd:36:67:f7:e4:6c:38:f9:e2:ec:39:f5:a3:b7:7f:7c:3d:
72:66:ec:e0:5f:54:a7:98:4c:30:82:21:2f:60:2d:72:6d:4b:
84:a0:65:70:b8:fb:40:f3:d0:14:39:49:34:be:c0:02:03:22:
c8:68:e6:50:d9:ea:1b:b0:60:65:3e:2f:2d:e9:56:e7:f0:db:
77:21:56:07:d8:32:16:2e:35:67:2d:35:a9:04:5c:15:d9:1f:
da:81:ae:fd:e6:c0:e3:fa:f2:91:9f:c9:95:be:2e:3f:c5:35:
65:d2:b6:34:c9:30:76:cf:93:1b:e9:b1:e2:3e:73:77:d2:9f:
4c:31:f0:65:22:1a:06:ae:7f:c7:aa:22:b7:8a:6a:93:ac:e9:
3e:54:ac:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqczOfuGsDJwBFECUp4LpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Yzc0NmNkN2Q0ZGY5NWE2ZDAzY2E5NTU0YTc1NDc2MGQ1
ZTRlMDYwHhcNMjYwNTE2MTIwMTM0WhcNMjYwNTE3MTIwMTM0WjAzMTEwLwYDVQQD
EygwMjUxMWI1MjNjODQ3OTgxNTM5MDYzN2ZjYjdlZWJlY2NjNGE5ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dcRudrJE7eNgYeDLJ3rMNQs3sFa
vtlg4drPZdgzebu6WcThNjF62rRZkVIEe/HL6ag9U6XyvHRhJk3E7CMGbAFkL3xM
jZVZdZ/QAbZ7/i78YUEdhOyGVS6aonegiFqEztMEWGn3TMtpya+NBfxwe3ZlCSdY
qkh9TmNeRXuoxgP2NzpSKR3W0+DbRAFE/cY4WOUJP/FHaL8ZuYvxWAU5Agbz3Xoj
9qbHcApLn93qSc7L3NQE3s7f5TnOlTVwzRrz5XCEZp9AKCnA+7hb6O05I9zu3iDF
MXU1/9dIFeilEcDkK+0ByN8q5spZPvsGTj30dYX12JYPwv3SVAtNdwBUmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJRG1I8hHmBU5Bjf8t+6+zMSp0FMB8GA1UdIwQY
MBaAFAbHRs19TflabQPKlVSnVHYNXk4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYt
YjBhZmQ0NWRjZDc4LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYtYjBhZmQ0NWRjZDc4
LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHhU5daJ
Gs0QPhUpb7TYxSklDmv011tnXkPKelyV3JeyQ7vOOyal+kJtsRIIBnakQMulEptv
hhxPqiKrfMtkN25L3fs/DRauGA9oaXRZ+ju/rAL6HWlbhwLYsNiG0A9Lct6nLKte
pTb1Bv0L2d02Z/fkbDj54uw59aO3f3w9cmbs4F9Up5hMMIIhL2Atcm1LhKBlcLj7
QPPQFDlJNL7AAgMiyGjmUNnqG7BgZT4vLelW5/DbdyFWB9gyFi41Zy01qQRcFdkf
2oGu/ebA4/rykZ/Jlb4uP8U1ZdK2NMkwds+TG+mx4j5zd9KfTDHwZSIaBq5/x6oi
t4pqk6zpPlSs2A==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:44 2026 by rpki-client