Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: kBXRFYlU/klXZd9Vy+qfG75qJEkK4oMbQTCP0hNoarA=
Subject key identifier: 30:8D:19:6C:19:DE:0A:19:0D:DD:FB:9B:DA:D8:C8:FB:A9:C3:3B:28
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 019D39777A9322400EFBE8880BE2AC2BCCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 0907
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: +0plmq+mujyeUNwgw6dYu1Cd1QSPIMI+ClhCBGfRMJ0=)
2: NBGlz4BOwm_Rb4kwh-h4UA65oDk.roa (hash: Ugv5nwQuiMqwOwqv6jAyXgwzxe6xlFAAFYW63xYA81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:7a:93:22:40:0e:fb:e8:88:0b:e2:ac:2b:cc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=308d196c19de0a190dddfb9bdad8c8fba9c33b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:d5:94:0a:49:e5:d2:49:49:0a:c5:66:61:
a8:44:7e:38:f8:e7:5b:f2:18:ae:aa:b0:08:ba:ef:
d8:82:65:1f:95:e2:37:6e:11:1e:57:bd:b5:13:6a:
34:34:2d:6a:15:9a:b6:ab:99:96:b4:7a:38:fc:76:
36:8e:96:b3:dd:7b:ac:b3:d2:06:21:b6:08:3e:87:
2e:f2:92:b4:a6:3b:d3:71:40:7e:c5:cb:7b:13:44:
d1:49:23:da:1d:07:23:5d:03:ff:31:6c:f0:c7:0b:
72:39:1c:9d:b3:8d:c0:ff:57:8a:dc:61:86:b5:08:
07:1d:78:d7:ca:d4:08:b3:87:f5:91:1a:78:85:18:
08:db:25:3a:ac:19:21:6d:33:fb:98:90:7e:55:c7:
6e:09:94:b2:a3:cb:39:0b:fc:2f:0c:89:ec:7b:16:
dc:5a:99:73:7a:77:da:88:31:6a:cc:8b:ed:b1:ac:
17:f9:b1:2b:4a:16:0c:1b:2c:14:80:1e:25:0e:66:
4c:d4:55:f6:51:da:08:04:6f:6c:60:19:25:12:cd:
40:62:1a:f4:10:18:3e:99:52:89:a3:96:7f:aa:dc:
9f:6f:73:97:95:c4:e1:cc:ad:84:9c:6d:e7:66:1c:
76:0c:9e:77:11:e1:3a:93:93:c2:df:c8:56:f4:98:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:19:6C:19:DE:0A:19:0D:DD:FB:9B:DA:D8:C8:FB:A9:C3:3B:28
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bb:83:9b:7e:a4:56:5b:dd:c1:fe:14:76:ec:05:de:ae:ec:
97:c7:6d:ed:da:5e:4f:2f:0d:7f:d4:bd:72:43:e8:7d:b8:f9:
8b:d7:65:92:b9:73:f7:76:25:19:54:d2:a2:44:54:ea:05:03:
89:93:6f:86:2c:e0:6b:24:fe:94:d6:16:a3:01:09:c0:3a:f7:
12:fd:25:49:c4:f4:11:fd:04:9d:57:7e:70:85:4a:8d:b9:b4:
cf:cb:7c:c9:bf:c1:ea:1d:d8:55:7a:8d:ed:3a:a2:35:7e:71:
39:47:1e:4e:b4:0f:c8:2a:d5:8b:41:31:ca:da:d2:3c:41:1c:
5e:b6:d6:d6:4f:50:ac:0f:05:75:cd:6e:06:be:cb:a8:60:c8:
8d:dd:e7:aa:6f:0d:54:e9:7a:a4:d6:48:7c:21:d0:18:4f:fd:
58:27:dd:46:96:40:27:63:36:ce:2f:df:c1:76:e6:a8:f7:48:
f1:0a:ac:f5:e0:23:ff:a7:5b:12:c4:85:85:6b:d2:b0:de:18:
9c:bf:f2:be:b5:0d:b5:95:a5:56:3f:e5:34:7d:40:6d:80:46:
79:af:1c:b2:5e:e8:db:be:24:c1:a6:dc:0f:c8:3e:e3:20:92:
43:25:1e:3a:57:63:85:e3:4b:b1:8d:34:9f:4c:f5:89:71:cb:
73:08:76:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d3qTIkAO++iIC+KsK8zjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Yzc0NmNkN2Q0ZGY5NWE2ZDAzY2E5NTU0YTc1NDc2MGQ1
ZTRlMDYwHhcNMjYwMzI5MTIwMDI0WhcNMjYwMzMwMTIwMDI0WjAzMTEwLwYDVQQD
EygzMDhkMTk2YzE5ZGUwYTE5MGRkZGZiOWJkYWQ4YzhmYmE5YzMzYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrjVlApJ5dJJSQrFZmGoRH44+Odb
8hiuqrAIuu/YgmUfleI3bhEeV721E2o0NC1qFZq2q5mWtHo4/HY2jpaz3Xuss9IG
IbYIPocu8pK0pjvTcUB+xct7E0TRSSPaHQcjXQP/MWzwxwtyORyds43A/1eK3GGG
tQgHHXjXytQIs4f1kRp4hRgI2yU6rBkhbTP7mJB+VcduCZSyo8s5C/wvDInsexbc
WplzenfaiDFqzIvtsawX+bErShYMGywUgB4lDmZM1FX2UdoIBG9sYBklEs1AYhr0
EBg+mVKJo5Z/qtyfb3OXlcThzK2EnG3nZhx2DJ53EeE6k5PC38hW9JjDOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCNGWwZ3goZDd37m9rYyPupwzsoMB8GA1UdIwQY
MBaAFAbHRs19TflabQPKlVSnVHYNXk4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYt
YjBhZmQ0NWRjZDc4LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYtYjBhZmQ0NWRjZDc4
LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbuDm36k
Vlvdwf4UduwF3q7sl8dt7dpeTy8Nf9S9ckPofbj5i9dlkrlz93YlGVTSokRU6gUD
iZNvhizgayT+lNYWowEJwDr3Ev0lScT0Ef0EnVd+cIVKjbm0z8t8yb/B6h3YVXqN
7TqiNX5xOUceTrQPyCrVi0ExytrSPEEcXrbW1k9QrA8Fdc1uBr7LqGDIjd3nqm8N
VOl6pNZIfCHQGE/9WCfdRpZAJ2M2zi/fwXbmqPdI8Qqs9eAj/6dbEsSFhWvSsN4Y
nL/yvrUNtZWlVj/lNH1AbYBGea8csl7o274kwabcD8g+4yCSQyUeOldjheNLsY00
n0z1iXHLcwh2tA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:12 2026 by rpki-client