Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: 8vf20NZEF7rhMJPHuVX40j+oGGVCgskswz3GV0umeOw=
Subject key identifier: 30:AE:15:29:8A:E0:E4:BD:55:D1:28:A2:D9:41:43:DF:BB:C3:5E:08
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 01A0B4D1DD4F1480E37A98CAF4E3A70ACC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 0CD7
Signing time: Fri 18 Sep 2026 14:00:47 +0000
Manifest this update: Fri 18 Sep 2026 14:00:47 +0000
Manifest next update: Sat 19 Sep 2026 14:00:47 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: sTvB6wM2cd4ZJhUA/XfJZ0mG61uhRZZJAkZul46GcoY=)
2: wPZBSgFASeM9SaWJvAkRGk-7twQ.roa (hash: R3wosEg+LuaaoBj4e/mPNIMyKN6NLJP5v9wAW4ICOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:d1:dd:4f:14:80:e3:7a:98:ca:f4:e3:a7:0a:cc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Sep 18 14:00:47 2026 GMT
Not After : Sep 19 14:00:47 2026 GMT
Subject: CN=30ae15298ae0e4bd55d128a2d94143dfbbc35e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:eb:7d:95:a8:e8:49:df:34:e9:a1:81:f4:
33:99:e6:e2:38:4a:e1:6b:bf:4b:2c:cd:66:9a:06:
10:3a:a4:cc:cb:ac:8a:f4:d7:a3:ac:d9:29:36:b2:
81:2b:3c:74:40:f3:88:74:7f:35:24:90:30:c0:54:
a2:43:94:9e:93:80:f8:30:36:67:8a:51:d9:38:ae:
91:55:b4:6d:93:5e:28:9a:e7:cc:c6:e1:a1:77:90:
91:ab:42:8c:0f:6a:98:c4:9d:66:6c:80:ae:3e:6b:
7a:bd:7a:35:b8:f4:ab:b4:5b:89:ab:c2:57:a8:9d:
5b:9a:a7:57:01:5b:a7:46:cd:8d:40:80:5b:9b:91:
d9:b5:be:7c:34:85:11:8f:59:6e:ea:c2:43:61:72:
01:be:f7:91:9e:34:f7:64:ce:42:f6:e8:14:b4:b8:
28:29:ed:53:df:7f:fb:11:46:fb:c1:52:ea:a3:67:
5d:63:8e:40:ee:a8:a5:b0:fc:24:fa:26:2b:ba:3e:
8a:af:ba:c5:66:53:c0:d2:4b:b3:10:0c:01:fa:43:
8d:bc:37:0b:1c:27:6b:1b:0b:12:3d:db:41:61:bf:
86:d4:c4:5d:e8:fd:7e:fb:fa:18:94:af:ef:29:02:
be:90:b4:19:18:16:2e:00:4b:e3:75:a3:43:e6:a6:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:15:29:8A:E0:E4:BD:55:D1:28:A2:D9:41:43:DF:BB:C3:5E:08
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b6:e8:8e:8a:ac:c4:02:a4:c9:0b:41:00:b6:b7:8b:a5:96:
f1:23:38:10:7f:4d:79:b7:b3:8d:7d:b9:43:d5:44:f6:0c:b8:
e4:ff:ec:ac:4b:ea:d4:1e:0d:4b:f6:9b:b6:47:9e:20:ed:a4:
e9:e9:9e:5c:0d:9f:14:5b:03:6d:55:dd:3a:23:83:17:04:1e:
a4:7d:41:b6:f7:d4:e4:56:44:52:e2:62:48:bd:d6:3d:cb:bc:
95:9d:85:d8:6f:39:b5:2e:3b:9d:49:86:ca:0e:09:88:5e:0f:
56:28:ad:fb:98:39:8c:30:11:07:ef:2f:95:25:d5:2e:af:e7:
31:b3:cc:86:82:db:d2:f8:9a:ce:8f:15:72:63:2c:7f:7c:cb:
ec:dd:a5:16:33:94:da:24:26:78:ff:90:26:6d:cc:b5:bf:20:
7a:e2:8d:27:a1:87:d2:ab:5a:94:89:2d:e9:b0:76:cf:8a:3d:
37:ae:23:a5:2a:f5:c5:a2:b2:35:64:14:8f:4a:f7:7c:e1:ae:
9b:5a:46:91:f6:68:b0:c5:04:0c:02:0f:31:9d:87:04:ea:c5:
ab:54:b6:81:42:c2:71:93:97:26:65:62:1f:5d:3a:94:17:3e:
3f:4f:ce:1b:eb:b0:97:2e:da:6a:48:e4:75:18:51:a0:29:35:
a5:e7:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:03:06 2026 by rpki-client