Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: RFkfAAWJpPQ/o4xiVBGDB2GpCl99v85UBFKn+2zW+U0=
Subject key identifier: 02:0E:DB:A3:20:D8:BE:9E:51:84:D2:D6:08:B0:0F:2A:4E:83:AD:52
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 019EDBAE044BD69A9BC872131DE837310E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 0BE2
Signing time: Thu 18 Jun 2026 17:01:14 +0000
Manifest this update: Thu 18 Jun 2026 17:01:14 +0000
Manifest next update: Fri 19 Jun 2026 17:01:14 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: 8drghBJPFN3IS5HYri8Ke5SyQySmktBY29hPV7vy6LQ=)
2: wPZBSgFASeM9SaWJvAkRGk-7twQ.roa (hash: R3wosEg+LuaaoBj4e/mPNIMyKN6NLJP5v9wAW4ICOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:ae:04:4b:d6:9a:9b:c8:72:13:1d:e8:37:31:0e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Jun 18 17:01:14 2026 GMT
Not After : Jun 19 17:01:14 2026 GMT
Subject: CN=020edba320d8be9e5184d2d608b00f2a4e83ad52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:91:ac:f2:a4:8b:6d:9e:c5:fb:df:01:8a:
5e:18:fd:1d:6d:ac:d1:c1:52:fa:15:88:71:44:f5:
ed:ab:df:88:05:c3:ba:95:62:c0:35:6f:27:8b:26:
2a:f9:88:6f:07:fa:03:f4:e1:f0:12:d6:9d:42:ca:
b7:5f:0d:9c:9c:26:b2:97:ab:31:b6:46:bd:aa:d0:
39:75:b6:6d:ff:ba:52:e1:10:88:f8:fb:a1:32:7b:
a9:59:c7:81:7b:ab:49:2b:db:7e:e3:19:b4:b4:cc:
30:bd:4f:00:43:46:77:84:73:19:b6:e2:21:a5:cf:
b3:6c:9c:64:e0:83:8c:a2:61:63:e4:e3:79:61:d6:
81:8a:ee:12:aa:0e:1f:36:b9:a5:62:ad:d8:b4:55:
9b:c1:41:e9:5c:12:94:78:ba:0a:22:d4:db:cb:07:
bd:8d:58:d5:38:74:20:5d:3e:f2:cc:cc:a1:7b:c0:
c9:22:f3:3b:b8:3b:78:90:38:bf:8b:20:08:f9:01:
2b:79:fa:30:a0:d4:4e:94:25:ac:93:39:be:a8:6f:
07:b6:70:14:b5:95:70:96:f7:ee:db:a6:6b:fd:d6:
be:99:65:3b:98:55:3c:48:ff:f2:df:e1:8f:de:44:
7d:21:5f:70:77:4c:ea:66:a9:a9:7b:b2:cd:c5:03:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:DB:A3:20:D8:BE:9E:51:84:D2:D6:08:B0:0F:2A:4E:83:AD:52
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bc:f8:7b:bb:7c:c4:e2:b7:7b:44:2e:cc:ad:c9:73:f7:cd:
77:dc:1f:f4:10:ab:27:64:07:5c:e0:2b:69:ed:b3:cb:80:c6:
9f:69:2e:f7:0c:8f:ac:72:03:21:31:3c:8f:40:b5:1a:cd:c6:
07:88:4d:60:55:00:cd:14:49:28:68:75:35:a4:ab:7f:3b:16:
9f:60:8a:05:96:92:28:02:4b:5d:16:1d:b7:d3:d5:09:42:87:
b6:e3:3f:24:9d:e7:b4:83:60:97:4a:1e:a9:e5:85:ee:3b:1e:
25:a8:94:cf:9e:59:92:79:36:3c:5c:73:a0:1f:fc:61:16:c6:
cf:64:a0:fb:40:82:1e:e8:a6:4b:e7:08:4a:ef:05:ef:b5:a0:
50:11:b6:bc:09:10:bc:31:25:58:1e:f1:94:aa:c3:cd:69:a6:
eb:9d:33:65:5a:a6:c3:51:a4:4e:28:7f:7f:07:de:1a:5f:75:
d0:35:dc:fa:a0:a0:f7:30:a8:19:a9:37:05:76:ba:c4:b5:c8:
e3:b2:c2:33:c9:27:91:93:9b:bb:ad:8b:6f:c7:fb:cd:71:a6:
98:9e:be:c0:58:20:7f:a9:b2:3f:89:35:41:c7:02:86:13:6e:
4a:2a:79:4d:14:0c:06:d5:1d:6f:35:dc:39:e4:96:4f:69:cf:
2c:e4:92:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:34:51 2026 by rpki-client