Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: ioGSW6fx9dpyjTxZ4JUCW4QMQfznm9QlRXyd1qhNUBY=
Subject key identifier: 18:05:DA:A5:24:B7:8F:9A:DA:25:DA:91:8F:E5:5D:BB:7F:6A:02:FC
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 019F189EE231B8C73E4795CF35DBCAD8FD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0D74
Signing time: Tue 30 Jun 2026 13:01:33 +0000
Manifest this update: Tue 30 Jun 2026 13:01:33 +0000
Manifest next update: Wed 01 Jul 2026 13:01:33 +0000
Files and hashes: 1: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: TXjKB3Jt7/1kxBeX6I5qSUs3Fgm8vrD+qBQtxk3ZSgg=)
2: F4o9chBhcKIMOIAtTun2pROHlBg.roa (hash: +agk1DW6tWQwffLIyWmvkpOAgJSFY7/mjSBbgvZfRFk=)
3: tLBl5sqYIORcYxoiPAGpkSvAEb0.roa (hash: GMSHalNloa4MLmQuNKJAMYyesz8tlVOh/OMa6p0O3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:e2:31:b8:c7:3e:47:95:cf:35:db:ca:d8:fd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Jun 30 13:01:33 2026 GMT
Not After : Jul 1 13:01:33 2026 GMT
Subject: CN=1805daa524b78f9ada25da918fe55dbb7f6a02fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:2e:68:0d:86:13:52:7c:3f:3f:de:38:2f:
53:06:cc:96:b4:14:07:82:8d:8d:fd:56:c7:8d:a3:
a3:f7:e7:2e:63:bb:e1:bb:78:73:d7:44:a3:8d:f1:
fb:a7:78:62:af:b7:f8:29:09:ad:cc:cb:39:be:94:
34:43:96:87:22:fa:0d:44:b5:55:e3:51:12:78:3e:
1d:19:62:fb:f6:c4:b2:71:44:4b:99:6e:f4:76:6c:
fc:3c:ff:04:9d:b6:24:b9:91:36:96:ee:25:be:d3:
bb:b1:79:0a:50:f7:52:e3:5f:b7:16:a9:bc:bd:be:
8b:5a:b0:fb:d1:2c:02:aa:05:5c:7d:a9:24:90:04:
8b:65:4e:05:62:55:b3:da:8e:42:b5:29:50:56:90:
5f:de:be:09:fb:77:f9:68:6d:96:60:7c:2d:f6:be:
e0:a6:31:4d:b2:3b:1c:34:14:b5:1f:23:7f:d6:31:
0b:0d:bb:26:30:95:6f:d4:bc:d6:bb:e6:75:e9:af:
4d:16:1a:6c:2d:51:03:68:a5:05:38:9b:be:68:65:
30:7f:1f:b7:fa:56:24:24:25:12:73:99:88:46:65:
d9:72:7a:bb:49:e6:18:ba:a0:61:9c:50:30:2c:31:
9d:65:78:72:f0:72:34:da:ea:73:ff:d0:9b:73:0a:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:05:DA:A5:24:B7:8F:9A:DA:25:DA:91:8F:E5:5D:BB:7F:6A:02:FC
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e4:fa:3d:79:f0:d7:51:66:31:de:b7:06:62:30:16:06:73:
88:de:f2:38:73:b0:d0:34:0d:85:e5:57:34:0a:89:7d:d0:14:
7a:75:a4:39:52:b8:9f:9e:74:55:07:e1:cd:62:90:b8:5e:81:
19:74:e9:18:e4:0b:e4:cc:aa:14:44:a2:52:9a:1f:95:fb:26:
da:fe:b0:52:79:53:42:3b:07:b0:bc:19:eb:61:e5:7f:f3:20:
d9:1f:82:8e:84:cb:4b:8f:3a:6c:93:be:fd:9f:d1:50:48:14:
a8:bd:b0:56:85:54:e6:48:41:88:99:5c:31:48:ff:18:46:17:
24:30:70:56:90:e2:b9:f6:b4:9a:fb:fe:0a:f6:75:99:91:cf:
a2:15:a1:b2:56:ad:4e:56:57:39:7d:53:1b:00:a3:bd:d3:11:
a8:41:9d:fd:c2:aa:63:c3:f1:1d:af:e2:2c:03:b1:c7:96:2f:
be:d9:05:b2:ab:95:fa:e0:c8:f2:41:12:2d:0c:03:f2:f3:56:
0f:ab:66:10:3a:22:df:ce:c6:10:b0:31:ac:20:23:57:89:8e:
01:81:73:2c:84:b5:39:35:07:a0:ad:83:d4:95:39:c7:8d:de:
03:84:ad:5b:2c:27:42:80:34:f9:eb:7c:4e:6d:15:01:bd:4a:
9e:04:f7:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnuIxuMc+R5XPNdvK2P1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmI4NjQ5NjllOTY4MDc2NDg5OTAxNWUxNjNlY2U3N2Ji
NGNiNzYwHhcNMjYwNjMwMTMwMTMzWhcNMjYwNzAxMTMwMTMzWjAzMTEwLwYDVQQD
EygxODA1ZGFhNTI0Yjc4ZjlhZGEyNWRhOTE4ZmU1NWRiYjdmNmEwMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVcuaA2GE1J8Pz/eOC9TBsyWtBQH
go2N/VbHjaOj9+cuY7vhu3hz10SjjfH7p3hir7f4KQmtzMs5vpQ0Q5aHIvoNRLVV
41ESeD4dGWL79sSycURLmW70dmz8PP8EnbYkuZE2lu4lvtO7sXkKUPdS41+3Fqm8
vb6LWrD70SwCqgVcfakkkASLZU4FYlWz2o5CtSlQVpBf3r4J+3f5aG2WYHwt9r7g
pjFNsjscNBS1HyN/1jELDbsmMJVv1LzWu+Z16a9NFhpsLVEDaKUFOJu+aGUwfx+3
+lYkJCUSc5mIRmXZcnq7SeYYuqBhnFAwLDGdZXhy8HI02upz/9Cbcwo7oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgF2qUkt4+a2iXakY/lXbt/agL8MB8GA1UdIwQY
MBaAFAUrhklp6WgHZImQFeFj7Od7tMt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUt
Njk3MGVjZDlhNjEwLzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUtNjk3MGVjZDlhNjEw
LzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROT6PXnw
11FmMd63BmIwFgZziN7yOHOw0DQNheVXNAqJfdAUenWkOVK4n550VQfhzWKQuF6B
GXTpGOQL5MyqFESiUpoflfsm2v6wUnlTQjsHsLwZ62Hlf/Mg2R+CjoTLS486bJO+
/Z/RUEgUqL2wVoVU5khBiJlcMUj/GEYXJDBwVpDiufa0mvv+CvZ1mZHPohWhslat
TlZXOX1TGwCjvdMRqEGd/cKqY8PxHa/iLAOxx5YvvtkFsquV+uDI8kESLQwD8vNW
D6tmEDoi387GELAxrCAjV4mOAYFzLIS1OTUHoK2D1JU5x43eA4StWywnQoA0+et8
Tm0VAb1KngT3HQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:24 2026 by rpki-client