Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: LYJcM8aB6wg3utPcBF58jL5yd4RBCCkzBuwagYZiEeg=
Subject key identifier: 86:70:9C:28:22:70:C5:B8:19:4C:AA:B7:73:82:57:DF:9A:3E:D7:0C
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 019E2B15308831971D5142F0E00F50925196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0CF9
Signing time: Fri 15 May 2026 10:01:09 +0000
Manifest this update: Fri 15 May 2026 10:01:09 +0000
Manifest next update: Sat 16 May 2026 10:01:09 +0000
Files and hashes: 1: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: biIovOy4OnKluPy7dJqorEnrfZK3Q4AQZZk6ofyJEn0=)
2: F4o9chBhcKIMOIAtTun2pROHlBg.roa (hash: +agk1DW6tWQwffLIyWmvkpOAgJSFY7/mjSBbgvZfRFk=)
3: tLBl5sqYIORcYxoiPAGpkSvAEb0.roa (hash: GMSHalNloa4MLmQuNKJAMYyesz8tlVOh/OMa6p0O3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:15:30:88:31:97:1d:51:42:f0:e0:0f:50:92:51:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: May 15 10:01:09 2026 GMT
Not After : May 16 10:01:09 2026 GMT
Subject: CN=86709c282270c5b8194caab7738257df9a3ed70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:67:1a:1f:f1:0f:e4:02:2c:e2:a7:a1:55:
62:80:96:f9:be:63:87:1b:ce:73:39:27:0d:62:17:
88:01:47:92:8b:fb:5b:9c:60:7a:9b:ba:4a:59:ba:
5a:f0:8f:cc:3c:01:23:70:02:d2:59:82:81:06:18:
72:95:71:a2:cc:6a:cd:5f:5b:cf:22:74:6c:a0:7a:
ef:30:20:04:a9:14:6b:e3:34:f9:d1:4b:1b:d3:9b:
be:f0:a1:fa:a7:cd:f6:41:d3:ac:6d:7d:da:51:d4:
8e:cb:cc:87:30:1d:46:23:21:d7:8e:e7:b6:bc:6d:
c7:6c:a9:df:23:79:37:eb:b3:77:fd:5e:34:6f:0d:
90:f9:a1:65:9d:e6:39:8b:22:77:54:9c:e9:52:ab:
df:ab:41:cb:2d:c4:dc:9f:2c:d3:fc:90:fa:b0:12:
44:3f:7f:fd:e9:57:bb:5a:c5:c4:5f:ad:9c:b3:b1:
4f:09:bc:c8:00:11:8b:34:47:f6:69:ab:6e:25:f7:
21:86:db:d1:ee:4d:57:7d:60:ba:1c:4c:68:20:d6:
5e:ae:2e:23:ed:af:dc:88:ee:09:f3:a2:22:4a:76:
6f:33:9e:c2:1c:6a:bb:8d:50:37:e5:48:71:d9:7b:
00:83:c3:cf:a5:de:fb:a5:e7:69:a3:87:b5:48:c2:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:70:9C:28:22:70:C5:B8:19:4C:AA:B7:73:82:57:DF:9A:3E:D7:0C
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e4:81:f5:01:d4:9e:bb:13:36:d5:8e:9e:db:8d:4c:66:93:
98:84:bf:8e:fd:00:fe:d1:44:8b:47:e7:f9:57:9d:38:d5:1e:
01:7c:ce:5f:63:0d:2a:32:fe:ec:8f:8b:ea:7a:3d:99:81:90:
24:fd:04:33:df:ce:94:ba:85:0c:d4:ac:7c:0f:a4:9b:76:82:
7e:74:98:17:86:d4:1d:4b:c0:a1:3d:28:71:04:3e:a7:dd:da:
54:46:98:b0:37:a9:43:f2:cb:65:40:23:2b:cb:d3:bf:29:89:
df:6e:fc:23:98:00:78:e3:37:80:0c:c3:c6:98:07:05:87:d8:
6c:3d:97:e7:f5:9c:54:b4:88:47:c7:75:3c:17:2e:cc:4e:66:
7f:94:fd:4a:f4:44:f7:4d:fa:5b:1f:83:19:67:94:7e:e4:57:
1d:fa:69:05:28:be:40:ad:68:59:55:19:d5:e0:d1:55:9a:f5:
ea:a0:48:3f:56:7e:e5:b9:70:01:38:17:72:d1:c4:40:fb:44:
0f:e9:5e:10:40:b3:54:8d:23:95:6d:b4:04:49:44:97:c4:01:
89:d6:f8:8d:7a:72:b1:51:e2:6f:be:ad:6d:42:91:03:cb:7e:
7e:02:c1:01:78:ce:75:89:13:fe:c3:7e:09:04:11:b7:fe:f5:
7d:92:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:43:42 2026 by rpki-client