Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: SaM3I+GowxUydl5/ZFvH5rKcZBtGDTZB0QNiACNqfn4=
Subject key identifier: 95:05:18:C4:DB:B9:99:34:4C:29:39:6E:5F:16:51:EE:DA:17:35:9A
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 019D37C09D99AB4DF9A1BC1A41104DEDCF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0C7B
Signing time: Sun 29 Mar 2026 04:01:03 +0000
Manifest this update: Sun 29 Mar 2026 04:01:03 +0000
Manifest next update: Mon 30 Mar 2026 04:01:03 +0000
Files and hashes: 1: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: zYp/jdhJxIGRjEHNPzwde0QR4qDk3saF2xMkvsISMn4=)
2: F4o9chBhcKIMOIAtTun2pROHlBg.roa (hash: +agk1DW6tWQwffLIyWmvkpOAgJSFY7/mjSBbgvZfRFk=)
3: tLBl5sqYIORcYxoiPAGpkSvAEb0.roa (hash: GMSHalNloa4MLmQuNKJAMYyesz8tlVOh/OMa6p0O3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9d:99:ab:4d:f9:a1:bc:1a:41:10:4d:ed:cf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Mar 29 04:01:03 2026 GMT
Not After : Mar 30 04:01:03 2026 GMT
Subject: CN=950518c4dbb999344c29396e5f1651eeda17359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:84:7f:33:35:00:b0:19:b7:0b:a6:19:b1:
d4:0c:25:0d:c4:08:32:f5:ba:80:81:56:fc:73:d2:
23:91:10:67:f6:0e:95:18:02:d4:5e:bf:28:84:79:
cc:ae:56:46:e4:24:4b:b7:de:61:64:20:63:49:99:
32:e5:8c:e2:d3:0e:4e:cd:88:52:e4:20:36:bd:4e:
15:5c:eb:3b:e9:c6:bb:1c:7d:43:bf:e9:91:cc:28:
1f:d1:16:73:f2:35:eb:83:9c:4a:a2:2b:09:74:89:
20:2f:7f:01:91:2f:3e:c3:aa:e9:d1:48:47:5b:f9:
7e:2f:7c:38:e1:c8:9c:75:72:eb:14:ce:54:e7:da:
d8:eb:61:72:6c:09:2b:fc:13:10:38:01:c6:4e:93:
5d:8c:00:1e:99:53:12:78:d9:f0:3a:84:12:8e:ac:
aa:8d:9d:e7:c9:3f:28:03:cd:16:02:6c:a0:f1:36:
b2:05:34:28:46:5d:ad:cd:ec:e6:21:e7:31:c6:1f:
ff:77:a3:e8:54:c8:41:1f:f6:67:9e:52:12:56:da:
de:c1:e8:9b:90:0c:3e:86:67:8f:11:45:c5:b6:2d:
da:08:b2:cc:9b:09:6a:ca:68:24:e9:34:38:dd:d1:
c5:d5:11:67:21:5f:f5:06:a5:43:ed:72:76:f7:2d:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:05:18:C4:DB:B9:99:34:4C:29:39:6E:5F:16:51:EE:DA:17:35:9A
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:93:02:3a:c4:f8:f0:61:c8:08:96:69:f2:2c:1f:1e:1d:84:
ee:03:95:7c:5c:8d:cd:fd:63:f1:72:7f:16:09:c9:64:a2:b0:
e8:00:02:b3:7b:16:bf:23:4c:bf:1a:69:87:df:f6:5f:11:95:
f7:b3:e7:9b:fe:e6:cf:3a:2c:ac:91:3c:e8:1b:f7:0e:53:a6:
52:06:e2:a8:5c:b2:8a:db:71:35:7b:53:4c:14:62:29:6f:4a:
5e:36:40:64:45:f2:c4:28:84:5d:c5:1d:78:69:db:cb:99:90:
50:f3:78:9b:70:6e:ea:8a:d9:32:9a:35:39:41:2e:44:ca:2e:
43:7a:ea:74:94:6f:6c:ed:16:5b:90:b8:91:15:21:03:5c:7d:
67:8d:2d:68:33:2b:88:94:73:11:84:fd:63:43:80:d0:5f:09:
12:7b:8c:13:f0:9b:55:b1:b1:06:3a:75:c5:28:83:c0:38:48:
91:0e:50:cb:43:21:33:64:7f:03:9b:d6:ce:29:e3:3d:d7:ef:
bc:45:3c:10:09:53:01:a7:0f:34:bf:e1:e3:fd:a6:bb:72:5f:
0c:68:75:28:61:5c:2c:69:9d:a1:74:42:1b:35:65:65:63:cf:
69:69:1e:ab:46:21:a4:c0:25:d1:68:93:8f:bd:e1:0a:32:fe:
25:13:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:53 2026 by rpki-client