Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier: 2BgO6NpkNEgVBxwvIwzhqaUJ4zz9c9q+gTXaLuuuKHs=
Subject key identifier: 8F:38:42:8D:F8:95:30:37:AB:E5:3F:A4:FC:08:FD:71:09:09:DA:7B
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 01A0024A832DE31EEB7F04E3090ABB64AA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number: 0DED
Signing time: Fri 14 Aug 2026 22:00:32 +0000
Manifest this update: Fri 14 Aug 2026 22:00:32 +0000
Manifest next update: Sat 15 Aug 2026 22:00:32 +0000
Files and hashes: 1: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: 6V9jVIzjJv6mgvbp7ClSa8BSkWAtW9IxQmPrNlLLxxg=)
2: F4o9chBhcKIMOIAtTun2pROHlBg.roa (hash: +agk1DW6tWQwffLIyWmvkpOAgJSFY7/mjSBbgvZfRFk=)
3: tLBl5sqYIORcYxoiPAGpkSvAEb0.roa (hash: GMSHalNloa4MLmQuNKJAMYyesz8tlVOh/OMa6p0O3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:83:2d:e3:1e:eb:7f:04:e3:09:0a:bb:64:aa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Aug 14 22:00:32 2026 GMT
Not After : Aug 15 22:00:32 2026 GMT
Subject: CN=8f38428df8953037abe53fa4fc08fd710909da7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:4e:c5:30:87:0e:46:b2:bd:5b:f8:5c:b0:
6a:22:3b:c0:3c:9b:eb:e1:63:0b:3c:f4:98:a5:6f:
ea:7a:7a:09:63:0d:08:ef:e8:f3:82:6e:d5:da:5d:
76:45:c3:0b:9f:76:a8:75:5e:eb:4e:fa:27:a7:db:
53:22:0f:c1:88:cc:39:33:40:c1:c0:64:96:2a:08:
29:f8:f4:19:a9:d7:5e:fa:8b:88:69:b5:5b:f3:78:
27:8e:91:86:ed:ec:7d:3a:bc:3c:f0:2b:88:65:e5:
e3:99:b6:fd:01:92:b8:c4:7b:7a:17:d2:b1:73:b1:
1f:aa:06:29:bc:71:36:d9:15:b8:54:41:86:6f:ec:
87:4d:a8:65:3c:1d:8e:aa:a5:d1:1f:c5:d2:92:38:
8d:ee:9b:c4:69:9a:c9:47:d6:70:3a:5f:76:6f:19:
35:c5:4c:ff:4f:22:c6:0f:fe:23:e6:ab:a1:49:0d:
74:ed:4b:45:0c:87:2b:ec:d5:99:86:ac:4a:2d:ae:
7a:b5:20:b6:64:96:13:bc:39:d7:75:da:14:cf:03:
0a:f9:fd:d0:87:18:bf:e7:74:e9:d2:28:9b:87:86:
e4:2a:88:87:31:90:ba:b5:8d:47:cd:93:62:d2:0e:
4a:48:9c:7b:67:0f:e9:17:2e:68:29:42:cf:f2:9e:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:42:8D:F8:95:30:37:AB:E5:3F:A4:FC:08:FD:71:09:09:DA:7B
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:92:57:29:2c:dd:c8:74:91:02:b0:f5:9c:c3:f9:a4:16:8d:
a0:cd:53:98:d6:48:1f:bc:e3:50:40:8c:8e:b4:86:82:fe:c9:
23:7d:0a:f8:36:fc:3d:a8:8c:97:4d:1c:bc:ee:ac:0d:07:78:
2f:1b:47:fd:05:fa:f0:fc:bf:bb:83:b6:b6:e4:f7:40:9d:fd:
96:f1:bf:ca:9e:62:71:48:f7:75:22:c0:e9:f6:99:60:8e:46:
c0:68:8b:c8:15:11:fc:f1:5b:bb:f7:a8:81:2d:16:88:fd:1b:
53:c7:68:91:32:fb:ad:c4:22:49:70:26:b4:28:62:e9:8a:31:
73:05:09:e8:28:4f:3e:72:73:a1:5d:35:24:6f:99:a8:cc:ff:
9f:a5:09:18:46:e2:cc:68:f9:7d:97:34:b4:f6:d2:b1:05:aa:
9f:94:b9:23:92:5c:8d:66:33:94:d3:1f:02:81:e3:ec:e7:d8:
5b:6b:06:69:4a:ae:ce:d6:f3:13:0d:df:ca:ac:7f:40:df:10:
07:8c:aa:83:ea:e6:25:0a:44:8c:46:a1:91:6d:2b:a9:60:44:
0e:27:7b:cb:c5:89:7d:97:84:eb:5a:3f:e1:8c:b7:cf:eb:91:
f7:e9:57:a0:0a:95:fa:04:12:a1:ff:bf:ba:e3:c5:00:8a:bb:
8e:c3:6d:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSoMt4x7rfwTjCQq7ZKqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmI4NjQ5NjllOTY4MDc2NDg5OTAxNWUxNjNlY2U3N2Ji
NGNiNzYwHhcNMjYwODE0MjIwMDMyWhcNMjYwODE1MjIwMDMyWjAzMTEwLwYDVQQD
Eyg4ZjM4NDI4ZGY4OTUzMDM3YWJlNTNmYTRmYzA4ZmQ3MTA5MDlkYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFZOxTCHDkayvVv4XLBqIjvAPJvr
4WMLPPSYpW/qenoJYw0I7+jzgm7V2l12RcMLn3aodV7rTvonp9tTIg/BiMw5M0DB
wGSWKggp+PQZqdde+ouIabVb83gnjpGG7ex9Orw88CuIZeXjmbb9AZK4xHt6F9Kx
c7EfqgYpvHE22RW4VEGGb+yHTahlPB2OqqXRH8XSkjiN7pvEaZrJR9ZwOl92bxk1
xUz/TyLGD/4j5quhSQ107UtFDIcr7NWZhqxKLa56tSC2ZJYTvDnXddoUzwMK+f3Q
hxi/53Tp0iibh4bkKoiHMZC6tY1HzZNi0g5KSJx7Zw/pFy5oKULP8p65IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI84Qo34lTA3q+U/pPwI/XEJCdp7MB8GA1UdIwQY
MBaAFAUrhklp6WgHZImQFeFj7Od7tMt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUt
Njk3MGVjZDlhNjEwLzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80NzU5ZjktN2ZkZi00OTE2LWE5OTUtNjk3MGVjZDlhNjEw
LzEvQlN1R1NXbnBhQWRraVpBVjRXUHM1M3UweTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJJXKSzd
yHSRArD1nMP5pBaNoM1TmNZIH7zjUECMjrSGgv7JI30K+Db8PaiMl00cvO6sDQd4
LxtH/QX68Py/u4O2tuT3QJ39lvG/yp5icUj3dSLA6faZYI5GwGiLyBUR/PFbu/eo
gS0WiP0bU8dokTL7rcQiSXAmtChi6YoxcwUJ6ChPPnJzoV01JG+ZqMz/n6UJGEbi
zGj5fZc0tPbSsQWqn5S5I5JcjWYzlNMfAoHj7OfYW2sGaUquztbzEw3fyqx/QN8Q
B4yqg+rmJQpEjEahkW0rqWBEDid7y8WJfZeE61o/4Yy3z+uR9+lXoAqV+gQSof+/
uuPFAIq7jsNtxQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:25 2026 by rpki-client