Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: qfFEm/wh1DVLTadDKqDutkXkJBk6HgSjx0THNv/DCXE=
Subject key identifier: 7F:45:80:AF:43:1A:1B:C2:31:8A:74:93:91:56:38:01:F8:97:81:B7
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 019E30A8FD7079C9FE9794FFA5BB7D3EBF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 1653
Signing time: Sat 16 May 2026 12:00:41 +0000
Manifest this update: Sat 16 May 2026 12:00:41 +0000
Manifest next update: Sun 17 May 2026 12:00:41 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: 0x/I/1tw4C2SgECJeeEm+AsAlvZ0pMQl2IYvlO+udsA=)
2: sQyne1zxQXu_zdF8YvRFUzS8ZEg.roa (hash: KddIGoSYVIL2Nj4926PBtsXbFubGN3uCRL3ozwJnP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a8:fd:70:79:c9:fe:97:94:ff:a5:bb:7d:3e:bf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: May 16 12:00:41 2026 GMT
Not After : May 17 12:00:41 2026 GMT
Subject: CN=7f4580af431a1bc2318a749391563801f89781b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:4d:5e:6d:18:d5:c5:17:60:ce:31:23:30:
d9:f5:38:cb:f5:46:6d:c5:cb:f8:7c:88:11:40:3c:
6e:b5:bd:6f:1d:10:a6:de:d6:18:6a:e1:d8:2e:9b:
ee:44:44:1d:0e:67:5e:7c:48:33:5a:69:0e:ab:76:
04:3a:c1:5a:35:09:e9:6a:53:51:94:bc:f4:a3:31:
fd:b9:90:ab:a2:c6:b8:18:a1:11:9c:ed:d4:3d:57:
af:b7:39:ee:a6:b2:11:97:22:b9:a2:3d:bd:cf:0d:
72:df:d6:3a:f0:f1:6c:84:89:12:f6:e6:57:06:e1:
06:f7:ca:b9:7c:2b:cc:b4:9d:17:7c:8b:2c:7d:4d:
87:29:56:39:ba:4f:e1:91:67:c7:42:88:8f:31:a6:
70:3e:65:cd:8a:3c:9b:f4:5e:05:fa:9d:cd:f9:13:
08:a3:dc:1a:4e:a8:e8:3b:14:ba:f9:bd:ac:b9:6d:
6b:76:e1:0f:00:95:ba:2b:36:1e:c8:c8:22:fa:ab:
ae:10:f5:3d:b4:6b:2b:ef:73:c7:85:a0:69:5d:71:
31:af:6e:52:4f:bd:61:ad:75:e7:da:21:da:45:83:
fa:f8:b7:b4:ba:32:c2:77:c2:64:7a:5d:63:8e:58:
23:f0:e8:f6:ed:97:73:19:e0:54:c9:67:c2:fa:8c:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:45:80:AF:43:1A:1B:C2:31:8A:74:93:91:56:38:01:F8:97:81:B7
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:df:44:b6:83:98:2e:bd:aa:7c:61:ff:53:41:03:d0:25:8b:
c8:0f:4c:da:43:4d:43:ec:87:8d:aa:ba:98:d2:8d:d8:73:88:
a1:5c:06:4c:02:54:3a:38:10:07:e3:a8:a6:ae:39:95:8f:31:
0a:d6:7e:22:0d:74:a8:04:6f:aa:c2:3f:b0:d9:25:cc:4a:db:
a0:f6:fa:9d:23:58:3d:8e:5a:d0:d6:ac:88:f3:df:b4:cb:d4:
fa:0b:94:19:ce:45:0c:b3:7b:71:d7:96:a5:66:28:96:d0:5f:
f7:16:5e:e1:23:f6:0b:6f:fd:36:9c:8b:71:f1:0f:67:1a:ed:
b6:b6:11:67:c0:28:ed:e7:da:05:f4:9b:0a:d8:51:6d:5b:eb:
82:5f:6a:2a:9f:ad:3b:8e:ea:62:fd:bf:b9:31:ca:be:18:0d:
cc:31:14:5b:a8:e3:32:64:71:5f:87:3e:b0:f1:75:fe:1c:7c:
70:10:52:af:73:7d:07:5e:92:20:47:00:e2:79:e3:02:3c:38:
54:72:00:32:c1:b8:8f:7c:98:0e:ce:e8:2b:62:87:60:f4:af:
ea:53:e2:09:68:31:ff:2b:ed:3d:eb:0c:8a:d1:46:60:2e:3a:
c6:ab:ef:1d:fc:0d:3f:4e:5b:c0:cc:05:2d:2d:cc:61:66:88:
80:48:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:11 2026 by rpki-client