Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File: BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier: 5oH2u4+B9Ac7Qi2LHHTVE5urgwHck+baqdM3kwm35vE=
Subject key identifier: C9:9E:AD:34:77:32:E4:4C:D4:D8:68:2A:75:49:FB:81:44:EA:3E:FD
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer: /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial: 019F1830E2363A97257DFC28FBC4016D6892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number: 17F3
Signing time: Tue 30 Jun 2026 11:01:24 +0000
Manifest this update: Tue 30 Jun 2026 11:01:24 +0000
Manifest next update: Wed 01 Jul 2026 11:01:24 +0000
Files and hashes: 1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: gNYiSHfJoPmMOs0/dAlS4mqYY9km4dMmZ1VkShkDydY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:e2:36:3a:97:25:7d:fc:28:fb:c4:01:6d:68:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Validity
Not Before: Jun 30 11:01:24 2026 GMT
Not After : Jul 1 11:01:24 2026 GMT
Subject: CN=c99ead347732e44cd4d8682a7549fb8144ea3efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:83:9b:c4:18:bc:fd:e3:41:b6:c8:9a:d5:
00:ca:69:f8:4d:57:50:b5:64:de:39:35:9c:08:fb:
1c:01:f9:67:61:d7:e7:78:fe:fe:43:2f:eb:87:a9:
ac:76:20:c3:63:a7:ab:be:63:ce:b9:0b:af:4b:ba:
67:da:c8:51:71:71:bb:51:76:8b:8e:ed:a2:2c:8d:
40:05:44:93:2f:62:15:63:73:40:2a:24:1b:fb:fa:
53:12:0d:b9:f2:e2:3c:4f:67:af:d8:cd:6c:a1:72:
81:34:19:56:41:72:36:84:3c:49:9e:f8:f5:eb:b3:
57:9d:3a:01:7f:49:8a:cd:ed:72:1a:a1:21:ef:45:
ac:6e:86:3d:21:f2:0a:fe:f7:9a:a8:68:08:a0:f4:
ff:ab:e4:8c:f7:dd:4a:67:b3:b5:0b:5f:20:db:a3:
42:5d:fa:b7:cd:e0:a8:61:b4:22:d0:49:2e:7e:f7:
a0:10:4a:d8:91:9a:ff:8f:2d:a5:33:08:6a:9f:ec:
84:ba:18:da:ce:0a:dd:2b:16:1a:40:1b:ba:ba:4f:
57:a8:fb:38:b7:8b:cb:19:ee:f4:4e:2b:25:f1:77:
fa:45:45:33:75:25:68:86:da:85:5e:37:93:59:5a:
6e:35:ef:58:37:0a:0b:2c:f5:55:27:36:4f:2d:e7:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:AD:34:77:32:E4:4C:D4:D8:68:2A:75:49:FB:81:44:EA:3E:FD
X509v3 Authority Key Identifier:
keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8e:c2:d1:db:a2:3c:f3:bb:b5:9d:d1:83:c2:86:45:c9:aa:
aa:4d:09:8a:85:15:b1:dd:8a:43:b5:fe:85:4a:a3:f9:e4:22:
62:a8:51:af:ca:9c:1b:20:6f:40:57:f0:07:95:5e:7a:3e:cf:
89:24:74:71:f1:97:2b:0a:06:5f:93:6f:51:1c:8c:06:bc:f1:
8e:a0:a0:2b:25:8e:33:30:c4:4f:3b:47:5f:05:6d:a5:79:00:
1f:89:47:32:e3:59:4f:17:64:4b:91:9d:84:d8:f9:12:bc:83:
b2:d0:22:79:10:84:a1:31:45:00:6d:8f:c1:ba:e7:2d:3f:13:
55:2a:bb:36:a1:de:c8:aa:61:70:51:df:5d:45:7b:e6:ba:3f:
e5:bf:72:93:47:17:27:e2:71:5c:12:21:a9:de:55:b8:63:81:
a4:89:0a:c0:b8:7b:66:ab:d4:00:0c:1c:2c:22:4e:7d:0d:48:
97:6a:6f:00:24:b2:1d:4d:e6:a7:e4:fe:ec:8a:f8:80:a4:d1:
08:08:87:77:ca:4f:f1:32:25:12:b1:5d:be:99:30:ae:a1:5d:
2b:b4:27:56:50:f2:db:4f:52:55:6f:7f:66:b7:d4:56:8c:d2:
6f:72:74:37:7e:42:7d:0e:70:76:17:3b:86:04:af:81:03:b3:
8c:4f:36:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:30 2026 by rpki-client