Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
File: BSAFu2w9aGW4nBDzOwuZS3Svljs.mft (raw, json)
Hash identifier: M91v55ueZ7IP/4OAyYO5DR0CIRnff7KoIMrm5/b2dRU=
Subject key identifier: D5:8B:2C:24:F9:23:EA:02:1F:4F:72:49:90:56:83:15:CD:9B:2E:6F
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 019E303B5765925E9AF7B10B7A25AA542725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 10:00:55 +0000
Manifest this update: Sat 16 May 2026 10:00:55 +0000
Manifest next update: Sun 17 May 2026 10:00:55 +0000
Files and hashes: 1: BSAFu2w9aGW4nBDzOwuZS3Svljs.crl (hash: FuE9AQkBB9PaqfgrjJvbWyrPrPpLgSQCFJVyW7EonTs=)
2: TkHWb7A0dCU6pE1AWMAvWtYjFGQ.roa (hash: SNUkFMiS55HofBAwrMgQasrnX+p3nqcULIOMMHj9Bv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:57:65:92:5e:9a:f7:b1:0b:7a:25:aa:54:27:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: May 16 10:00:55 2026 GMT
Not After : May 17 10:00:55 2026 GMT
Subject: CN=d58b2c24f923ea021f4f724990568315cd9b2e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:2e:45:6c:44:56:5f:43:95:84:81:5f:4f:
d3:86:db:ca:24:16:be:aa:d7:8a:75:2a:07:63:a1:
c5:79:af:b3:44:7e:64:d7:65:79:99:1c:ed:e8:d7:
4f:d3:5a:43:b2:65:f6:30:82:51:a5:2a:9b:61:8f:
8d:81:c7:b3:ac:48:14:85:c9:8c:7b:0e:7e:82:ec:
61:01:f2:23:58:3b:f3:93:2c:67:59:d4:b6:30:26:
f6:42:ac:e9:1d:e0:d1:6e:71:dc:50:aa:5d:ea:8f:
5d:60:fa:82:2c:df:49:a1:bb:fe:be:e7:66:27:3b:
90:13:1b:43:96:f5:bd:1d:0f:34:e3:03:fd:1a:01:
9c:a8:bb:35:19:45:b3:30:83:25:73:2d:60:22:ea:
52:d3:4b:6b:6b:eb:f5:6e:da:25:a7:13:5b:05:94:
d6:dd:68:f5:10:cd:fb:d9:2f:24:5a:8a:33:77:9e:
c3:15:bd:d6:9e:c2:ed:f0:f5:73:7a:13:31:1c:0a:
88:82:24:0c:f1:b4:dd:07:94:25:e6:ca:21:b7:27:
28:8c:0d:ad:a7:b8:e5:17:12:1c:0e:78:68:28:0f:
dc:14:9b:50:d0:ba:5b:25:30:ee:c7:03:ad:22:1b:
47:50:0e:10:ef:08:5f:62:d6:e2:e2:07:07:2e:77:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:2C:24:F9:23:EA:02:1F:4F:72:49:90:56:83:15:CD:9B:2E:6F
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:40:36:15:89:2f:16:e9:2f:c8:b7:4a:b6:ba:fc:84:b2:
af:44:45:88:d7:be:02:d0:7b:99:28:b8:54:75:73:62:21:b0:
8c:76:be:2a:5b:83:64:e8:79:c7:89:f7:62:87:96:ee:06:1e:
47:fa:09:2f:cf:07:9c:81:c1:62:3d:8a:3f:ba:73:10:ef:d7:
80:07:b1:19:01:7b:2d:ec:16:b7:2d:c7:72:02:3d:6d:4c:33:
b0:61:82:7a:0c:bd:44:5e:cb:c3:8d:c4:fc:97:d3:8f:a7:af:
68:04:cc:7a:18:c2:1a:49:78:08:3f:fa:3b:da:e0:0f:82:57:
98:2e:e3:16:38:36:cc:eb:b3:35:f1:b9:9e:13:12:46:4a:75:
8b:e6:b9:84:04:b3:07:24:a4:b9:04:e0:65:c6:b3:6b:cd:c9:
5e:2e:86:6e:f4:f8:11:dc:d1:74:95:5b:61:bf:ea:14:ce:c6:
9f:e9:e2:39:1f:90:12:ae:74:a8:1d:2a:fb:72:c4:59:6a:47:
f0:72:fb:0a:3f:2f:6e:59:50:26:37:7a:a8:0b:6a:5c:27:27:
ec:ab:7a:f1:49:9c:4d:da:3a:6c:4e:e3:b4:1a:ed:f4:12:ee:
d6:d5:f0:cc:14:ae:65:0a:42:dd:c9:f4:e6:c6:1c:50:4f:fc:
3d:a5:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:30:44 2026 by rpki-client