Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
File: BSAFu2w9aGW4nBDzOwuZS3Svljs.mft (raw, json)
Hash identifier: ws1kC6vWOgrT0HBWZGcawBkFkxqDzoibFLdxR1bDolI=
Subject key identifier: F5:D0:1D:1B:E5:2A:22:C6:2A:25:51:85:74:AC:A9:30:48:7E:B7:19
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 019D390993F43E282B5BAAE1A057A96A5602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:22 +0000
Manifest this update: Sun 29 Mar 2026 10:00:22 +0000
Manifest next update: Mon 30 Mar 2026 10:00:22 +0000
Files and hashes: 1: BSAFu2w9aGW4nBDzOwuZS3Svljs.crl (hash: tdg7JGaH+EBcC9KFwu7NmOIAT3K87FOKRhZWjXZqeAY=)
2: TkHWb7A0dCU6pE1AWMAvWtYjFGQ.roa (hash: SNUkFMiS55HofBAwrMgQasrnX+p3nqcULIOMMHj9Bv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:93:f4:3e:28:2b:5b:aa:e1:a0:57:a9:6a:56:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Mar 29 10:00:22 2026 GMT
Not After : Mar 30 10:00:22 2026 GMT
Subject: CN=f5d01d1be52a22c62a25518574aca930487eb719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:6e:e9:a2:62:cb:16:b5:8d:5f:19:da:c1:
c4:06:9f:73:4f:88:2b:2f:0d:94:ad:64:4c:ce:3c:
9e:31:04:fc:4c:3c:0a:f9:a4:cb:e7:94:0d:e7:c9:
7a:7c:2c:fb:42:01:dc:da:61:f7:87:d5:0d:79:d4:
d1:46:6d:50:d2:0e:b7:3b:44:94:97:e5:34:73:17:
d8:92:b9:28:07:73:de:1d:61:18:34:b7:55:1c:c3:
17:1b:32:59:c4:63:c1:f7:06:5d:2b:ac:d5:3d:54:
7e:d1:5c:b1:6f:3d:1a:d0:5b:45:73:db:c8:c8:2a:
f5:41:b0:7d:4f:62:e0:54:a9:20:38:14:95:83:83:
da:7e:e8:47:94:11:7b:ec:c4:dc:e8:53:e0:e5:a8:
4b:c7:60:f5:66:52:20:a7:95:99:f8:b8:50:15:5a:
4c:5d:36:05:55:3c:be:e6:98:1d:9d:d1:21:fb:06:
f8:32:f5:60:c4:32:46:06:3c:15:84:66:eb:86:49:
74:e0:fb:39:b8:0c:9e:b8:eb:ce:8e:d1:8d:ec:d6:
fb:d1:a7:8c:3c:5a:16:ce:9f:3d:e2:77:2f:e0:49:
c5:99:df:43:d1:b8:ca:b8:9c:12:7e:28:0f:02:d5:
36:ce:44:4e:df:08:15:d3:6f:11:c3:32:b3:fd:9d:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D0:1D:1B:E5:2A:22:C6:2A:25:51:85:74:AC:A9:30:48:7E:B7:19
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:da:ea:92:b1:c1:30:32:af:18:a9:e1:b5:bc:75:58:8e:a3:
39:51:29:da:61:44:7d:f1:2a:02:7b:ee:30:aa:65:46:c2:63:
3c:06:99:ca:b9:44:62:c9:eb:0b:1d:a1:0a:52:92:77:fb:7f:
5d:10:99:72:9f:07:75:87:0b:6e:17:82:da:a5:47:88:24:e5:
12:6d:88:1d:65:8b:8b:7e:99:3e:58:ac:f0:9e:63:3d:a6:9d:
9e:fc:85:3e:ce:35:93:50:06:ee:30:c0:79:c1:9b:5b:9c:be:
82:db:79:5f:32:b6:39:3c:66:15:3f:82:23:9e:d5:13:ea:99:
90:a6:18:53:1f:2c:3d:bf:40:d2:be:00:9f:9d:27:60:e3:0c:
5e:76:1e:a3:62:d7:09:49:20:b4:13:80:c0:64:bc:37:86:07:
ed:e2:e3:03:bf:7f:d4:25:4e:5f:79:22:06:c2:68:2a:2a:f9:
93:17:c7:61:c1:ec:ec:3e:e3:e6:cd:bb:dd:9a:f9:0b:c6:bb:
6e:ed:18:0a:e3:dd:73:1c:07:5f:df:92:18:1e:bb:35:b5:62:
93:aa:bc:3b:67:f4:9b:ac:33:cd:f8:98:57:33:10:00:21:8e:
83:40:da:8d:bb:1e:99:0b:df:4a:71:43:17:f4:e8:a9:65:6e:
31:ae:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:44 2026 by rpki-client