
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: i3bbHx9NsV4M2iRNgh/mXog9h5dWJhO2myVFUC5yn6s=
Subject key identifier: 10:7D:55:19:65:8D:E9:D5:D2:46:0D:49:5D:79:86:E8:F1:BA:5A:B7
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 019E2F9783DF2A606FEDE32755D611505CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 1343
Signing time: Sat 16 May 2026 07:01:59 +0000
Manifest this update: Sat 16 May 2026 07:01:59 +0000
Manifest next update: Sun 17 May 2026 07:01:59 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: XcZvr8khheQ6UtZcanj6jM7oywqMdm7FouNZebjLfX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:83:df:2a:60:6f:ed:e3:27:55:d6:11:50:5c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: May 16 07:01:59 2026 GMT
Not After : May 17 07:01:59 2026 GMT
Subject: CN=107d5519658de9d5d2460d495d7986e8f1ba5ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:94:9e:c6:77:15:b3:b5:3e:33:62:f0:c3:
97:0a:28:41:64:05:e4:46:d1:46:dd:73:31:34:d6:
bc:1a:39:dd:0d:c2:e6:82:d6:a0:a1:ec:79:9a:9b:
6c:27:10:94:62:0e:83:a4:75:ab:cc:6c:36:57:1b:
62:90:04:a3:08:b9:f6:1e:6b:08:bc:51:fe:bd:01:
98:6c:db:53:fc:cd:68:cf:cc:0b:2c:08:25:53:28:
b9:5b:43:ae:e5:82:34:d4:86:06:84:28:56:e0:79:
4c:62:36:cf:09:2d:d0:a2:cf:97:16:5d:23:16:59:
1c:6a:b2:d3:ab:78:f6:c9:b4:12:c6:51:f8:a3:ae:
c0:56:71:93:b3:f4:7d:de:4a:47:fd:64:c0:c2:35:
f3:ed:db:38:cd:76:97:76:03:d8:12:b1:34:c4:0c:
ec:c1:2c:f3:f4:ab:c8:36:bd:62:fa:5f:7f:46:5f:
17:4b:72:2f:1f:e9:76:55:e0:d6:27:02:f2:0f:f6:
76:6c:90:c7:e0:57:a4:87:76:35:2a:8a:ff:da:56:
88:3e:93:52:96:2d:13:d8:30:50:6a:c9:76:2c:bc:
ad:90:20:6a:9e:98:92:12:b3:03:04:df:9c:2b:c1:
2b:04:d7:29:b1:ee:d8:60:70:be:55:d2:ee:90:9b:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:55:19:65:8D:E9:D5:D2:46:0D:49:5D:79:86:E8:F1:BA:5A:B7
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3e:85:dc:dc:66:2e:b7:b5:9b:34:92:1e:9a:55:e4:25:da:
71:d7:ba:a5:17:48:3f:f5:a6:2f:49:ca:03:4c:90:f3:7e:af:
aa:3e:05:4c:28:8d:e9:56:17:83:34:e8:5c:47:0a:4a:69:38:
12:2c:80:21:d7:bb:0d:e1:63:c8:0b:37:f8:66:83:c3:60:63:
d8:77:9d:4f:74:3c:ba:b7:ec:cf:f5:e2:89:0f:85:17:ad:af:
5c:dc:e5:3f:a7:03:b6:4e:38:c7:25:06:54:f6:17:92:6b:1f:
8a:66:e4:9a:f7:0e:68:ad:51:14:ac:0e:74:0b:7d:1d:cf:22:
57:bd:93:fe:3e:0c:b4:1a:40:d4:59:4b:c3:6a:3d:39:06:0f:
4d:35:36:f7:be:43:9a:4d:6c:76:05:a4:15:5f:9d:aa:8e:3c:
7e:99:a8:8b:b8:bb:87:f1:e6:c7:c5:86:0f:ed:26:4f:5d:68:
2e:19:bc:88:06:1e:16:15:6f:f5:88:fe:14:4a:7b:fe:83:9a:
b2:a4:9a:ff:c9:5d:b9:fd:94:fe:bb:c0:28:18:a2:95:d6:56:
b4:da:b4:55:99:56:49:f4:16:b0:a2:9a:e3:38:4d:dc:78:47:
c2:71:94:d2:89:89:88:85:e7:78:b5:ea:f6:3e:af:10:ee:72:
de:f2:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:55 2026 by rpki-client