Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: 26KFvwj07gliog+0d+TlRE+qbNMJ1qMR1mVDGhH93SY=
Subject key identifier: B6:52:C5:2E:5A:5C:71:76:3A:D4:C6:21:A0:22:39:13:C2:60:04:36
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 01A13DB82E65837163E327AE6CCA8898F892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 14D8
Signing time: Thu 15 Oct 2026 04:00:43 +0000
Manifest this update: Thu 15 Oct 2026 04:00:43 +0000
Manifest next update: Fri 16 Oct 2026 04:00:43 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: fc5VVpHRchwIfXhC2zY2RsZdrs15c1YbL37BuXltVAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:2e:65:83:71:63:e3:27:ae:6c:ca:88:98:f8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Oct 15 04:00:43 2026 GMT
Not After : Oct 16 04:00:43 2026 GMT
Subject: CN=b652c52e5a5c71763ad4c621a0223913c2600436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:aa:d3:c5:5e:a0:14:72:c7:16:06:7b:29:
28:e4:03:04:89:f6:4a:bc:a1:f9:52:47:1b:2c:ca:
20:bd:19:b7:f2:d3:78:96:10:f3:c5:13:69:e9:f3:
cb:7e:1e:cf:bb:05:28:68:a9:c8:7e:ab:23:3d:74:
d3:f0:a9:42:66:a7:b1:8a:31:6e:55:bc:5d:58:a1:
8c:69:24:70:22:bf:32:85:5a:d3:b5:30:fd:ea:b7:
65:45:60:50:ff:55:c4:27:a7:86:5a:c6:8d:3f:20:
a4:df:b4:7f:4d:59:99:ac:96:ff:dc:e0:5f:51:a0:
35:6c:ea:f4:58:6d:9e:9f:45:df:ed:f8:2f:6d:8b:
21:38:7f:c7:3b:5d:2d:fa:05:59:ad:19:24:27:23:
26:26:72:e2:a3:40:f4:d3:d5:41:a4:f9:03:c8:40:
55:f2:27:5b:b6:14:ea:7a:99:b8:95:81:e0:c8:6e:
54:0c:de:0f:41:50:52:70:dc:70:89:f7:1f:0b:f2:
41:c1:0b:f4:8d:b4:c6:c4:81:36:27:1d:4f:0c:47:
18:9f:f4:73:cf:ef:fa:75:72:9f:43:c2:bc:12:91:
08:a0:45:2b:c5:73:2e:4c:57:60:64:a4:60:53:56:
5e:9d:ba:6a:07:5b:0d:3b:4a:60:f7:4f:0f:3d:28:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:C5:2E:5A:5C:71:76:3A:D4:C6:21:A0:22:39:13:C2:60:04:36
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1f:1c:a2:1a:cb:5e:14:60:d6:a9:96:26:20:35:03:7b:bc:
45:58:c0:20:17:5a:67:19:e7:da:8c:f6:af:1c:7b:09:4f:81:
85:7d:5f:3f:cc:dc:08:cc:f2:f5:70:56:d8:15:da:e6:a8:b0:
fc:47:89:61:8f:14:25:9e:fa:b1:d2:ba:84:df:b3:cc:13:8c:
de:86:7d:2e:16:38:40:fc:19:87:f6:8d:6f:44:b0:d7:23:5a:
21:5c:79:94:a3:10:fc:de:90:b9:52:31:fa:d6:a0:b6:ff:1e:
73:82:cd:84:01:67:ed:fd:27:b7:37:5e:6f:ee:c8:6e:a5:ff:
28:16:ed:93:96:3a:10:d9:86:73:65:a1:c1:d7:b0:6b:f1:6a:
36:d0:ee:dd:86:dd:4d:b0:c9:f2:01:69:e9:f5:a2:dd:72:e1:
ca:5a:7e:b6:0c:29:87:ff:57:91:54:94:98:d6:5c:90:e0:c2:
8e:d2:f8:e4:ee:37:fe:28:16:d9:1e:b9:51:59:71:b8:c0:e7:
8f:72:ac:30:a2:6b:15:cd:b2:13:17:e9:f5:50:4a:8e:59:ae:
03:3b:14:44:85:c4:6b:10:4f:d8:f2:10:ef:dc:cc:f8:cb:8a:
70:84:65:b8:72:6c:3b:0b:b4:2b:ba:e7:c1:09:5e:21:51:a6:
75:5a:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:26 2026 by rpki-client