Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
File: BSuwH_GcVqEHMvpZj7mdJmWLKco.mft (raw, json)
Hash identifier: MzkbW9uwWvS1EgKcsnfoz1VTyGAFG0+51ITPKHO20Ng=
Subject key identifier: DD:62:46:47:EE:37:A4:78:24:CB:09:DA:42:0D:96:86:8B:18:68:6C
Authority key identifier: 05:2B:B0:1F:F1:9C:56:A1:07:32:FA:59:8F:B9:9D:26:65:8B:29:CA
Certificate issuer: /CN=052bb01ff19c56a10732fa598fb99d26658b29ca
Certificate serial: 019F860D0296B1397C88375DB5B81D104F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
Manifest number: 23
Signing time: Tue 21 Jul 2026 19:00:27 +0000
Manifest this update: Tue 21 Jul 2026 19:00:27 +0000
Manifest next update: Wed 22 Jul 2026 19:00:27 +0000
Files and hashes: 1: 1dbY8b1XaoIJnbM1BC97LZg7wHE.asa (hash: bMYMUui1JSy4n+++0arKDdQEXe+eGeymL+uWzygFypE=)
2: BSuwH_GcVqEHMvpZj7mdJmWLKco.crl (hash: hj4BKMkK6pjelAJ1CS3UwkDn0pGpEk1P1QSMiyKvYEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:02:96:b1:39:7c:88:37:5d:b5:b8:1d:10:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052bb01ff19c56a10732fa598fb99d26658b29ca
Validity
Not Before: Jul 21 19:00:27 2026 GMT
Not After : Jul 22 19:00:27 2026 GMT
Subject: CN=dd624647ee37a47824cb09da420d96868b18686c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:68:fb:67:60:ac:4a:28:e3:06:0d:a9:f5:
74:27:36:2c:81:8f:6a:d7:19:94:9d:dd:71:bd:07:
70:5b:c0:57:b5:e4:19:04:c0:a7:d9:ad:5d:76:cf:
73:f7:af:87:00:7e:33:b8:4d:c0:7f:3a:8f:03:44:
6b:10:bb:8a:d6:5c:4e:75:58:c1:77:98:4e:2a:cf:
c1:12:a6:ec:b6:94:6a:00:41:ed:09:38:93:e2:05:
57:e8:ce:e6:26:f8:58:f2:50:95:2a:a7:45:d2:e6:
4c:60:86:c0:a6:d1:c9:4b:60:72:3a:c5:5d:93:6a:
9a:87:0f:9d:e0:41:1e:bd:84:ea:9b:d4:fb:b9:47:
86:96:18:f6:7f:18:71:60:0b:77:08:41:f1:90:20:
f0:7a:af:0d:fb:88:18:17:55:ee:84:23:e4:61:ba:
2f:e3:45:f5:3b:46:16:6d:a9:8b:9c:39:ca:06:4a:
28:ca:6f:f0:f6:19:b1:67:6b:cf:45:b5:a2:47:6b:
9e:6b:19:31:17:6c:c7:f1:8b:da:ac:9b:b8:b7:3b:
23:9c:71:04:51:67:ad:40:fb:1b:24:20:fa:55:07:
71:24:28:a9:4f:e5:5c:ce:8d:09:50:9e:a0:d3:77:
55:47:f9:01:16:7d:d7:1e:55:8a:9e:9c:94:5b:53:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:46:47:EE:37:A4:78:24:CB:09:DA:42:0D:96:86:8B:18:68:6C
X509v3 Authority Key Identifier:
keyid:05:2B:B0:1F:F1:9C:56:A1:07:32:FA:59:8F:B9:9D:26:65:8B:29:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2c:f6:bd:e1:2a:fd:e8:ae:c5:3e:d2:4a:3e:5f:0a:f6:31:
71:ce:60:82:1d:b5:fa:15:de:d9:91:61:01:e7:cc:6d:94:b6:
57:8e:85:27:10:47:e9:8f:e3:6e:5a:9f:b1:b0:b0:41:e5:88:
12:68:6a:29:f4:d4:a2:6c:12:c5:34:05:63:fc:4c:60:a6:e2:
98:7b:b6:17:d3:b1:d4:59:2c:f7:b7:a4:c6:1d:36:e7:38:fe:
b2:2d:86:27:86:47:1b:0d:a0:bf:fd:a5:50:a5:89:94:8d:07:
e3:f7:ac:49:68:d0:c7:94:69:42:01:4e:da:8e:5c:c2:00:ee:
da:9c:f7:e9:a5:a7:1c:39:2e:44:bf:73:e6:97:ff:5d:a5:fd:
42:9f:89:2b:2a:1d:f6:03:e2:e1:43:8a:0d:29:7e:5f:67:b9:
44:84:d8:ed:59:5d:61:b9:22:83:0e:ac:e0:c0:a8:9c:fe:69:
67:87:6d:6b:c2:55:a4:d1:0b:45:38:72:b1:c2:21:84:bd:b5:
4e:21:ce:0a:58:c4:56:e4:35:37:50:16:c4:8f:cc:ae:52:d5:
a1:a7:6c:ea:75:a1:bc:a6:75:45:f3:f9:5c:ba:6a:18:bc:54:
97:3a:dd:06:1b:24:ae:12:e0:c7:a4:53:ea:79:62:54:53:05:
b9:5c:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:57:39 2026 by rpki-client