Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
File: BSuwH_GcVqEHMvpZj7mdJmWLKco.mft (raw, json)
Hash identifier: YsSc5yOzPekpLLGoRzpeDRjHo9m0jpvqiHu1tcJqNlI=
Subject key identifier: ED:3C:AD:4C:F3:FF:38:97:CE:2F:58:52:07:9B:1F:17:16:85:BE:4D
Authority key identifier: 05:2B:B0:1F:F1:9C:56:A1:07:32:FA:59:8F:B9:9D:26:65:8B:29:CA
Certificate issuer: /CN=052bb01ff19c56a10732fa598fb99d26658b29ca
Certificate serial: 01A17C29610AB79BE6FA415BF2E0D828F7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
Manifest number: 0127
Signing time: Tue 27 Oct 2026 07:00:48 +0000
Manifest this update: Tue 27 Oct 2026 07:00:48 +0000
Manifest next update: Wed 28 Oct 2026 07:00:48 +0000
Files and hashes: 1: 1dbY8b1XaoIJnbM1BC97LZg7wHE.asa (hash: bMYMUui1JSy4n+++0arKDdQEXe+eGeymL+uWzygFypE=)
2: BSuwH_GcVqEHMvpZj7mdJmWLKco.crl (hash: llqkG1oG5zVbcAeDHaBTlvFqUR288egvKD2gO3oC9I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:61:0a:b7:9b:e6:fa:41:5b:f2:e0:d8:28:f7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052bb01ff19c56a10732fa598fb99d26658b29ca
Validity
Not Before: Oct 27 07:00:48 2026 GMT
Not After : Oct 28 07:00:48 2026 GMT
Subject: CN=ed3cad4cf3ff3897ce2f5852079b1f171685be4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:d4:83:95:7c:0b:07:07:9d:15:09:8a:a0:
b4:82:69:4d:84:88:19:40:2f:37:d7:8e:3f:4b:6b:
a8:b4:8c:70:e8:ce:b9:d9:6d:2d:69:69:60:0f:c0:
9c:36:c1:a2:b4:f9:30:2b:a9:9e:64:10:69:2c:62:
6b:90:04:9e:54:75:ee:fc:bc:bc:8e:df:7e:2f:b6:
0d:ef:0e:36:75:ec:94:c2:d5:54:20:21:96:75:1e:
fb:1c:3c:6d:17:4c:5c:8c:77:fb:8d:22:81:df:fd:
59:83:18:d7:ca:d7:f0:f8:86:70:95:d1:c1:c2:3b:
b7:81:55:27:f8:96:30:3a:15:e8:3f:6b:96:69:2b:
fa:af:8d:8b:f5:48:2b:a7:70:8a:cb:8f:30:61:5c:
37:ec:06:d8:c8:2a:44:7b:b3:c9:33:8e:13:fd:93:
09:2e:10:f7:22:60:c5:25:b1:fe:51:a1:8f:51:09:
c0:8d:5d:13:7a:7b:c0:0b:e6:e9:95:24:2a:6a:49:
b5:53:4c:ab:40:97:35:f4:c4:44:d7:11:7a:ea:19:
b3:8b:bf:26:c8:23:c5:b4:c7:74:ca:7c:b9:69:49:
d8:4e:1a:cb:11:a8:d7:22:bd:44:b8:41:03:1e:dd:
20:22:05:74:bf:9a:7f:e7:97:2f:f9:3b:80:85:90:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:AD:4C:F3:FF:38:97:CE:2F:58:52:07:9B:1F:17:16:85:BE:4D
X509v3 Authority Key Identifier:
keyid:05:2B:B0:1F:F1:9C:56:A1:07:32:FA:59:8F:B9:9D:26:65:8B:29:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5f:74:5d:0e:c7:f8:00:48:c5:3f:3f:8d:09:e7:53:78:ba:
c0:26:b2:7f:cc:a0:c8:1e:57:aa:c0:93:85:9e:d0:9f:c4:5d:
c9:0b:de:b9:34:b6:82:2d:76:c9:e3:b0:7a:8b:93:06:34:8f:
6d:a0:f5:b0:a0:13:34:dd:48:16:d3:da:db:dc:17:b6:6e:0e:
15:5b:41:f3:f7:ab:58:24:33:47:9e:af:85:d2:5c:77:35:50:
cf:6a:03:37:a9:2d:ed:67:15:1c:7e:dc:e1:42:f6:fb:41:63:
43:31:59:47:cf:82:a4:e3:6e:ff:57:bc:b4:08:2d:b8:ba:fc:
2b:ac:5c:40:ea:30:61:28:87:7b:1e:09:ea:5e:59:0d:18:57:
e3:7e:0b:21:2a:48:f0:4b:d9:9c:31:bf:14:b0:73:96:87:99:
0f:49:ae:47:17:47:a2:59:b1:8e:45:61:2a:23:de:0b:86:7c:
1a:6b:55:9d:c9:92:4c:ff:22:e1:ec:e1:66:3c:28:bf:d7:c8:
62:b2:b2:a1:b9:2c:8a:08:e3:cc:e5:a9:45:b0:d3:fe:39:68:
d5:fc:d5:ed:64:3a:a2:fa:d8:b5:2b:8c:66:52:6d:cb:bc:4d:
94:ce:62:c3:c6:a3:50:7d:be:b6:fc:4b:d5:18:86:f2:75:10:
4e:92:2e:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KWEKt5vm+kFb8uDYKPfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmJiMDFmZjE5YzU2YTEwNzMyZmE1OThmYjk5ZDI2NjU4
YjI5Y2EwHhcNMjYxMDI3MDcwMDQ4WhcNMjYxMDI4MDcwMDQ4WjAzMTEwLwYDVQQD
EyhlZDNjYWQ0Y2YzZmYzODk3Y2UyZjU4NTIwNzliMWYxNzE2ODViZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgfUg5V8CwcHnRUJiqC0gmlNhIgZ
QC83144/S2uotIxw6M652W0taWlgD8CcNsGitPkwK6meZBBpLGJrkASeVHXu/Ly8
jt9+L7YN7w42deyUwtVUICGWdR77HDxtF0xcjHf7jSKB3/1ZgxjXytfw+IZwldHB
wju3gVUn+JYwOhXoP2uWaSv6r42L9Ugrp3CKy48wYVw37AbYyCpEe7PJM44T/ZMJ
LhD3ImDFJbH+UaGPUQnAjV0TenvAC+bplSQqakm1U0yrQJc19MRE1xF66hmzi78m
yCPFtMd0yny5aUnYThrLEajXIr1EuEEDHt0gIgV0v5p/55cv+TuAhZAxmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO08rUzz/ziXzi9YUgebHxcWhb5NMB8GA1UdIwQY
MBaAFAUrsB/xnFahBzL6WY+5nSZliynKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlN1d0hfR2NWcUVITXZwWmo3bWRKbVdMS2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84OWRlMDgtNTUyOC00YWVlLTk5Yjct
ZmRhMzNmMjc5ZTA1LzEvQlN1d0hfR2NWcUVITXZwWmo3bWRKbVdMS2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84OWRlMDgtNTUyOC00YWVlLTk5YjctZmRhMzNmMjc5ZTA1
LzEvQlN1d0hfR2NWcUVITXZwWmo3bWRKbVdMS2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHF90XQ7H
+ABIxT8/jQnnU3i6wCayf8ygyB5XqsCThZ7Qn8RdyQveuTS2gi12yeOweouTBjSP
baD1sKATNN1IFtPa29wXtm4OFVtB8/erWCQzR56vhdJcdzVQz2oDN6kt7WcVHH7c
4UL2+0FjQzFZR8+CpONu/1e8tAgtuLr8K6xcQOowYSiHex4J6l5ZDRhX434LISpI
8EvZnDG/FLBzloeZD0muRxdHolmxjkVhKiPeC4Z8GmtVncmSTP8i4ezhZjwov9fI
YrKyobksigjjzOWpRbDT/jlo1fzV7WQ6ovrYtSuMZlJty7xNlM5iw8ajUH2+tvxL
1RiG8nUQTpIu8w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:45:37 2026 by rpki-client