Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
File: BSuwH_GcVqEHMvpZj7mdJmWLKco.mft (raw, json)
Hash identifier: 3cad0953RPhpdMWNtVA5eIYHZe/fhB6/cwsbMogaVQo=
Subject key identifier: 5C:10:D1:29:FC:1B:5E:FB:2A:57:D6:7A:9D:C6:72:F9:53:E8:4B:30
Authority key identifier: 05:2B:B0:1F:F1:9C:56:A1:07:32:FA:59:8F:B9:9D:26:65:8B:29:CA
Certificate issuer: /CN=052bb01ff19c56a10732fa598fb99d26658b29ca
Certificate serial: 01A17E17E9CD878CB2612206C499B5B6D967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
Manifest number: 0128
Signing time: Tue 27 Oct 2026 16:00:58 +0000
Manifest this update: Tue 27 Oct 2026 16:00:58 +0000
Manifest next update: Wed 28 Oct 2026 16:00:58 +0000
Files and hashes: 1: 1dbY8b1XaoIJnbM1BC97LZg7wHE.asa (hash: bMYMUui1JSy4n+++0arKDdQEXe+eGeymL+uWzygFypE=)
2: BSuwH_GcVqEHMvpZj7mdJmWLKco.crl (hash: +4wP5BOG2qhPMJaYqSLY2blPhyfZ2egRVJsgPpgEAIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:e9:cd:87:8c:b2:61:22:06:c4:99:b5:b6:d9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052bb01ff19c56a10732fa598fb99d26658b29ca
Validity
Not Before: Oct 27 16:00:58 2026 GMT
Not After : Oct 28 16:00:58 2026 GMT
Subject: CN=5c10d129fc1b5efb2a57d67a9dc672f953e84b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a3:76:ff:ef:08:9e:34:0e:bc:5d:0c:2d:62:
51:51:2d:b2:05:24:87:7a:61:b9:31:2e:78:0c:ac:
7b:48:ae:84:d2:e7:26:32:c6:51:30:73:08:02:b8:
cb:5b:f5:bd:d9:98:10:34:e1:22:2c:ed:e5:43:09:
7d:2c:4f:77:d8:d9:a6:c1:23:75:ec:61:e4:8e:68:
93:11:63:b5:32:b5:20:cc:81:a8:d4:bb:e2:54:74:
7d:39:51:79:e5:e9:02:8b:84:af:55:0f:b9:d8:f5:
ad:72:a2:46:8e:0c:3b:24:f8:8a:01:17:6c:0b:a3:
17:82:a6:75:61:af:38:bb:6c:07:cb:69:4f:db:4c:
7b:6d:43:e7:38:12:0c:98:32:7a:e6:06:f5:88:79:
a1:f1:79:29:b4:29:9a:99:fd:4d:ec:15:62:1c:d1:
1f:bf:a9:22:d7:63:d0:e5:d2:b5:7a:60:bf:8a:e9:
90:86:fa:f5:70:af:e3:66:bf:bb:bc:4c:3f:0d:e1:
63:81:a6:72:4a:da:da:2b:00:ef:61:fe:5d:e2:ac:
ae:1d:75:09:4e:be:68:cd:fb:1b:33:dd:69:bf:dd:
73:c9:ae:2f:ac:4f:2e:4d:bf:da:1d:a4:84:76:1d:
01:0e:e3:45:30:dc:0c:e8:ac:6b:4b:91:17:66:b9:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:10:D1:29:FC:1B:5E:FB:2A:57:D6:7A:9D:C6:72:F9:53:E8:4B:30
X509v3 Authority Key Identifier:
keyid:05:2B:B0:1F:F1:9C:56:A1:07:32:FA:59:8F:B9:9D:26:65:8B:29:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuwH_GcVqEHMvpZj7mdJmWLKco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/89de08-5528-4aee-99b7-fda33f279e05/1/BSuwH_GcVqEHMvpZj7mdJmWLKco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e0:d7:29:34:7c:70:7b:55:f6:da:80:4a:c7:b4:67:85:c7:
ee:78:62:32:f9:c9:ac:c3:87:0b:44:63:71:71:d9:06:7d:f0:
d3:8c:71:66:1b:de:9f:ef:b2:26:00:4e:a6:31:34:08:4b:6c:
a8:82:80:98:41:bc:67:25:00:31:0a:b5:8f:6a:c4:d6:9d:e7:
6a:97:77:92:41:b0:b1:db:74:13:2a:9e:a4:1d:7c:a5:95:96:
e4:66:20:9c:3d:7c:0b:b3:90:40:df:17:b8:81:b7:59:a5:1f:
0c:ce:f5:b8:aa:6e:1d:e9:37:97:e1:b7:bb:5c:ae:2f:69:6c:
c7:73:6d:a4:d7:81:c2:93:e7:ec:84:b6:a8:f8:ad:8f:f7:6f:
f2:14:f0:05:d2:18:bb:9e:09:a2:8f:0b:39:95:7d:da:2c:74:
a9:33:b0:e7:03:14:8b:87:7b:0c:cf:24:5b:ba:66:ef:54:0b:
26:c9:c5:84:85:a4:91:54:41:b6:ce:27:2a:1e:0d:b7:bf:81:
42:bb:58:95:23:6d:ff:9d:64:c7:91:7c:39:0f:18:01:53:56:
76:25:18:dc:8d:48:4a:84:fc:f7:6b:7c:82:97:1b:06:0e:47:
89:2f:ac:5c:50:7c:80:7a:a4:03:fb:69:3b:ac:bf:94:b5:3f:
7e:95:69:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+F+nNh4yyYSIGxJm1ttlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmJiMDFmZjE5YzU2YTEwNzMyZmE1OThmYjk5ZDI2NjU4
YjI5Y2EwHhcNMjYxMDI3MTYwMDU4WhcNMjYxMDI4MTYwMDU4WjAzMTEwLwYDVQQD
Eyg1YzEwZDEyOWZjMWI1ZWZiMmE1N2Q2N2E5ZGM2NzJmOTUzZTg0YjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66N2/+8InjQOvF0MLWJRUS2yBSSH
emG5MS54DKx7SK6E0ucmMsZRMHMIArjLW/W92ZgQNOEiLO3lQwl9LE932NmmwSN1
7GHkjmiTEWO1MrUgzIGo1LviVHR9OVF55ekCi4SvVQ+52PWtcqJGjgw7JPiKARds
C6MXgqZ1Ya84u2wHy2lP20x7bUPnOBIMmDJ65gb1iHmh8XkptCmamf1N7BViHNEf
v6ki12PQ5dK1emC/iumQhvr1cK/jZr+7vEw/DeFjgaZyStraKwDvYf5d4qyuHXUJ
Tr5ozfsbM91pv91zya4vrE8uTb/aHaSEdh0BDuNFMNwM6KxrS5EXZrlbXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwQ0Sn8G177KlfWep3GcvlT6EswMB8GA1UdIwQY
MBaAFAUrsB/xnFahBzL6WY+5nSZliynKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlN1d0hfR2NWcUVITXZwWmo3bWRKbVdMS2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84OWRlMDgtNTUyOC00YWVlLTk5Yjct
ZmRhMzNmMjc5ZTA1LzEvQlN1d0hfR2NWcUVITXZwWmo3bWRKbVdMS2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84OWRlMDgtNTUyOC00YWVlLTk5YjctZmRhMzNmMjc5ZTA1
LzEvQlN1d0hfR2NWcUVITXZwWmo3bWRKbVdMS2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+DXKTR8
cHtV9tqASse0Z4XH7nhiMvnJrMOHC0RjcXHZBn3w04xxZhven++yJgBOpjE0CEts
qIKAmEG8ZyUAMQq1j2rE1p3napd3kkGwsdt0EyqepB18pZWW5GYgnD18C7OQQN8X
uIG3WaUfDM71uKpuHek3l+G3u1yuL2lsx3NtpNeBwpPn7IS2qPitj/dv8hTwBdIY
u54Joo8LOZV92ix0qTOw5wMUi4d7DM8kW7pm71QLJsnFhIWkkVRBts4nKh4Nt7+B
QrtYlSNt/51kx5F8OQ8YAVNWdiUY3I1ISoT892t8gpcbBg5HiS+sXFB8gHqkA/tp
O6y/lLU/fpVpHQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:36:56 2026 by rpki-client