Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier: YfwtYt0U+PnvpC5U6WkGYHOOivcVp+GtJaOXksdv8dU=
Subject key identifier: 92:EB:AC:EA:3F:CE:E4:9B:27:08:15:60:5B:1D:65:79:69:4E:73:A0
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer: /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial: 4D00FBF3041D2DB371F95B69DF9EC96E84081C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number: AB
Signing time: Wed 29 Apr 2026 03:24:45 +0000
Manifest this update: Wed 29 Apr 2026 03:19:45 +0000
Manifest next update: Thu 30 Apr 2026 05:23:45 +0000
Files and hashes: 1: AS210352.asa (hash: M8+p/q+fWYKtpnuLMBZfSfWyS3K0URFrC79TnsXorAY=)
2: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: qc0foBnLeLyjKw4ADMnHbzN5dCKJMNROZ+d1RuE1l/U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 05:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:00:fb:f3:04:1d:2d:b3:71:f9:5b:69:df:9e:c9:6e:84:08:1c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Validity
Not Before: Apr 29 03:19:45 2026 GMT
Not After : Apr 30 05:23:45 2026 GMT
Subject: CN=92EBACEA3FCEE49B270815605B1D6579694E73A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:87:f0:03:38:0e:ca:0f:78:d5:91:3d:0e:
79:2b:65:f0:5a:d4:8e:44:d7:a7:77:a8:68:1b:ee:
fe:eb:f5:22:b3:5e:ff:a5:00:f7:85:d1:ea:6d:ab:
6e:f2:8a:91:b5:9e:a4:71:a1:b4:c5:38:d8:eb:88:
85:58:6f:45:49:ae:fd:34:ed:e3:3d:d2:6e:c9:4c:
41:04:46:8c:65:3e:7b:93:1a:09:89:9a:47:d1:dd:
a5:3b:e9:31:81:0b:24:61:ab:23:58:1b:ae:14:e4:
b2:29:e7:90:5d:b9:1d:63:91:ab:95:fc:3b:b9:7a:
d5:e9:39:33:d6:23:c3:cf:db:ba:e3:53:66:b1:e3:
09:f9:d6:0a:82:e7:15:1b:64:a5:a9:8b:80:88:2a:
59:94:fd:c9:72:46:d5:f4:62:6a:55:09:cd:ff:25:
29:96:84:30:df:85:07:91:e6:7f:bc:c3:fd:09:ed:
d6:cc:18:3d:0b:da:5b:c0:4f:e7:1a:b5:fb:55:9a:
17:3d:d4:db:bc:19:93:70:f3:ff:58:7b:34:17:04:
8f:58:f8:24:d6:1b:9c:93:bb:3c:ea:71:24:6a:b2:
7b:a7:e9:ae:68:1b:32:45:d6:17:41:22:01:be:2d:
4d:11:f9:d9:2b:ec:e5:df:16:08:41:13:f4:60:25:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:AC:EA:3F:CE:E4:9B:27:08:15:60:5B:1D:65:79:69:4E:73:A0
X509v3 Authority Key Identifier:
keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:89:84:f6:c6:15:a2:68:8c:38:2e:d2:e4:12:16:5b:d0:ed:
b1:79:a7:2d:2a:86:7f:f4:4d:c2:63:04:be:b0:ed:c4:6f:65:
f1:3e:50:84:d9:53:61:24:db:77:34:17:a8:9c:03:c1:0c:b6:
93:e3:b5:d1:11:05:53:14:b3:7c:29:16:05:e4:f1:3d:b9:6c:
87:31:12:97:76:a3:c3:30:20:bf:b6:f8:21:8e:2c:31:a1:b1:
44:83:e8:2d:44:f6:c9:94:db:d5:00:b2:6a:5c:56:8c:e1:50:
d0:ee:d4:6f:59:ec:2c:6c:1e:33:f4:1f:e0:92:00:df:ad:62:
91:02:2a:9e:15:fc:aa:f1:45:f2:0d:bf:18:f7:ec:02:30:41:
7a:a7:8e:26:6a:34:71:cb:0f:20:d5:24:9d:5c:f2:f9:41:db:
20:fe:02:fa:af:40:1c:fc:7c:1d:18:14:9e:b9:bf:58:94:1e:
9d:42:f2:42:9a:e2:2c:a7:69:89:f7:37:3a:1c:33:28:cd:07:
9a:aa:54:8f:85:49:64:83:6a:76:06:9b:67:9e:88:57:e7:0c:
35:93:39:e4:e1:c2:49:5d:c2:67:9f:4b:7b:af:65:45:73:fc:
05:0a:94:e2:ac:96:a0:53:b6:da:a8:cb:79:b2:ed:82:e8:9b:
53:7a:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 14:10:26 2026 by rpki-client