Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier: Eyrcl3Nfb5FsFhz0FgA9BVz2qQ7viN4ACtPR9oJGTnU=
Subject key identifier: 49:02:4D:3C:F2:12:21:95:45:DB:36:4D:AD:49:A4:BF:35:17:2E:48
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer: /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial: 1C0EE3F14085326204E776EF9725EED156080864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number: F7
Signing time: Wed 24 Jun 2026 15:02:24 +0000
Manifest this update: Wed 24 Jun 2026 14:57:24 +0000
Manifest next update: Thu 25 Jun 2026 16:46:24 +0000
Files and hashes: 1: AS210352.asa (hash: eDmTtEI2L8UnjXdJYLK4KpDqqBZSh4hjuB+p0Ri9A6I=)
2: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: hp+kq86L1rHabNoWse2EYfGHbSj/0xiEijNDAlP4kbQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 16:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0e:e3:f1:40:85:32:62:04:e7:76:ef:97:25:ee:d1:56:08:08:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Validity
Not Before: Jun 24 14:57:24 2026 GMT
Not After : Jun 25 16:46:24 2026 GMT
Subject: CN=49024D3CF212219545DB364DAD49A4BF35172E48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:ad:be:5e:cf:64:ca:19:9d:4d:fa:cf:f3:
5e:45:3a:0c:ff:95:e5:b1:de:6b:aa:5b:ac:8f:69:
26:5b:eb:ae:52:53:0f:12:65:ab:2d:67:f7:f6:c7:
77:0b:6b:aa:c2:15:46:fc:74:a9:5a:0c:fb:ac:6f:
c9:65:da:c1:35:87:fa:df:85:2e:9a:53:9d:d2:01:
a0:24:27:51:14:19:31:e1:54:9a:79:90:6f:70:86:
b6:de:46:96:e1:de:a2:1c:d5:2b:c2:37:6b:19:b8:
bb:f6:97:9f:2e:87:69:9d:7d:cf:a5:ef:f9:d2:ba:
ad:c4:d3:bd:5c:cb:16:df:c9:26:8f:9c:00:3f:f8:
f0:8e:09:3c:f4:30:d9:1e:73:35:a2:20:89:1a:47:
50:b7:6f:e0:c9:2f:34:cc:77:af:cb:d3:4c:88:82:
c4:83:ab:8c:a3:48:d2:2f:6b:e9:d2:6b:7b:5e:cf:
da:a2:d6:bd:34:17:7f:d9:ad:c2:a1:bb:1e:25:a0:
06:2d:ee:b6:41:ff:d8:b6:c1:14:78:77:0f:ad:55:
c2:a0:8e:85:8b:f0:64:53:b3:9f:85:c3:63:5d:a8:
1c:cd:8b:6c:62:f5:84:70:3d:22:e3:e1:cb:1b:a6:
fe:50:ea:71:60:94:c4:93:fd:82:42:b7:fd:89:bc:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:02:4D:3C:F2:12:21:95:45:DB:36:4D:AD:49:A4:BF:35:17:2E:48
X509v3 Authority Key Identifier:
keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e4:92:d4:39:ed:ac:d0:03:68:91:96:d7:d9:16:d0:46:b9:
6d:2c:e9:74:4a:e0:95:95:69:f0:70:61:26:37:f9:0e:72:e1:
8c:5f:42:d3:57:46:e8:9b:52:7b:31:1d:21:a5:bd:4b:43:9a:
00:70:fd:10:bf:95:96:8a:bd:d8:0f:72:f9:f6:0c:bb:08:35:
7c:db:bc:6f:fe:8a:27:3f:d0:de:c2:e4:20:1f:39:91:6c:88:
fe:79:fa:04:da:a5:82:c6:03:a9:a5:6d:cd:23:2f:60:81:33:
a4:12:dd:6a:0c:be:9b:38:9a:72:ae:f3:20:cd:e3:fc:09:23:
4a:26:d3:29:9a:03:59:aa:53:d8:26:25:a3:bd:71:1e:ee:63:
91:64:ac:81:0e:8a:63:39:24:61:c2:00:2c:37:5c:2c:ac:fc:
50:4a:2b:43:f4:64:c4:0f:d5:69:f3:64:36:02:2f:3a:19:29:
b0:9e:08:48:02:18:86:2f:d3:e2:ef:3c:bb:08:d2:30:aa:95:
29:91:9f:2f:ba:9f:be:09:c7:a1:0a:3c:c7:4b:1f:38:40:80:
26:f4:30:05:a4:b4:44:83:06:95:2f:35:88:76:e2:8b:ef:a5:
ca:ef:3c:cd:e5:c0:6c:c9:74:5c:b9:37:f8:e2:37:49:4b:07:
0b:17:65:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:52 2026 by rpki-client