Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier: QfuHD0ZHKweDGxcUQZ/Nm1jpOX4z5uiCfMjLenvqIWk=
Subject key identifier: 23:83:57:F0:34:3F:64:A1:83:32:BE:DE:92:CB:EF:34:22:CF:BE:3F
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer: /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial: 4CFE28D6FE966D9A6AAD3F2E108E8D2A7A7060B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number: 0197
Signing time: Tue 20 Oct 2026 03:51:53 +0000
Manifest this update: Tue 20 Oct 2026 03:46:53 +0000
Manifest next update: Wed 21 Oct 2026 06:07:53 +0000
Files and hashes: 1: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: hse3SBeJRgjWlt4CociTXoG4xUT6ooHhVnQNvWbZVqQ=)
2: AS210352.asa (hash: o0EH/oVbiOTUh1ut2Ru3PXuz68uNCjaxkDnmygQHJRQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fe:28:d6:fe:96:6d:9a:6a:ad:3f:2e:10:8e:8d:2a:7a:70:60:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Validity
Not Before: Oct 20 03:46:53 2026 GMT
Not After : Oct 21 06:07:53 2026 GMT
Subject: CN=238357F0343F64A18332BEDE92CBEF3422CFBE3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:08:d3:ed:fe:53:66:eb:05:e9:b5:0a:aa:
cf:b8:b8:58:bd:de:6c:fc:b1:38:cd:86:73:40:b3:
42:00:0a:7e:1f:a7:f0:2c:95:62:93:72:f7:2a:d2:
57:ce:55:8c:f9:b5:27:45:dd:64:9f:8d:23:cf:38:
8b:dc:6d:1b:2a:fb:47:05:78:fd:07:20:35:dd:48:
bd:b6:8f:22:43:7e:c4:64:ed:89:97:2d:b5:8c:f3:
a6:3e:05:be:9c:b0:e1:5e:cb:b0:12:07:78:69:54:
4f:79:0e:da:ac:0a:82:a3:81:4c:90:3e:6e:46:0d:
ef:7b:21:e7:f2:da:d5:5a:a0:2c:be:c5:97:c2:e5:
ce:97:cb:de:f8:27:7b:b5:ef:33:4f:d4:72:98:8c:
7f:77:5e:3c:d2:a7:d9:33:9f:80:de:44:98:b9:c7:
aa:7c:26:5c:f4:fb:3b:73:d7:b2:d7:28:a5:1d:b8:
af:c8:1f:d9:9f:d4:42:fc:3a:3a:0d:87:6b:76:9d:
8f:4b:cd:b1:a4:24:75:3b:3f:41:1d:6e:dd:43:50:
e8:02:ac:52:e7:fa:1f:58:63:f3:5b:9e:cd:f8:4e:
83:48:29:34:32:d8:35:82:44:25:ef:28:84:ba:90:
94:e4:8c:b4:23:39:e8:eb:ce:54:8f:28:e6:a7:c8:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:57:F0:34:3F:64:A1:83:32:BE:DE:92:CB:EF:34:22:CF:BE:3F
X509v3 Authority Key Identifier:
keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1d:23:da:de:0b:89:b7:42:70:27:e2:67:27:a2:25:89:bb:
d7:01:0d:8c:20:e0:fc:c3:9e:f4:23:86:bc:46:37:20:d7:97:
ce:19:6a:bd:ca:49:ee:75:cd:bb:d2:ce:22:14:ab:c7:fd:fb:
64:25:f4:54:35:27:ff:9a:4c:01:d8:af:53:0c:23:87:44:c4:
ba:85:c4:67:e9:11:8a:33:6e:56:b6:b7:72:2d:89:80:9d:f6:
a5:69:7d:06:18:ab:de:69:77:1b:2e:f7:4c:47:72:7a:f2:50:
71:0c:43:71:ff:68:f5:88:55:fe:61:bb:d3:05:82:40:e8:5e:
84:a5:fe:3c:81:9d:00:61:89:2d:93:c4:92:42:a2:c7:bf:bb:
ea:e8:d1:87:7c:cf:e0:b5:c3:c9:bb:9f:4a:c8:af:03:a3:39:
8d:d6:83:09:21:de:65:dc:d7:4e:79:08:b0:f4:b3:ad:58:7a:
24:3c:bf:e1:90:12:a5:8a:6d:e6:d8:58:23:f7:d5:ce:df:0a:
8a:c9:65:79:94:41:16:41:50:50:12:64:6d:1e:02:b3:32:98:
14:df:6c:c2:2f:60:b0:4e:ce:8b:9a:12:aa:23:36:5f:59:4a:
06:81:06:ba:b0:cb:ed:b2:36:b2:56:c2:4b:49:3a:e2:bc:5e:
d0:8d:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:03:24 2026 by rpki-client