
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier: zmCnnJ2/RONCgR3r/5LZbyec7w+lcBd813p6kPP6p6E=
Subject key identifier: 33:08:31:96:D0:08:FC:21:4D:AF:7C:11:1F:41:0E:1F:3C:05:B2:58
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer: /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial: 235166F0B7A1E56AA36C3798E18EA1B73A226BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number: 0152
Signing time: Sun 30 Aug 2026 21:52:21 +0000
Manifest this update: Sun 30 Aug 2026 21:47:21 +0000
Manifest next update: Mon 31 Aug 2026 23:28:21 +0000
Files and hashes: 1: AS210352.asa (hash: x0Mzp9uNbhYBNVbao9h99kMNB+s8WR3cShhsKi7t0Wk=)
2: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: QOUmUNox5/avYKjSivOrcBbHcDB6GxnuJxzcPVfUjt4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 23:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:51:66:f0:b7:a1:e5:6a:a3:6c:37:98:e1:8e:a1:b7:3a:22:6b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Validity
Not Before: Aug 30 21:47:21 2026 GMT
Not After : Aug 31 23:28:21 2026 GMT
Subject: CN=33083196D008FC214DAF7C111F410E1F3C05B258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:9b:74:a6:44:4b:bd:c4:da:e1:96:17:f9:
b8:f3:8b:fb:9e:c8:79:9f:fd:3f:6b:c6:fc:ef:70:
b7:4e:61:40:5a:7c:ed:5a:18:45:7f:10:e3:0e:e7:
cc:67:19:cc:80:6f:06:b1:d1:98:52:49:5b:93:ba:
ce:ca:d5:e4:52:4a:51:d6:e0:e0:49:47:0a:89:17:
1a:3f:64:ea:14:ea:d6:83:44:6c:5d:80:f0:da:24:
cc:fa:d5:76:c1:61:ad:3b:7a:77:09:dd:1f:3f:ed:
67:89:23:66:e8:4e:40:90:8e:f8:8e:66:10:10:3f:
72:01:14:23:90:00:25:f6:77:2a:09:24:35:f6:8d:
e3:c4:c9:51:44:47:40:9b:8a:9c:1a:b7:6e:29:52:
17:75:7a:5a:53:51:18:83:d0:7d:fc:c0:fa:0a:cb:
7f:63:d0:47:bc:92:94:8e:28:34:22:7d:60:7b:92:
bf:63:77:7c:e0:24:0d:53:ac:43:34:b3:8b:90:ee:
78:98:98:95:1e:06:bc:83:a3:0a:93:6f:f7:a8:15:
e4:5f:68:d1:7e:2b:62:61:2d:37:c2:6b:ba:aa:6b:
90:bc:2c:9c:a9:51:c9:19:bc:d0:6a:f5:ee:3b:04:
43:72:ac:52:17:3e:a8:61:fa:44:d1:91:75:5d:e8:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:08:31:96:D0:08:FC:21:4D:AF:7C:11:1F:41:0E:1F:3C:05:B2:58
X509v3 Authority Key Identifier:
keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:48:d7:f3:a0:d4:c1:0c:b1:fd:4f:57:94:bc:57:34:2c:89:
74:34:f1:34:8b:39:0c:41:dd:73:b2:e2:75:e8:5e:d8:f2:c9:
a0:07:b1:e1:43:15:e1:cc:08:ee:2e:58:43:d2:d7:59:64:42:
44:73:2a:86:0c:93:b2:04:e7:4d:f4:80:32:ec:d1:99:0f:da:
4c:d0:ba:6c:c9:55:f0:b5:9e:fa:40:87:da:d2:1d:00:6c:d5:
18:99:59:aa:f3:d2:e0:0b:9a:2f:26:4f:19:ba:2c:92:59:44:
5c:28:ee:60:ac:35:cf:05:70:bf:81:5a:8f:e4:e7:95:75:f7:
97:69:c6:60:f2:c6:75:3e:cc:a3:a1:cb:44:20:64:a6:56:84:
71:51:98:19:7e:20:d6:ec:f9:40:e7:a4:19:99:ed:34:29:6d:
33:1d:22:84:16:11:da:c4:96:6c:05:ff:98:81:43:f8:04:34:
2b:a6:30:25:ec:71:9a:d4:1c:09:a6:1c:17:40:83:59:00:50:
65:2c:48:1d:d2:1c:5a:c6:45:5d:74:cb:27:3c:e0:42:d2:00:
48:1a:29:49:73:25:37:24:be:f6:6b:fd:6f:51:3d:ec:46:a7:
00:5f:0f:2b:72:4b:a8:0c:f2:75:0d:5e:63:e5:6d:1d:15:91:
aa:a1:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:11:26 2026 by rpki-client