Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier: 8HjC7PcX6AYPL6QnlwtVyzGy37t16BFDtwxO00YDXQg=
Subject key identifier: 18:2B:43:54:69:8F:07:DC:59:65:36:50:EE:98:2B:E3:1E:F0:2E:3A
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer: /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial: 42C05D60374086034C0EE6AEACE5A50324255EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number: 6C
Signing time: Thu 12 Mar 2026 10:27:56 +0000
Manifest this update: Thu 12 Mar 2026 10:22:56 +0000
Manifest next update: Fri 13 Mar 2026 13:34:56 +0000
Files and hashes: 1: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: iHjxKEUWq22RoIrYntBnMKwNWHmP+rGrzW8w+Q9eDts=)
2: AS210352.asa (hash: yJKjNm+xhc7AeViPGq0DwAZi8QKfbStRh5PMX1pqlWs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c0:5d:60:37:40:86:03:4c:0e:e6:ae:ac:e5:a5:03:24:25:5e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Validity
Not Before: Mar 12 10:22:56 2026 GMT
Not After : Mar 13 13:34:56 2026 GMT
Subject: CN=182B4354698F07DC59653650EE982BE31EF02E3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c7:03:8b:38:e0:a4:78:fd:6f:49:e6:fb:29:
24:71:85:bb:9b:c0:e8:bf:a0:99:01:20:1b:04:8c:
da:28:b0:f6:db:6a:e1:87:f2:92:05:44:8b:93:91:
b8:de:29:45:74:f8:dd:43:2f:5b:45:7c:d2:d0:47:
0d:3a:d8:73:fc:de:dd:e0:8c:f0:d7:ef:9f:39:d8:
79:3c:b4:64:55:75:9e:3a:76:24:46:02:17:33:38:
26:98:7e:84:19:62:49:d7:95:b0:df:1c:2b:0e:b8:
6a:fe:d2:24:17:aa:ab:0e:85:9b:1b:fa:3e:13:03:
15:f8:5f:88:a2:77:9b:94:8f:48:3d:cf:bb:9d:ce:
5a:d4:bb:7b:f8:4e:78:6c:d4:c5:ff:f3:af:b2:27:
63:e4:21:10:d9:9c:2e:b2:82:40:ba:89:17:5d:f7:
83:02:90:02:75:5f:7d:95:40:f8:d7:43:d7:46:94:
d6:10:07:b8:66:49:dd:11:ff:60:32:f6:d3:f3:7a:
c1:76:25:e3:77:ef:3b:85:82:bf:84:b3:17:7c:2a:
78:d6:7c:97:70:fd:b0:27:90:0f:a6:61:40:dc:3b:
83:97:54:63:bf:d9:be:91:18:dc:3f:f2:ff:78:ba:
02:dc:22:09:ed:76:95:d8:ac:15:b4:34:a1:ee:ec:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2B:43:54:69:8F:07:DC:59:65:36:50:EE:98:2B:E3:1E:F0:2E:3A
X509v3 Authority Key Identifier:
keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:27:39:9f:92:45:d9:95:e3:48:25:d1:dd:8c:45:2f:36:c6:
1b:bf:10:d3:45:27:49:8b:e6:ad:db:ef:74:76:34:b8:dc:1d:
f5:cf:d4:5d:aa:f6:6d:f0:a0:02:7a:53:1d:82:e8:84:fc:e4:
8e:a1:3c:80:84:d3:8a:85:96:43:fc:55:71:71:39:ea:48:0b:
30:7e:e7:53:72:5c:95:58:f6:67:91:5e:c0:14:ec:48:de:d1:
63:d5:17:b5:1f:30:4f:07:67:d9:24:16:10:02:b1:0c:09:24:
51:ae:31:7b:b2:6d:1c:7f:1a:17:ff:08:ad:e0:dd:6f:cc:34:
1a:4c:91:e9:f6:ea:b0:9c:cc:7a:a2:69:e2:0f:9e:f5:43:9d:
34:aa:36:c9:5f:11:19:86:00:42:1c:3f:b6:8a:34:84:89:cb:
be:0c:da:c8:ae:6d:a8:86:ff:4d:9c:53:1b:5f:b9:a4:0e:ee:
f8:f4:1c:9e:79:26:a5:24:98:9d:f1:84:f7:f7:e3:8d:ae:52:
1b:fc:76:55:11:d2:78:39:70:d6:8f:95:16:0b:3d:f1:38:88:
2e:06:76:84:2c:02:2f:e1:0a:aa:f6:35:9a:5b:fb:1b:4b:50:
94:04:92:83:fd:01:08:8a:a2:98:2c:39:00:71:c6:b8:56:eb:
c7:86:00:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:40:53 2026 by rpki-client