Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: it1CgzOP1iTHlffZ2Vn+h6/1iFmT1L9N7Y3BlA1/1ic=
Subject key identifier: 74:0A:F9:64:58:86:26:30:38:DF:BE:C8:DC:6E:99:E2:34:BE:2E:32
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 01A0C5C5A2E1071D1EFBBF7AA7C08765DEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0D40
Signing time: Mon 21 Sep 2026 21:00:58 +0000
Manifest this update: Mon 21 Sep 2026 21:00:58 +0000
Manifest next update: Tue 22 Sep 2026 21:00:58 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: I6MzSPj8nLvJjEtBVNb4LzTBd0ZaupySBl3LFkv9HBI=)
2: NVWKSQ6XeTs9oBM9mH9GDWql-4U.roa (hash: 9ZIbG9al1rdRHLFehJy3ARx4hRFjcesPVT2nGXw1rKM=)
3: gr0cmRtDnRg8WRBE5wgHk-NVvyE.roa (hash: DWSi/wfOMBMvBppFfmkuW+E4394pYqKUQ4bx3UceSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:a2:e1:07:1d:1e:fb:bf:7a:a7:c0:87:65:de:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Sep 21 21:00:58 2026 GMT
Not After : Sep 22 21:00:58 2026 GMT
Subject: CN=740af9645886263038dfbec8dc6e99e234be2e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:a1:a7:f8:83:3d:fa:5b:63:04:51:39:f0:
ea:94:b8:64:fa:11:a4:70:c7:62:52:d5:ba:08:4d:
fa:b1:24:9e:6e:6e:8a:d0:7b:21:31:e8:3f:de:55:
db:5f:fe:2b:02:62:8e:a0:9c:fc:b3:4a:98:62:2d:
bf:b6:26:ba:46:dd:50:a1:bf:3f:22:10:ab:d8:52:
0b:2f:2f:d5:39:19:2e:96:91:71:9c:d1:5c:2f:2e:
e8:d2:03:ac:23:c0:2e:9d:0d:32:d5:df:da:50:0e:
96:e4:31:32:1f:5d:d8:ba:c8:a5:19:d9:cd:c8:56:
87:40:0e:10:f8:ec:6e:44:12:e6:5d:23:49:71:11:
3f:89:ad:f6:d9:64:e4:0b:34:08:4f:df:2e:aa:94:
77:0a:b4:99:07:81:79:c7:d0:ca:d2:e6:d8:3a:ac:
e2:77:40:da:1f:01:b3:e0:5c:44:48:e3:c0:20:d1:
8d:c7:61:71:aa:2a:26:94:60:56:9d:d4:90:fd:ce:
eb:a7:7a:bd:8f:de:dd:a9:5c:03:5c:5f:56:52:83:
a9:29:4d:0f:d1:b4:dd:39:a0:1e:56:a3:a2:96:58:
0f:cc:e4:07:e1:5a:fd:93:b4:56:8b:8a:99:26:51:
02:8f:cb:52:c1:d7:a0:ac:87:61:40:da:b6:ae:d5:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0A:F9:64:58:86:26:30:38:DF:BE:C8:DC:6E:99:E2:34:BE:2E:32
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9e:e9:1e:05:49:18:6f:6d:76:cf:11:85:d9:ad:31:52:8f:
16:38:ee:09:f0:22:2c:56:b0:e7:d8:f0:ec:2c:58:8a:fd:0d:
6c:3b:48:d7:ea:6a:6d:16:bc:b7:68:b2:04:59:36:48:f1:1f:
99:af:05:0b:d3:d7:34:a4:48:ec:40:51:fc:02:df:36:c7:55:
4b:e5:ae:f1:60:ee:c7:de:fe:59:be:e4:1e:ca:d4:bc:75:e6:
d1:da:c1:71:d2:38:e2:7f:93:b3:6b:28:71:8b:17:40:09:c7:
87:79:8e:9a:42:b0:d4:2f:9f:11:85:e1:f1:cb:77:8d:79:ec:
54:b3:9c:ce:f7:c3:a1:6e:94:4d:61:f5:8c:59:79:9a:74:d6:
05:3d:5e:25:42:49:ab:b7:2e:b3:41:7f:6e:33:89:9d:e2:86:
23:0e:85:c3:6e:56:34:e6:6c:e2:77:71:a0:e9:bb:d8:9d:8b:
24:ac:c0:d0:72:00:98:4e:dd:74:cd:53:be:84:6d:7f:25:ed:
64:5b:9c:d9:a9:af:3f:87:db:05:33:52:f4:a8:f8:bb:38:bf:
84:55:32:b1:bb:95:fe:a5:00:94:3d:bd:7b:73:eb:9d:c8:2d:
e6:00:64:18:a8:33:89:e8:ed:a1:18:76:cd:cb:bd:5a:7f:3a:
53:d7:27:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:08:39 2026 by rpki-client