Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: qUNSoiMeu+n3ZKMBqT1MHB7VM3c+MO6xDw70CeNgOgw=
Subject key identifier: 20:4B:21:B9:BB:18:E6:18:F9:02:EA:F3:81:27:E9:CB:DE:7E:14:9E
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019EC036341C97206B93E6DFA39AA88FAA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0C34
Signing time: Sat 13 Jun 2026 09:00:38 +0000
Manifest this update: Sat 13 Jun 2026 09:00:38 +0000
Manifest next update: Sun 14 Jun 2026 09:00:38 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: dUVEMC/6P1B4R3KLzKpuRP/34VvTXwHmVs/IBNKSk2s=)
2: NVWKSQ6XeTs9oBM9mH9GDWql-4U.roa (hash: 9ZIbG9al1rdRHLFehJy3ARx4hRFjcesPVT2nGXw1rKM=)
3: gr0cmRtDnRg8WRBE5wgHk-NVvyE.roa (hash: DWSi/wfOMBMvBppFfmkuW+E4394pYqKUQ4bx3UceSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:34:1c:97:20:6b:93:e6:df:a3:9a:a8:8f:aa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Jun 13 09:00:38 2026 GMT
Not After : Jun 14 09:00:38 2026 GMT
Subject: CN=204b21b9bb18e618f902eaf38127e9cbde7e149e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:97:1c:f6:71:92:28:18:d4:09:f8:f0:15:
5e:70:61:96:5e:f5:da:fc:07:5f:43:f0:97:1e:74:
60:cf:fe:ac:bd:88:7c:bc:aa:3c:ea:eb:e0:56:d0:
fc:6f:b2:c2:44:fc:66:26:46:f6:82:69:a9:db:ac:
a1:c5:a6:3f:2d:a5:bf:0a:eb:5c:73:66:03:ff:a9:
6c:09:6a:e4:53:ce:09:ef:cd:d2:41:30:61:6c:43:
aa:fa:bd:85:69:45:49:8b:43:1d:91:03:7a:11:2f:
e6:2e:75:29:8d:7b:6c:34:a8:ed:de:80:81:1b:60:
dc:c9:d8:5a:1b:73:f6:7b:9a:80:e7:1c:d0:94:1d:
ae:3d:f5:1e:b4:07:3b:f5:a0:77:c7:14:6e:1c:6f:
51:71:8b:ba:8f:5d:4e:05:c0:4e:0a:22:06:58:11:
2c:1c:a3:0c:98:89:35:ce:52:9c:b1:43:be:d9:fe:
bc:d1:15:88:6a:48:d5:11:65:27:1a:3b:4a:a8:e0:
ef:a6:e6:86:82:6c:1b:76:0d:23:de:2c:cb:7d:63:
ac:f8:c3:f4:27:23:69:8a:be:f1:a5:e9:cc:33:02:
0b:03:d6:16:5f:26:f3:60:81:7e:ae:ba:28:e6:f0:
27:08:7c:71:46:54:50:d8:38:65:72:bd:c2:c7:bc:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:21:B9:BB:18:E6:18:F9:02:EA:F3:81:27:E9:CB:DE:7E:14:9E
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:87:1c:a2:f7:48:47:3a:6a:b5:b5:48:5e:6d:72:bb:58:13:
ee:4e:6a:35:c9:d0:58:14:70:01:d5:42:09:9e:3f:7b:ff:57:
6c:1c:c5:f4:7c:cf:68:f8:de:42:94:bd:16:e1:be:0f:f7:ec:
c1:a4:5d:1b:1c:53:be:c8:27:09:17:09:46:58:31:95:f8:96:
1a:fc:42:cd:95:1b:bb:1e:63:bb:31:2f:0f:d6:59:83:e3:1d:
8f:99:8d:b9:f7:7a:96:dd:c1:19:36:a6:ce:c6:db:35:dc:80:
d6:56:63:fb:88:cb:c8:12:a2:6e:15:c1:fd:c4:4e:39:20:80:
f3:10:56:33:b5:cb:74:74:44:fb:9b:57:35:12:5f:9a:4e:6b:
26:6a:65:da:03:0b:81:54:a6:4c:07:1e:f6:8c:1d:3c:c9:63:
f0:7b:9b:ce:7b:95:7b:ff:00:e5:f3:64:f0:4a:49:7b:9d:a2:
95:9c:dc:c0:f5:85:2a:12:4c:2a:b1:5c:df:72:61:ef:b8:3d:
87:58:70:c6:9c:9f:64:8b:f1:25:80:42:2e:e2:01:fe:1d:5b:
a5:ef:94:69:a2:62:55:10:4e:4e:a3:e7:0d:9f:f8:55:cc:05:
70:a9:12:25:2e:84:b3:2f:9c:23:f6:2e:95:a5:24:b8:81:3c:
7e:ed:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:28 2026 by rpki-client