Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: sUVylFar4J29XWfJH2UzYHiXBv09LW5Wo8RdnCJJQlU=
Subject key identifier: C7:19:24:32:D4:BF:71:43:B7:77:6A:27:3E:BD:36:F8:47:C0:C8:BC
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019FA9E33C244A70EE54493CED48C2A5CD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0CAD
Signing time: Tue 28 Jul 2026 18:01:09 +0000
Manifest this update: Tue 28 Jul 2026 18:01:09 +0000
Manifest next update: Wed 29 Jul 2026 18:01:09 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: 7bwl8BFTKAOrlR+IVcdVUNIUQdtkONqnpULFYaL3w2g=)
2: NVWKSQ6XeTs9oBM9mH9GDWql-4U.roa (hash: 9ZIbG9al1rdRHLFehJy3ARx4hRFjcesPVT2nGXw1rKM=)
3: gr0cmRtDnRg8WRBE5wgHk-NVvyE.roa (hash: DWSi/wfOMBMvBppFfmkuW+E4394pYqKUQ4bx3UceSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:3c:24:4a:70:ee:54:49:3c:ed:48:c2:a5:cd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Jul 28 18:01:09 2026 GMT
Not After : Jul 29 18:01:09 2026 GMT
Subject: CN=c7192432d4bf7143b7776a273ebd36f847c0c8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:3c:42:4d:34:62:26:ce:05:94:82:c3:9a:
67:e8:d7:d5:04:9d:bb:13:4a:db:fb:e9:4c:a3:cc:
59:c7:64:76:82:6e:20:00:7b:f8:c6:2a:ac:01:a0:
e8:66:36:51:b4:6f:ab:e4:43:66:8d:df:ba:b6:89:
7f:02:55:4f:6e:32:55:18:47:e2:0d:76:48:27:39:
6c:68:63:1f:96:3e:ba:de:f7:ea:25:15:4d:e6:c6:
46:0a:7b:ba:bc:70:db:b0:52:5d:db:7a:55:b3:6a:
6c:7b:0e:47:b7:ca:10:1a:08:4a:c6:4f:5c:fe:e5:
f4:68:a8:8d:07:2f:ea:03:07:ca:0a:fc:8f:68:c6:
8e:14:f2:7c:ed:0f:a1:0b:5d:e2:dd:54:af:fb:cb:
b1:53:c8:2f:62:b4:28:d3:c3:1f:fd:e2:82:9e:d2:
31:d2:7f:15:11:48:36:50:99:fa:5d:83:46:6e:ab:
c4:31:b9:35:d5:04:9d:92:e1:9c:ec:c8:f3:37:ba:
3f:8d:f2:45:b0:c4:e0:9e:6b:11:7b:80:8c:a4:d6:
a6:3f:b9:8d:54:e6:82:33:ce:f5:b3:51:fd:bf:7f:
a3:d1:6f:44:1b:ca:94:a1:ff:eb:30:02:49:87:44:
c4:6f:34:c2:6d:3a:dd:51:5f:11:f3:0e:17:23:8e:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:19:24:32:D4:BF:71:43:B7:77:6A:27:3E:BD:36:F8:47:C0:C8:BC
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c1:f6:42:92:f8:3c:bb:64:93:c3:97:49:3d:6e:56:59:16:
73:74:28:f8:a7:7e:6e:07:71:73:fb:19:e0:58:a0:ac:0d:3d:
19:7c:08:bd:17:04:06:08:77:0f:c8:e4:ae:c0:a1:79:50:ae:
e2:3d:1c:54:ac:9c:9b:91:3e:cc:02:bc:c4:dc:f8:ec:48:a9:
4c:34:46:67:7a:68:61:25:40:d3:51:b3:e5:b0:6a:ca:9d:ae:
96:55:bb:e1:40:1e:c1:43:35:0a:c8:9b:61:19:42:85:7a:15:
08:91:05:89:7a:f6:db:07:87:ac:9f:09:e3:54:1c:d9:d5:9c:
af:b7:51:b3:60:d4:d8:75:2d:6c:cf:ef:aa:91:e2:ea:7f:fc:
7e:f5:16:55:d9:a2:81:31:04:44:6d:af:f4:57:56:3d:1a:70:
ee:b4:65:b7:e7:b5:ae:b4:f1:1b:4e:bf:b4:ef:15:b5:a5:be:
7b:b8:3a:a4:86:29:c5:5f:59:34:1c:b0:3d:c5:2f:e6:24:00:
61:ed:80:07:51:1a:67:59:7f:58:23:3d:09:7f:47:5b:ee:4a:
87:83:f6:2b:8b:12:76:21:ed:6f:f9:ba:46:a5:fc:29:01:27:
83:63:d6:2c:6b:a9:66:ac:af:5b:db:35:03:6b:3a:1c:85:09:
d4:24:f9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:14 2026 by rpki-client