Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: tPVnyiFPVDwFd1VBsSGusZWEr8BfGRGgN0Wyo13ZISU=
Subject key identifier: CF:10:7F:49:A7:6D:4A:6D:80:D2:E0:50:BB:2E:C3:CD:8B:1B:D7:FB
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019CABD916768FA53BE1022B89FDEFC4F69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0B20
Signing time: Mon 02 Mar 2026 00:00:56 +0000
Manifest this update: Mon 02 Mar 2026 00:00:56 +0000
Manifest next update: Tue 03 Mar 2026 00:00:56 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: 0lSKarzfqpe5uCeJ9z1FLfkAp7Th0N/rtn0me0W+gwY=)
2: gSWrvwxEqG3qqWekT_MDQ2Zy8l4.roa (hash: 0CXXO2Irp4/jfinP8RYHoyXdB5AoI55fQP/c0QKUH+c=)
3: gr0cmRtDnRg8WRBE5wgHk-NVvyE.roa (hash: DWSi/wfOMBMvBppFfmkuW+E4394pYqKUQ4bx3UceSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:16:76:8f:a5:3b:e1:02:2b:89:fd:ef:c4:f6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Mar 2 00:00:56 2026 GMT
Not After : Mar 3 00:00:56 2026 GMT
Subject: CN=cf107f49a76d4a6d80d2e050bb2ec3cd8b1bd7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:c8:60:46:66:a6:60:53:fe:64:2a:26:79:
69:07:3c:ba:9f:46:54:a2:c8:5b:11:5a:2c:e3:33:
64:7f:42:c9:6e:6e:37:c2:f6:e0:ee:f1:89:fb:a3:
a3:3e:1c:5d:00:79:61:ad:42:03:02:8b:3f:f8:e4:
c0:46:74:66:e5:3c:d2:42:0b:f0:4c:59:4e:f1:d0:
35:a8:e2:7e:da:ea:c0:8c:c9:9f:ae:81:57:09:5c:
24:60:c0:dc:2d:9f:42:9b:a6:bf:88:39:0f:53:99:
c4:b1:1d:37:e7:12:2d:6a:97:41:6e:88:44:66:e3:
5e:80:20:9e:b8:04:83:1f:95:1f:f0:9f:2c:23:e0:
af:b4:c1:3f:90:a4:7a:32:49:c1:bf:2e:5a:64:e8:
cf:a9:d1:c5:b4:8e:ed:a8:74:47:08:f6:48:19:37:
5d:4f:f9:29:87:af:5a:d4:8d:b9:4e:5a:0f:32:ca:
88:9d:48:05:f2:3a:fe:9f:64:1c:76:99:34:10:7c:
50:23:f9:20:fc:7a:aa:e3:8e:86:db:6a:c2:97:76:
58:d9:77:6f:89:bc:89:57:49:0c:82:4c:9a:27:dc:
4e:d8:5e:09:94:a7:b9:24:ad:ee:72:72:dc:7f:ff:
74:3d:27:28:41:45:64:27:76:2d:ba:a1:43:e8:b7:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:10:7F:49:A7:6D:4A:6D:80:D2:E0:50:BB:2E:C3:CD:8B:1B:D7:FB
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b2:a7:d5:09:f8:05:ce:8d:77:b7:98:8b:33:2e:39:e7:ab:
06:28:f0:26:04:77:d1:50:e4:15:77:d5:7a:61:b0:be:f3:28:
67:d6:27:de:d5:63:06:8c:6b:d4:09:6e:35:de:b4:3b:64:a0:
1d:ad:81:9a:67:cc:b4:19:97:6d:e5:63:fa:c1:2c:5d:5e:67:
48:e3:80:ca:ed:2c:30:b8:4e:2f:8f:9a:2d:a7:7b:7a:ba:8b:
f5:1c:46:50:45:2e:6f:db:0d:6e:f5:03:90:b4:55:72:3d:75:
32:5a:f5:8b:c9:74:c9:59:d0:12:44:55:27:6c:27:1b:0b:85:
ee:5a:b9:57:9f:bd:a4:82:c5:26:75:80:61:1b:d5:c4:7d:11:
62:dd:3e:44:24:8f:98:b1:53:db:1c:5a:97:c0:3c:6f:20:b5:
98:e3:82:2a:01:27:2c:2f:6b:8a:41:da:86:b9:e9:2b:93:4d:
93:ed:53:2d:2f:ce:44:d2:4e:0c:1c:8b:0d:ea:e2:6b:b8:6f:
b0:b7:25:79:ca:db:4a:28:eb:1e:ea:26:49:31:50:50:07:bf:
bf:d6:31:9c:2b:01:01:8a:7d:5a:76:9b:d0:f8:93:d2:1d:aa:
5d:fd:63:e4:b5:36:ee:e0:85:58:52:66:e2:e4:60:16:ad:11:
39:b0:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:33 2026 by rpki-client