Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: /pURdjSyZAmmVGJ2KpdQgvnm6yETURm2Klg+rkBhu78=
Subject key identifier: 19:72:D8:75:77:02:7A:44:1E:30:00:99:53:3F:30:45:44:E4:9A:C2
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 019EBF5B36C815A406554E72C7C6D34B4625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0AC3
Signing time: Sat 13 Jun 2026 05:01:26 +0000
Manifest this update: Sat 13 Jun 2026 05:01:26 +0000
Manifest next update: Sun 14 Jun 2026 05:01:26 +0000
Files and hashes: 1: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: uS9ujlAjsFSFx3Fs8Nov+/y6rxNTLX+8T9b7LiVZTs8=)
3: wRsM-J-_RdemGYQhUq06PflenDM.asa (hash: pjI+PT7nOc9seCJaC2jOV5Z3Ysbs3FSmgOLK6vNi+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:36:c8:15:a4:06:55:4e:72:c7:c6:d3:4b:46:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Jun 13 05:01:26 2026 GMT
Not After : Jun 14 05:01:26 2026 GMT
Subject: CN=1972d87577027a441e300099533f304544e49ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:b1:63:b1:e8:2e:d2:f9:7b:a1:8b:10:9f:
a7:4b:12:f7:29:cf:58:5f:d6:54:ac:93:0d:dd:03:
d1:b7:02:59:68:a7:d9:75:19:91:f2:c5:9f:9d:d1:
4d:a4:53:8a:dd:ab:7f:66:fa:da:0a:c1:7f:07:5c:
7d:9e:bf:78:04:29:01:8e:de:17:b6:86:96:fa:09:
ef:fd:59:9c:3d:32:67:41:cd:1a:d0:e1:88:f3:bb:
d8:4a:7a:41:a9:7e:f4:75:bc:08:42:2b:16:56:41:
29:f3:b3:16:60:82:e9:38:c6:90:4b:64:8e:d8:e2:
cd:32:c6:c1:97:ea:39:65:03:66:b6:cd:b6:ec:24:
bd:27:ec:10:98:08:68:9b:89:b7:bd:46:d6:53:32:
09:2d:cb:84:ae:0c:3b:d5:47:d1:32:5d:bd:89:9e:
4d:dc:06:20:95:2d:90:43:5a:8a:4e:98:62:73:b6:
10:49:b0:35:64:b6:60:b6:63:a9:d1:2c:30:dc:df:
1a:9a:0b:c8:ee:41:fd:54:22:02:6a:54:c2:28:1b:
d7:ca:6c:81:da:85:91:2e:a3:63:ba:95:ef:d6:95:
98:ea:26:be:80:64:bc:2a:4d:96:66:fc:de:16:1b:
03:16:00:f9:79:0f:4d:2a:ab:1f:ab:85:77:cf:d8:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:72:D8:75:77:02:7A:44:1E:30:00:99:53:3F:30:45:44:E4:9A:C2
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e1:8a:e3:ff:7a:ad:cd:3a:d6:ab:15:0f:73:cd:e4:2b:cc:
ea:ed:f4:9c:0f:2d:49:50:5f:b2:06:cd:18:73:6a:ad:ef:ae:
9f:c4:d1:69:a5:b5:06:30:94:fb:b2:70:bf:1e:6a:b3:c8:07:
ee:6f:cb:e5:52:6b:37:cf:34:c5:e9:02:e4:98:26:b3:62:b6:
f0:c5:4f:42:65:9b:a1:b2:bf:97:81:0a:04:37:2f:19:cb:11:
d2:f6:18:22:b9:aa:d7:38:cb:03:c9:73:dd:01:0d:e8:47:3d:
f8:dc:6c:7b:0d:75:6c:62:07:85:df:6e:df:50:c2:b3:5b:81:
19:58:9e:40:4f:7a:3a:f2:5f:a1:03:a7:bd:63:39:f7:8a:41:
47:bd:a0:db:56:d8:f2:7e:b9:f1:62:29:a9:e4:f8:1b:e1:8b:
2a:6d:e6:d5:2d:e1:7b:e9:a4:00:5c:b1:c5:d9:9e:eb:57:c9:
52:c9:99:5e:15:ba:a9:20:ce:b7:8a:b0:18:52:97:cd:2d:ff:
8d:40:9c:09:d2:58:e0:b5:04:27:77:74:07:d0:9b:ef:28:25:
07:d1:04:29:c3:49:07:91:79:3b:65:fd:e2:06:7a:ce:60:8b:
3e:c6:10:07:25:4a:ab:73:4a:7a:03:1c:06:53:4e:3c:2d:0c:
44:78:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:24 2026 by rpki-client