Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: PUfQwzfuNdoKrJxOhoL4zS42lzkeYBiDtKe8kfDvl88=
Subject key identifier: CE:DF:CD:8D:DE:BC:4A:EA:CE:2A:5C:9C:74:9B:CC:35:59:A4:68:93
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 019CAA58549206DEEA3ACA7411B7E8E20847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 09AF
Signing time: Sun 01 Mar 2026 17:00:41 +0000
Manifest this update: Sun 01 Mar 2026 17:00:41 +0000
Manifest next update: Mon 02 Mar 2026 17:00:41 +0000
Files and hashes: 1: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: AB+zzXWv1oVZLhwa5N00jwb3QnQhaaZ3Wd3AztwwImA=)
3: wRsM-J-_RdemGYQhUq06PflenDM.asa (hash: pjI+PT7nOc9seCJaC2jOV5Z3Ysbs3FSmgOLK6vNi+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:54:92:06:de:ea:3a:ca:74:11:b7:e8:e2:08:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Mar 1 17:00:41 2026 GMT
Not After : Mar 2 17:00:41 2026 GMT
Subject: CN=cedfcd8ddebc4aeace2a5c9c749bcc3559a46893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:2d:84:59:d6:d1:d5:e2:f3:53:fe:b0:8d:
a7:57:24:c8:44:96:86:4e:af:61:6e:b4:2f:9e:d0:
86:dc:f7:1e:18:97:71:5c:86:33:a9:d1:62:91:fa:
0d:05:0f:45:90:6e:cf:f7:48:cb:5b:31:62:e6:0d:
eb:ad:c9:4d:5f:ac:63:d8:e2:79:f3:8a:2e:80:69:
4c:5a:31:d7:2c:fe:e0:4b:f7:26:a6:88:84:99:26:
de:5a:43:1d:af:c6:a3:73:41:79:0f:2b:32:e6:51:
c1:0c:ab:06:50:66:94:01:27:c8:9e:8d:ed:d4:9e:
78:f3:da:b5:a6:69:44:3f:ec:2c:46:84:88:63:1f:
1d:87:25:11:fa:db:3d:05:e6:14:db:2b:cf:f2:f9:
cc:bb:01:fb:ab:c6:64:5a:3a:f3:83:3b:11:81:74:
80:92:7d:c9:07:1e:78:0f:a8:4a:54:a0:46:04:46:
e5:72:ac:f9:75:12:35:9b:f9:33:11:f5:15:c1:6f:
b8:63:76:fb:7b:96:83:c1:ef:41:9a:82:7e:32:d3:
7d:1d:df:66:22:a6:5b:d5:9a:bf:14:0c:d7:a5:81:
65:62:07:5f:82:83:fb:c9:44:b2:37:a1:88:ba:fe:
2b:e5:88:83:75:aa:51:84:32:a2:12:68:44:69:a1:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DF:CD:8D:DE:BC:4A:EA:CE:2A:5C:9C:74:9B:CC:35:59:A4:68:93
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:46:36:a6:a4:1a:c3:1c:77:db:5c:d0:54:df:ac:56:4c:0f:
ab:dc:6d:f5:c5:63:cc:6d:8a:86:d8:20:3e:85:5c:81:43:8f:
1e:d3:73:a9:06:a5:58:05:fa:cf:70:91:b1:1e:92:70:9f:20:
fa:de:96:43:3f:2e:cf:9b:af:9f:66:c6:76:0b:9d:11:a0:3f:
9d:80:17:09:e7:f9:b7:13:7e:fe:6b:82:28:36:70:20:7a:20:
9e:3f:8c:5d:ee:10:fb:ab:ec:55:c4:83:91:74:2e:57:54:fa:
8d:ef:07:f0:fe:a7:63:81:bc:f0:74:65:b4:02:00:91:72:67:
50:a3:d4:93:a5:54:c2:e2:a7:7f:e4:51:40:4a:43:b2:89:d4:
b0:fa:d8:9f:46:ef:96:64:58:98:40:ff:17:21:8c:90:0e:48:
4d:8e:f9:82:c4:ff:ff:1b:c6:e7:c6:f0:9a:99:f8:fe:c1:45:
24:85:44:fa:3c:53:b3:fb:c9:d6:28:b1:fd:08:62:5f:3a:38:
32:47:2b:52:fc:97:49:75:ac:b4:98:b2:fa:cc:9c:bd:5b:30:
2c:fc:3a:0c:0f:f6:d6:84:ac:c8:dc:83:5e:1a:9a:c6:bd:f1:
55:8c:9b:1c:5b:ba:48:7a:db:c5:a5:d3:7b:6b:de:d6:b5:5c:
ca:4a:21:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWFSSBt7qOsp0Ebfo4ghHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx
YjNlMjYwHhcNMjYwMzAxMTcwMDQxWhcNMjYwMzAyMTcwMDQxWjAzMTEwLwYDVQQD
EyhjZWRmY2Q4ZGRlYmM0YWVhY2UyYTVjOWM3NDliY2MzNTU5YTQ2ODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fothFnW0dXi81P+sI2nVyTIRJaG
Tq9hbrQvntCG3PceGJdxXIYzqdFikfoNBQ9FkG7P90jLWzFi5g3rrclNX6xj2OJ5
84ougGlMWjHXLP7gS/cmpoiEmSbeWkMdr8ajc0F5Dysy5lHBDKsGUGaUASfIno3t
1J5489q1pmlEP+wsRoSIYx8dhyUR+ts9BeYU2yvP8vnMuwH7q8ZkWjrzgzsRgXSA
kn3JBx54D6hKVKBGBEblcqz5dRI1m/kzEfUVwW+4Y3b7e5aDwe9BmoJ+MtN9Hd9m
IqZb1Zq/FAzXpYFlYgdfgoP7yUSyN6GIuv4r5YiDdapRhDKiEmhEaaHS4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7fzY3evErqzipcnHSbzDVZpGiTMB8GA1UdIwQY
MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt
N2E3NDczYzU0NWIxLzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx
LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUY2pqQa
wxx321zQVN+sVkwPq9xt9cVjzG2KhtggPoVcgUOPHtNzqQalWAX6z3CRsR6ScJ8g
+t6WQz8uz5uvn2bGdgudEaA/nYAXCef5txN+/muCKDZwIHognj+MXe4Q+6vsVcSD
kXQuV1T6je8H8P6nY4G88HRltAIAkXJnUKPUk6VUwuKnf+RRQEpDsonUsPrYn0bv
lmRYmED/FyGMkA5ITY75gsT//xvG58bwmpn4/sFFJIVE+jxTs/vJ1iix/QhiXzo4
MkcrUvyXSXWstJiy+sycvVswLPw6DA/21oSsyNyDXhqaxr3xVYybHFu6SHrbxaXT
e2ve1rVcykohCg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:47 2026 by rpki-client