Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: illZ1k0pUGWh1bs6mfDkZ5qtSAEo58eJIWWYEjM+6rY=
Subject key identifier: B3:D3:8D:DD:C5:15:A7:1C:7C:91:33:D0:11:FB:28:8A:AB:52:4A:39
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 019CA869F056976918F1DB1E350488E6DB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 09AE
Signing time: Sun 01 Mar 2026 08:00:40 +0000
Manifest this update: Sun 01 Mar 2026 08:00:40 +0000
Manifest next update: Mon 02 Mar 2026 08:00:40 +0000
Files and hashes: 1: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: UB4JE82qIlh8rACnrLn0JR4JdkKHHpxPed6qkW+UpWI=)
3: wRsM-J-_RdemGYQhUq06PflenDM.asa (hash: pjI+PT7nOc9seCJaC2jOV5Z3Ysbs3FSmgOLK6vNi+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:f0:56:97:69:18:f1:db:1e:35:04:88:e6:db:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Mar 1 08:00:40 2026 GMT
Not After : Mar 2 08:00:40 2026 GMT
Subject: CN=b3d38dddc515a71c7c9133d011fb288aab524a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:92:54:6c:09:e0:68:97:23:44:80:0d:e8:
c6:62:5b:5d:3a:3a:1f:f8:18:60:34:a3:6f:93:21:
74:5a:80:65:05:c1:89:01:e4:ea:b0:64:e4:05:50:
8b:32:9d:34:bf:6a:b7:0c:93:b9:c4:c3:87:3d:9a:
8a:07:1d:0d:a2:2b:64:24:9a:25:b8:77:b2:86:6a:
df:f0:cd:4b:40:2f:2b:ef:db:cd:ab:9b:5c:bd:1b:
4e:c7:35:f4:7d:9e:0e:8b:76:1f:61:b2:3a:89:52:
49:b9:69:5d:24:66:79:6a:05:b5:8a:db:94:61:5d:
1a:c4:21:ec:b3:04:b0:c6:e1:da:be:b1:48:90:6e:
4b:3a:ba:e0:d3:77:18:04:c3:1d:b9:a1:87:76:54:
7a:80:d4:70:b4:81:22:4b:71:de:9f:94:02:39:ac:
d5:c8:fb:e1:10:cd:88:6f:25:98:8b:4a:27:b5:f5:
d6:eb:03:70:ae:27:f7:70:20:49:70:38:48:96:c3:
ef:8d:58:22:dc:9b:9b:ee:09:dd:6e:ec:c9:39:31:
69:0f:31:47:a5:75:1c:09:42:8e:cb:da:82:a5:76:
dd:87:0b:aa:46:76:de:6b:70:fd:8d:1d:c7:43:8c:
be:6e:c9:b0:63:ea:ea:d8:9d:46:ce:bd:95:4b:1e:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D3:8D:DD:C5:15:A7:1C:7C:91:33:D0:11:FB:28:8A:AB:52:4A:39
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6c:14:af:97:2d:c6:6a:4a:45:24:6c:a1:2d:15:4b:57:8f:
58:9b:0c:29:31:c6:66:7b:1f:07:f6:24:92:3d:9f:a3:11:7a:
85:e1:60:a5:f9:a8:19:c5:98:04:f0:df:a7:b5:db:fc:76:78:
b7:6f:e4:49:eb:e4:c5:fa:e2:29:48:71:65:c7:53:4b:e8:08:
e7:3b:00:ec:93:00:c6:b2:23:7a:65:b6:78:e5:26:4d:a2:a6:
a0:26:36:ad:ea:88:d1:93:37:34:32:08:74:ac:a3:82:ef:17:
61:84:98:3b:2e:d4:09:c1:fe:38:40:55:b4:d0:73:03:3e:a6:
c8:ec:0f:3e:f5:52:b0:b7:80:f1:bd:30:85:06:06:f3:1a:f9:
38:e2:53:ce:49:99:f1:26:7e:87:a7:08:9f:ba:8a:fd:9d:b5:
0b:e4:34:56:ec:9b:33:d8:d7:31:91:d7:85:32:c6:d5:d6:81:
b3:46:c9:04:e7:07:b4:0d:d1:17:60:79:b4:0e:51:5b:38:b0:
38:14:b9:c6:59:99:a6:10:65:da:cb:92:8c:2b:21:0a:06:ab:
45:06:c8:c3:ea:12:a7:ef:84:8a:88:7a:d9:a6:15:c6:f2:b9:
15:b8:a4:4b:d1:c3:4a:86:7a:66:96:9c:96:90:a6:64:aa:73:
27:19:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:38:05 2026 by rpki-client