Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: q0JfnE+4hWlhqPS3j13YgUCqBo7KyI9Nxzybg3rEfJU=
Subject key identifier: 89:96:52:DA:6B:DF:48:02:F5:22:57:00:4A:37:29:DB:8B:F4:E6:C5
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 019FA7BD3C674D0401BEB99CEA2C10606D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0B3C
Signing time: Tue 28 Jul 2026 08:00:24 +0000
Manifest this update: Tue 28 Jul 2026 08:00:24 +0000
Manifest next update: Wed 29 Jul 2026 08:00:24 +0000
Files and hashes: 1: RfhufGynG5LNQHrEypFz6AFg1zs.asa (hash: JPJ0jIZIsWV2v8aF8+w3gEqGL1SiRdsEzuLyeRr8+uE=)
2: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
3: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: +X/rJiJap+3utSdTnCdxCxSNQQbdS+szdSvqEX2DqXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:3c:67:4d:04:01:be:b9:9c:ea:2c:10:60:6d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Jul 28 08:00:24 2026 GMT
Not After : Jul 29 08:00:24 2026 GMT
Subject: CN=899652da6bdf4802f52257004a3729db8bf4e6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:46:a9:ea:4d:ee:9c:6e:1f:c7:5b:31:4d:
38:9a:13:79:fd:e5:bc:fe:c8:31:8a:e1:7c:12:3a:
50:4a:4a:c5:3a:49:b2:83:ab:fb:f3:76:f6:85:ec:
cf:83:04:6f:54:67:9b:a5:3e:2a:f4:b6:cf:2c:9f:
93:ee:45:62:d4:d2:34:ec:15:56:ca:45:4a:6d:1a:
b8:f4:3a:4b:db:29:5d:2f:68:39:fa:c2:aa:91:7e:
8d:ba:d7:5e:19:3d:34:b6:0d:9a:02:73:34:2a:46:
5c:07:ed:88:b3:dc:da:1d:14:d0:8a:f7:9d:c1:7d:
d4:a2:2e:02:94:72:71:46:0b:41:f8:18:ab:d0:91:
b3:ca:2a:19:8a:10:0e:ce:70:1f:89:6e:cf:bb:ba:
52:ec:66:9f:6a:6e:1b:fa:b3:de:f8:b2:65:96:8e:
56:80:f3:bc:ce:5c:c2:7d:44:69:6d:c7:63:7b:9a:
7c:01:6b:3e:90:61:61:e0:f0:67:f9:d6:e1:6d:5d:
a9:8b:65:9a:64:37:bb:2b:67:6d:22:7a:55:96:b6:
91:f9:d7:92:b6:74:a6:61:43:cd:75:80:ca:94:82:
eb:ae:18:16:32:e0:8d:8d:59:d3:2a:4b:52:ce:7d:
0d:6f:9b:5d:be:fa:c5:df:96:51:4e:74:0b:44:f4:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:96:52:DA:6B:DF:48:02:F5:22:57:00:4A:37:29:DB:8B:F4:E6:C5
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:50:77:d5:ad:e8:a4:da:9a:de:0a:1a:ac:e8:dc:f4:14:fe:
b8:e6:70:71:d1:76:a7:ff:53:ed:c9:4a:a3:45:63:b2:22:8f:
0e:f4:25:29:25:f8:95:57:06:8c:7b:1e:97:dc:a4:2f:87:3b:
56:a2:55:9b:a7:86:02:7f:0d:c6:4a:f5:81:98:36:71:b1:0e:
65:6e:14:2d:a0:8e:22:41:5e:f6:02:dc:38:c8:9b:9c:6a:d6:
ea:c7:6d:20:a7:70:65:1e:80:32:fd:7e:d2:6e:12:b1:d6:31:
73:22:23:a5:29:1c:54:dd:1f:a2:8e:9b:b5:0b:28:23:6f:1b:
8c:ab:57:4f:5a:22:f0:20:66:ff:14:72:05:77:2a:6c:4c:43:
0c:e4:23:8e:f8:c2:da:84:29:cf:14:60:2c:60:7a:f2:d0:51:
d0:a5:b7:ea:76:42:f7:a9:1c:2b:38:e7:de:ac:24:21:27:c5:
74:e1:77:4c:76:69:8a:51:28:b1:6f:aa:0e:d8:bc:fe:1d:1a:
d2:a1:b8:59:86:62:0d:79:3d:42:71:1f:54:74:c1:c0:f3:b7:
92:b2:a8:c7:d2:36:5a:9f:e0:73:07:94:e9:6c:54:30:0b:79:
84:71:c0:ac:b2:6c:a7:b1:2f:05:29:9a:4e:55:c1:48:65:92:
eb:de:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:57:57 2026 by rpki-client