Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: m9DVRSrnSBxUgNp22loEOQNCCHT/MaheSe9b33T75OU=
Subject key identifier: 28:E4:67:89:C2:E7:85:5D:2C:DC:A0:DC:B4:30:AC:B7:3A:69:84:C3
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 01A0DCBB9EAA245C96F681D94FAA7CF4D70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0BDC
Signing time: Sat 26 Sep 2026 08:01:18 +0000
Manifest this update: Sat 26 Sep 2026 08:01:18 +0000
Manifest next update: Sun 27 Sep 2026 08:01:18 +0000
Files and hashes: 1: RfhufGynG5LNQHrEypFz6AFg1zs.asa (hash: JPJ0jIZIsWV2v8aF8+w3gEqGL1SiRdsEzuLyeRr8+uE=)
2: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
3: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: K060ELRSuOO3amWmbomGvalN5mS1DDCP/bXCuRNL4L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:9e:aa:24:5c:96:f6:81:d9:4f:aa:7c:f4:d7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Sep 26 08:01:18 2026 GMT
Not After : Sep 27 08:01:18 2026 GMT
Subject: CN=28e46789c2e7855d2cdca0dcb430acb73a6984c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:27:0d:68:b2:97:99:e9:b8:63:4f:d0:e6:
91:ec:d0:96:a7:7d:93:7b:76:54:65:57:97:41:31:
3f:d5:f3:ed:c9:2f:97:28:ab:8c:8d:42:be:87:c2:
8a:62:a1:a9:cc:4d:70:7f:87:73:5d:72:b8:4b:34:
4c:08:ab:b6:f5:9d:26:75:fe:e2:8c:06:10:f1:09:
48:5f:82:17:fa:f8:93:de:4b:d7:e3:95:88:fe:94:
95:50:9e:4f:a3:11:fc:d6:1c:83:92:f2:85:a3:9b:
bc:6f:2f:88:be:f7:de:1a:1e:d7:6d:44:86:cd:f4:
28:2e:a4:71:7f:f1:c9:53:b8:9f:5d:14:69:3b:60:
fb:b9:95:9a:5d:dc:3f:c5:b6:6e:13:8d:55:21:dc:
43:fe:19:19:09:2d:23:43:45:67:d0:07:5a:bd:74:
a6:30:48:54:d6:e1:41:a1:1c:5b:aa:8a:1c:da:40:
2f:bf:2e:81:bf:92:03:fe:91:34:0a:da:c8:35:e0:
6c:02:6a:6a:56:53:fc:da:79:72:7a:e3:55:9c:59:
21:4f:49:08:7c:4d:3b:8b:5e:bd:9c:b5:f1:86:6a:
ca:78:0b:f3:3c:de:9d:78:cb:03:c7:f5:fc:76:6b:
95:ca:10:e8:71:79:62:ba:23:18:41:48:7c:29:aa:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:67:89:C2:E7:85:5D:2C:DC:A0:DC:B4:30:AC:B7:3A:69:84:C3
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cf:b2:1e:5a:e4:98:ea:d1:0d:fc:a8:8b:2a:9b:09:da:70:
69:88:c3:58:38:0b:19:c2:a0:84:7d:ca:82:4c:d6:43:ac:f1:
f9:6e:0e:2c:8b:49:35:a7:ad:cf:88:67:b9:c3:2c:6e:57:ba:
c9:30:71:1e:a2:a1:de:6b:5b:e0:8b:2f:8a:35:68:bd:60:ef:
15:10:0c:a4:62:b2:69:3c:e8:61:a1:5d:32:06:7a:49:15:08:
c4:d4:7c:c1:2f:3d:0a:d1:5b:13:33:b8:c6:24:42:b1:f4:16:
e5:90:c6:f5:4b:5a:a2:78:cd:26:67:1e:62:9a:b2:61:24:b1:
d1:52:a4:a1:0b:e3:65:47:d8:27:fd:0c:87:bd:27:f7:22:4a:
27:5e:5d:fd:7f:ea:2b:6b:01:a3:83:c3:6a:4c:db:ee:b2:f8:
b3:53:d5:b1:50:16:36:08:bb:34:03:cd:f4:48:59:48:50:39:
c8:02:4a:26:71:c6:c6:9e:ae:87:21:6a:67:20:2d:24:df:25:
e4:59:84:5f:20:e8:f4:01:e7:ee:83:a2:50:c7:74:35:c8:21:
bc:62:e1:66:c7:b1:d6:67:02:0e:d2:7b:ed:84:8a:d5:87:e0:
70:da:15:ef:12:d7:f4:4a:39:06:a0:ed:99:af:0d:52:db:e2:
05:08:11:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcu56qJFyW9oHZT6p89NcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx
YjNlMjYwHhcNMjYwOTI2MDgwMTE4WhcNMjYwOTI3MDgwMTE4WjAzMTEwLwYDVQQD
EygyOGU0Njc4OWMyZTc4NTVkMmNkY2EwZGNiNDMwYWNiNzNhNjk4NGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZMnDWiyl5npuGNP0OaR7NCWp32T
e3ZUZVeXQTE/1fPtyS+XKKuMjUK+h8KKYqGpzE1wf4dzXXK4SzRMCKu29Z0mdf7i
jAYQ8QlIX4IX+viT3kvX45WI/pSVUJ5PoxH81hyDkvKFo5u8by+IvvfeGh7XbUSG
zfQoLqRxf/HJU7ifXRRpO2D7uZWaXdw/xbZuE41VIdxD/hkZCS0jQ0Vn0AdavXSm
MEhU1uFBoRxbqooc2kAvvy6Bv5ID/pE0CtrINeBsAmpqVlP82nlyeuNVnFkhT0kI
fE07i169nLXxhmrKeAvzPN6deMsDx/X8dmuVyhDocXliuiMYQUh8KaoPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjkZ4nC54VdLNyg3LQwrLc6aYTDMB8GA1UdIwQY
MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt
N2E3NDczYzU0NWIxLzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx
LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8+yHlrk
mOrRDfyoiyqbCdpwaYjDWDgLGcKghH3KgkzWQ6zx+W4OLItJNaetz4hnucMsble6
yTBxHqKh3mtb4IsvijVovWDvFRAMpGKyaTzoYaFdMgZ6SRUIxNR8wS89CtFbEzO4
xiRCsfQW5ZDG9UtaonjNJmceYpqyYSSx0VKkoQvjZUfYJ/0Mh70n9yJKJ15d/X/q
K2sBo4PDakzb7rL4s1PVsVAWNgi7NAPN9EhZSFA5yAJKJnHGxp6uhyFqZyAtJN8l
5FmEXyDo9AHn7oOiUMd0NcghvGLhZsex1mcCDtJ77YSK1YfgcNoV7xLX9Eo5BqDt
ma8NUtviBQgRvA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:48:44 2026 by rpki-client