Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: ZdIisVm7ABmrRpZp+G0gQZsRdp7xex9KbrmE2uJ0Ng4=
Subject key identifier: 0E:10:D5:01:2D:AF:34:D5:FB:91:4F:82:73:CF:69:7D:D4:70:35:2C
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 019D99CFD9EC4DAAD595A18D2DFD590D1404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0A2B
Signing time: Fri 17 Apr 2026 05:00:28 +0000
Manifest this update: Fri 17 Apr 2026 05:00:28 +0000
Manifest next update: Sat 18 Apr 2026 05:00:28 +0000
Files and hashes: 1: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: 2ywcskXhMDY5WvHCT8nlPnT5yAlDg317KGYNshgLUk4=)
3: wRsM-J-_RdemGYQhUq06PflenDM.asa (hash: pjI+PT7nOc9seCJaC2jOV5Z3Ysbs3FSmgOLK6vNi+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d9:ec:4d:aa:d5:95:a1:8d:2d:fd:59:0d:14:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Apr 17 05:00:28 2026 GMT
Not After : Apr 18 05:00:28 2026 GMT
Subject: CN=0e10d5012daf34d5fb914f8273cf697dd470352c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:a1:17:3e:bd:bb:b2:52:7e:65:84:1b:13:
ef:4f:ef:ce:33:6a:94:62:28:8a:6a:59:4b:01:f5:
21:5a:47:9d:df:5f:81:55:e2:d0:67:ad:51:80:5e:
a0:ba:63:c0:c1:f4:c5:ea:c4:81:12:63:07:29:05:
2f:64:88:08:8f:00:b9:4a:e8:90:f6:3d:19:31:6e:
7e:74:60:59:3d:5a:f0:43:5c:d8:3f:5d:20:1d:e9:
0d:46:fc:6f:1a:47:c8:33:21:43:75:88:9f:8d:04:
47:be:45:42:d8:d5:8e:aa:43:9c:15:f0:a6:93:6c:
8d:09:db:51:7a:9f:ea:83:c3:e6:83:de:4a:3a:b5:
a3:49:d0:e5:6c:e8:bd:8f:02:2b:25:c6:23:ab:3b:
e1:eb:32:97:5f:34:e0:6b:9b:29:27:97:ff:ae:57:
a5:d0:03:35:63:5b:79:e9:27:14:fd:33:f2:bd:5e:
70:1d:08:cf:92:b4:2d:c6:e7:f7:0b:30:11:b2:eb:
50:e9:d5:30:73:8e:81:bb:17:7c:56:f5:31:4d:6d:
ca:a9:c2:ba:38:dc:b6:54:70:7b:0a:b5:60:b1:69:
06:1a:1a:bf:1e:c7:60:d5:d1:ea:10:19:e1:53:ec:
b7:64:cc:f3:20:69:c3:3e:8e:34:b9:d5:72:9b:9c:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:10:D5:01:2D:AF:34:D5:FB:91:4F:82:73:CF:69:7D:D4:70:35:2C
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e0:c6:bd:fd:5e:0d:13:c0:8d:d4:0c:ad:0c:80:4b:a6:7e:
88:7e:d2:b9:9a:eb:50:53:8c:fb:af:cd:53:e9:51:d4:c4:c8:
82:73:10:b8:44:eb:48:6e:1c:93:50:cc:c5:0d:2b:da:54:74:
3a:e2:df:f0:a0:a4:2e:cb:f2:ac:0f:ae:ba:7e:06:cf:cf:5a:
76:97:81:6e:3d:6c:ea:71:13:ac:4d:d4:13:ac:44:c5:a6:a7:
c3:2b:5c:87:c3:c8:81:03:66:f3:00:6f:9d:ef:dc:b5:9b:ea:
90:23:e1:e4:29:d0:20:71:5d:a8:34:99:08:bb:fa:2d:4f:af:
46:3c:6c:2c:ac:44:86:5b:a9:45:fe:a6:ef:9d:5b:93:69:60:
11:ee:b4:d4:79:86:25:65:de:e9:26:b5:b0:a8:a3:b6:13:4a:
86:ec:70:66:20:6e:79:f0:d8:b4:22:df:be:9d:a2:dc:b5:56:
69:a1:4b:61:f9:4c:15:11:c8:64:d7:71:e4:08:02:ae:73:cf:
49:0f:9d:54:1f:9c:1f:8b:23:e7:b4:78:f3:80:1c:3e:70:5e:
c9:81:aa:db:c7:1b:d6:b9:ec:46:0e:94:f2:f9:0c:44:ea:cd:
da:74:33:46:58:9e:b2:16:93:bd:e3:9f:55:35:a6:44:80:1b:
17:fc:15:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz9nsTarVlaGNLf1ZDRQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx
YjNlMjYwHhcNMjYwNDE3MDUwMDI4WhcNMjYwNDE4MDUwMDI4WjAzMTEwLwYDVQQD
EygwZTEwZDUwMTJkYWYzNGQ1ZmI5MTRmODI3M2NmNjk3ZGQ0NzAzNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1GhFz69u7JSfmWEGxPvT+/OM2qU
YiiKallLAfUhWked31+BVeLQZ61RgF6gumPAwfTF6sSBEmMHKQUvZIgIjwC5SuiQ
9j0ZMW5+dGBZPVrwQ1zYP10gHekNRvxvGkfIMyFDdYifjQRHvkVC2NWOqkOcFfCm
k2yNCdtRep/qg8Pmg95KOrWjSdDlbOi9jwIrJcYjqzvh6zKXXzTga5spJ5f/rlel
0AM1Y1t56ScU/TPyvV5wHQjPkrQtxuf3CzARsutQ6dUwc46Buxd8VvUxTW3KqcK6
ONy2VHB7CrVgsWkGGhq/Hsdg1dHqEBnhU+y3ZMzzIGnDPo40udVym5wAbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4Q1QEtrzTV+5FPgnPPaX3UcDUsMB8GA1UdIwQY
MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt
N2E3NDczYzU0NWIxLzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx
LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYODGvf1e
DRPAjdQMrQyAS6Z+iH7SuZrrUFOM+6/NU+lR1MTIgnMQuETrSG4ck1DMxQ0r2lR0
OuLf8KCkLsvyrA+uun4Gz89adpeBbj1s6nETrE3UE6xExaanwytch8PIgQNm8wBv
ne/ctZvqkCPh5CnQIHFdqDSZCLv6LU+vRjxsLKxEhlupRf6m751bk2lgEe601HmG
JWXe6Sa1sKijthNKhuxwZiBuefDYtCLfvp2i3LVWaaFLYflMFRHIZNdx5AgCrnPP
SQ+dVB+cH4sj57R484AcPnBeyYGq28cb1rnsRg6U8vkMROrN2nQzRlieshaTveOf
VTWmRIAbF/wV3w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:31 2026 by rpki-client