Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: DspJfPX8Zc8CAUzHdHdlj+tP71YMdhnp/LHyELeMl40=
Subject key identifier: DC:67:18:BF:CF:F3:B9:AE:A9:82:54:21:1D:BA:23:87:5C:B9:D4:C4
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 019CAC1033565E5AFEC0B9D75A6F00AD1706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:01:08 +0000
Manifest this update: Mon 02 Mar 2026 01:01:08 +0000
Manifest next update: Tue 03 Mar 2026 01:01:08 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: rAeNy+gss5lkllqnS1DYFRmaYtq3nxXxoXEEG0uKqi8=)
2: hhSORRB_cbi8J7UPYVa8deItbjI.roa (hash: tbnenU0D5ezQqQe74bKynFZLzheD+pCDrBBIC6BR1ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:33:56:5e:5a:fe:c0:b9:d7:5a:6f:00:ad:17:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Mar 2 01:01:08 2026 GMT
Not After : Mar 3 01:01:08 2026 GMT
Subject: CN=dc6718bfcff3b9aea98254211dba23875cb9d4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:e7:be:1d:d1:d2:51:19:d2:85:b0:30:70:
3c:93:8c:4e:60:8f:be:2e:51:71:c2:ae:6e:05:ea:
54:c3:a8:0a:36:52:c7:89:c1:07:88:c7:c2:fc:6a:
9f:43:c6:a0:98:30:08:8d:17:ff:2a:02:c2:6e:84:
9a:ab:f7:b5:05:d9:cf:34:9f:16:5f:f2:31:53:d0:
35:47:be:06:ab:9d:3d:ce:1e:f7:74:10:ab:86:5b:
1a:0f:ff:9a:87:a6:de:9f:d3:82:e0:b4:bc:2c:fd:
e0:c1:90:74:e6:89:49:08:2c:09:4e:3f:cc:4b:fa:
75:67:f0:ed:8a:d2:8f:2a:05:ce:a6:9b:1a:73:36:
b9:29:4b:d6:a3:cd:1d:41:ce:b3:0b:ce:2b:34:65:
f3:c5:4d:65:fb:2b:ea:72:3a:13:05:02:7b:9e:8e:
ab:35:68:d7:d7:61:5d:e1:42:5e:28:52:14:d5:5f:
d4:c9:14:66:f6:fc:20:e6:42:02:af:7e:20:dc:e9:
35:9b:db:1b:f7:bd:66:ad:3b:65:92:f9:14:06:53:
96:8b:7f:5e:78:19:f0:3a:85:ec:3c:1a:5b:32:5b:
ad:a4:07:91:c8:dc:1f:6c:34:61:92:45:2e:b5:30:
b3:9b:39:8a:17:67:b1:08:6a:81:4e:d4:95:c8:c1:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:18:BF:CF:F3:B9:AE:A9:82:54:21:1D:BA:23:87:5C:B9:D4:C4
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:49:13:ea:53:8f:10:61:25:34:8f:69:99:98:21:e3:40:08:
a7:80:61:88:b6:9b:03:80:73:4a:67:c4:39:c3:5b:4f:53:3c:
5b:ca:31:c8:04:fa:be:f0:a9:27:bf:a4:35:14:07:34:76:d5:
22:e0:cc:17:e5:bb:3c:66:69:06:24:df:87:6d:88:6c:3a:98:
1b:aa:8d:19:49:2c:58:26:60:b6:9b:a0:c2:8d:fc:ab:9e:28:
57:1c:c0:e1:20:78:7e:9a:32:5a:be:f3:64:38:b4:77:35:72:
d8:8d:28:ab:1c:21:1b:7e:53:79:8a:02:db:a5:10:a8:e2:a1:
55:bf:d1:f9:d0:ea:94:65:3c:7e:b3:d6:71:20:46:47:86:d9:
d4:bd:ee:4d:10:f4:4e:e1:51:45:b7:f1:dd:99:3e:f1:47:63:
de:dd:ea:4b:ed:42:a3:e3:23:6e:77:b8:47:d3:5f:c8:e6:90:
fc:ee:fa:40:19:9c:56:eb:68:b3:3f:4d:43:ff:09:4b:da:57:
49:14:2b:bf:0b:9c:55:e7:3d:86:5e:bf:6a:aa:69:8a:9e:9e:
62:d5:6c:1e:57:40:07:39:9f:dd:76:cf:dd:10:90:db:42:c0:
f6:09:5f:6c:89:75:9e:30:d6:4c:ec:5f:81:6a:12:46:5e:ba:
f2:e8:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:55 2026 by rpki-client