Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: 3/CjWAWTTp4euRfG2vSpEIKeiaa3GWn1+NUgnUR0jG4=
Subject key identifier: 0F:A7:16:97:D7:81:66:13:FD:69:B3:A2:3B:34:61:25:11:F8:3A:D3
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 01A0C2C3FE0FB60B92B8430E9946887B00D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 07:00:19 +0000
Manifest this update: Mon 21 Sep 2026 07:00:19 +0000
Manifest next update: Tue 22 Sep 2026 07:00:19 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: T39wL20vkQ9AT8oDrvhcTlpleFnmdqTUmt7r08B7oWs=)
2: hhSORRB_cbi8J7UPYVa8deItbjI.roa (hash: tbnenU0D5ezQqQe74bKynFZLzheD+pCDrBBIC6BR1ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:fe:0f:b6:0b:92:b8:43:0e:99:46:88:7b:00:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Sep 21 07:00:19 2026 GMT
Not After : Sep 22 07:00:19 2026 GMT
Subject: CN=0fa71697d7816613fd69b3a23b34612511f83ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:61:1c:72:11:1c:49:78:42:d6:4a:cf:56:
af:98:e1:bd:81:e4:c6:66:32:64:e0:a5:71:c8:b2:
92:38:f9:83:a0:38:74:e0:63:b5:1f:aa:98:36:6e:
14:a5:96:ab:c7:d8:4c:96:80:50:2d:a4:e1:4f:c3:
5d:bb:a6:16:58:fe:89:8d:c1:b2:34:43:e9:c9:01:
b2:ab:d4:cd:6d:ee:15:ea:1b:ca:fd:b8:bd:b6:58:
8d:f6:d9:30:78:c2:af:e5:c8:ed:e1:9c:99:ae:08:
50:b9:a8:02:f4:2b:13:61:5b:5f:98:74:58:9b:01:
29:de:47:eb:28:95:f3:a2:8e:2a:bb:24:36:19:32:
e1:4f:e8:24:04:14:46:82:9e:13:13:3d:c6:62:7a:
7a:cc:a1:a4:7c:aa:a9:95:cd:18:4e:76:e2:de:fa:
de:40:98:b4:74:be:e2:ba:b9:54:51:b4:49:dd:6d:
be:75:a1:06:a2:4b:3b:50:93:44:d9:48:59:21:27:
e9:1e:d6:c7:bd:af:21:32:12:f8:6b:89:ec:dc:0e:
aa:05:b5:d8:f2:f5:a2:83:da:16:ba:b9:6b:14:2c:
91:dd:fe:3f:a2:0c:60:22:05:1e:0d:a3:43:6e:5a:
5d:f1:94:c0:83:df:6e:95:41:01:bc:77:7f:13:e0:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A7:16:97:D7:81:66:13:FD:69:B3:A2:3B:34:61:25:11:F8:3A:D3
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ca:89:fa:9f:b5:e0:2b:09:b9:a3:22:fb:08:e7:39:8a:63:
8c:92:66:ac:7b:43:8b:59:66:9d:ba:a2:4c:e7:01:e6:95:de:
9d:49:06:7a:49:8f:ae:ef:02:7e:9a:9e:d5:27:e7:20:f2:7c:
91:51:6f:e1:9b:f4:7b:6c:11:98:43:c2:17:b8:50:4c:4e:57:
90:ac:4a:aa:8f:c2:b6:aa:bd:eb:ab:fe:1c:56:91:49:05:e6:
e0:a2:22:5c:6a:d6:99:f0:b0:9b:0f:a5:b3:36:ec:2c:c1:b9:
dd:0f:9d:ba:80:7b:67:f2:68:94:e2:c8:46:f0:9f:5d:06:95:
36:bd:68:29:1b:5f:2e:67:18:70:47:fa:b7:2b:c9:b2:a7:3c:
4f:fd:fb:d2:eb:3f:e0:6f:04:7c:e9:97:12:07:ea:ae:38:88:
e0:ae:89:57:75:65:a8:97:e0:96:fe:5b:cb:6f:b0:97:0b:cd:
ba:b9:1f:b3:ab:4b:07:38:38:90:2a:27:4a:f0:f4:7d:23:91:
3f:6d:6b:e1:a0:0b:9f:d1:f2:bf:1e:ae:34:a2:e3:0b:29:a6:
d3:82:19:11:ae:1c:f2:5b:55:46:15:80:a7:51:11:84:24:9c:
3f:60:2a:d4:eb:96:d9:19:64:78:65:d6:82:03:b4:38:ba:1d:
20:fa:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:39:32 2026 by rpki-client