Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier: /FBlWXnC9bHqLtGd8auQJDRA2+PfoT4zkFq6qjvq9Mo=
Subject key identifier: A1:C4:70:87:D4:1F:DD:3C:5D:86:05:45:F5:54:1C:09:EE:A8:96:61
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial: 019D97AB35A2DDF1AB5CAD5C36732915D988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number: 0671
Signing time: Thu 16 Apr 2026 19:01:13 +0000
Manifest this update: Thu 16 Apr 2026 19:01:13 +0000
Manifest next update: Fri 17 Apr 2026 19:01:13 +0000
Files and hashes: 1: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: W+7vAuGwyVm2CU9LDgIjF+yhgfYnPIK9F55WpFQLNQU=)
2: d5Zhp1cA_fqDZ1FzU959TA66aj4.roa (hash: SuNZX9fanarDL2+daC3fGFckgN7apSeTYCwNJVS+b94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:35:a2:dd:f1:ab:5c:ad:5c:36:73:29:15:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Validity
Not Before: Apr 16 19:01:13 2026 GMT
Not After : Apr 17 19:01:13 2026 GMT
Subject: CN=a1c47087d41fdd3c5d860545f5541c09eea89661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:7b:72:51:d9:41:e5:aa:6c:7e:73:9f:52:
03:fe:0e:a0:26:74:cc:02:31:8a:8b:d2:d4:53:b2:
4e:6e:bc:6f:9a:8c:32:f1:36:67:43:71:04:65:2c:
1b:af:b0:7b:9e:e0:7a:65:e4:35:b3:b2:85:62:94:
4b:a3:0b:bb:eb:4b:ce:3e:e9:d4:57:2a:f1:f6:b4:
d9:32:a9:a4:78:a8:27:a6:3d:b7:08:32:54:9a:9c:
f3:29:ec:a5:2e:4f:6b:62:c5:35:2a:2d:69:03:b8:
48:14:9f:13:e4:fd:c5:e2:b7:11:d1:b2:fd:b4:f9:
ca:da:ae:30:84:15:99:eb:5a:0c:05:4b:7f:35:3b:
2d:09:aa:ce:4c:35:30:38:32:b1:53:95:88:01:bc:
76:25:93:5c:42:30:a5:7a:ad:16:16:d0:07:91:59:
7d:52:b4:61:e2:b3:4c:2f:d0:6b:c5:3d:ce:25:83:
96:53:ee:8f:e9:28:45:ff:59:33:08:d6:2c:4c:d4:
71:d5:80:52:56:83:34:05:3b:1f:6b:d4:e3:0b:dc:
ba:f4:84:7e:84:4d:81:e3:9f:57:43:57:da:15:5b:
87:18:48:61:5b:ae:8c:b6:97:a8:bb:24:27:c9:80:
75:ec:66:71:9e:da:38:1a:10:cf:3f:06:0e:fc:57:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C4:70:87:D4:1F:DD:3C:5D:86:05:45:F5:54:1C:09:EE:A8:96:61
X509v3 Authority Key Identifier:
keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:86:ca:d4:52:70:ae:c9:75:8c:58:dc:65:2f:8f:50:7e:c8:
d9:ca:4b:ab:44:09:47:b9:b6:1e:fb:d6:72:28:70:3a:44:38:
d3:92:f0:7f:f4:a2:a2:93:57:89:76:e0:a8:db:ae:5e:8f:65:
16:28:d4:ab:f5:18:01:43:80:97:4f:50:b7:6c:e4:df:d4:35:
7a:87:7b:19:d5:a3:80:af:6b:70:17:f8:49:61:fa:f1:e1:6d:
46:de:59:5b:a6:12:9a:e0:8a:2d:55:e8:53:a7:8e:b7:03:fc:
90:9c:8c:97:a6:bd:7c:d7:dc:e2:78:43:24:56:8b:29:c1:a4:
94:22:a8:bc:13:ff:99:84:b8:7f:b7:ef:ab:02:59:71:31:41:
4d:69:c3:89:a7:b8:72:7e:01:22:64:6d:4b:72:ef:78:13:a1:
5b:01:4a:f0:f9:b2:d5:4b:9a:3c:fb:8c:5e:0d:2b:d3:9b:60:
1e:69:2d:1d:5f:0e:ff:ad:6f:07:35:12:07:63:7b:ef:49:54:
74:f1:af:81:0b:53:d7:17:d2:4f:b8:58:c7:c1:7e:b7:5c:0b:
1a:0f:cc:c4:d0:d0:9c:eb:6b:ec:b9:ae:36:c0:b8:bf:49:55:
c9:06:41:b4:f2:41:30:54:9c:20:e2:15:57:da:f5:1c:29:7c:
c8:65:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:09:58 2026 by rpki-client