Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier: m30VU5xCN8N+Ms5KiqpwctvfovUgcTOCo347pK8Gjhg=
Subject key identifier: EC:EA:82:DD:7B:C0:ED:D0:CE:18:20:71:64:22:A1:5F:9F:46:1F:37
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial: 019CAC106E3C0C1D69A9816A275BEE396089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number: 05F7
Signing time: Mon 02 Mar 2026 01:01:23 +0000
Manifest this update: Mon 02 Mar 2026 01:01:23 +0000
Manifest next update: Tue 03 Mar 2026 01:01:23 +0000
Files and hashes: 1: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: v8BAUlB/3VcP7nPLIRQZ7hkZn5hiB/E7FBkEbj1545A=)
2: d5Zhp1cA_fqDZ1FzU959TA66aj4.roa (hash: SuNZX9fanarDL2+daC3fGFckgN7apSeTYCwNJVS+b94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:6e:3c:0c:1d:69:a9:81:6a:27:5b:ee:39:60:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Validity
Not Before: Mar 2 01:01:23 2026 GMT
Not After : Mar 3 01:01:23 2026 GMT
Subject: CN=ecea82dd7bc0edd0ce1820716422a15f9f461f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:e2:d7:cb:c2:78:13:6b:8d:93:4a:5c:b5:
82:b8:0a:a3:fd:07:77:00:68:31:0a:65:1a:5c:c2:
9a:ce:db:1a:73:68:f4:ab:a3:72:45:09:32:89:98:
48:60:07:d8:47:a8:da:ee:ae:ac:76:c6:b7:9d:d8:
26:a6:40:09:ed:b0:33:20:0b:6d:32:f6:3d:40:e9:
31:4c:57:c9:9d:3e:b4:d9:df:e7:b9:44:e9:ca:02:
ff:da:88:9b:5b:2a:04:33:1b:ba:14:43:6f:aa:5c:
52:aa:16:53:55:b7:80:89:67:e3:64:70:fa:f5:e9:
e9:cb:f6:11:0e:cb:4d:b9:02:71:51:46:de:c4:db:
f3:99:8e:76:f2:b4:ce:44:59:4d:c6:16:63:3a:89:
c5:8d:26:63:1b:b7:73:82:98:87:69:c7:89:de:58:
dc:28:6d:51:83:1a:a0:9a:d9:f3:90:32:a3:88:4f:
94:c6:56:11:8a:b4:46:70:5c:96:47:ea:65:f3:a5:
86:1c:fc:b5:fb:a2:a9:27:34:73:96:61:da:82:a6:
cb:8e:69:81:2a:3f:df:ea:e2:39:f7:6c:8d:cb:8c:
bb:9a:92:6f:2e:98:32:b6:d4:bf:d5:71:e4:2d:a1:
cd:74:8d:6c:48:bf:7f:4f:d9:8b:54:d1:ac:1b:06:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EA:82:DD:7B:C0:ED:D0:CE:18:20:71:64:22:A1:5F:9F:46:1F:37
X509v3 Authority Key Identifier:
keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0e:09:ec:9a:83:54:69:45:5c:db:17:b0:a6:a4:bf:94:14:
6e:c2:e4:4c:68:cb:d1:4e:b4:76:1b:ec:1a:85:33:51:48:5e:
86:fd:4f:c5:df:54:a2:9b:48:8d:3f:8d:6f:c0:84:50:79:20:
85:8b:2b:d2:c7:cb:f2:d8:15:ed:8e:49:f2:51:4c:2e:da:25:
d4:ed:ef:15:86:37:31:d0:1c:9e:2a:6d:b0:2e:f8:d9:dc:fc:
56:aa:a4:c3:9a:65:fc:ec:43:c7:e0:2c:48:a6:d0:8b:8d:8b:
1e:70:ec:c0:34:6e:5a:c0:fd:34:9e:e7:f5:db:68:43:a9:7c:
89:f2:65:17:6d:c6:ef:24:b9:3c:e7:25:84:97:2b:bc:6c:83:
4a:25:0c:e3:40:73:32:4e:36:5d:2e:d6:29:b6:cc:e9:68:5d:
e9:55:e5:1c:30:a6:86:4a:f7:d8:83:5f:96:6f:16:96:91:df:
00:b2:6e:67:2a:bc:7c:74:f6:e5:f9:8d:37:a4:90:01:45:46:
80:0a:84:dc:23:48:63:45:a7:59:22:b6:4f:bc:30:6c:e3:e1:
68:c4:89:0e:ed:d4:6c:61:d8:8a:9a:ab:01:8a:2d:74:2b:32:
21:e5:74:a4:f6:20:78:98:65:08:b0:ed:48:10:db:41:93:38:
70:8c:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:10 2026 by rpki-client