Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: Vth++bk5YRrFPXlFVMVrO8+sA++1BlYhDg9iwCW5190=
Subject key identifier: 7D:E8:25:47:A8:D8:57:DC:0A:47:94:68:D2:03:BA:BD:8F:DD:02:4E
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019D382E96784F0487B415841ECF1AB9D3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0B69
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: YHo9GHcDJC1ZTLCe0OzXpYvnuQxiBUW4R9IsXu455lc=)
2: NVWKSQ6XeTs9oBM9mH9GDWql-4U.roa (hash: 9ZIbG9al1rdRHLFehJy3ARx4hRFjcesPVT2nGXw1rKM=)
3: gr0cmRtDnRg8WRBE5wgHk-NVvyE.roa (hash: DWSi/wfOMBMvBppFfmkuW+E4394pYqKUQ4bx3UceSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:96:78:4f:04:87:b4:15:84:1e:cf:1a:b9:d3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=7de82547a8d857dc0a479468d203babd8fdd024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:36:07:57:dd:db:dc:5c:90:09:3f:02:22:
dd:42:81:b6:07:54:b6:33:7b:5b:6f:8b:65:da:13:
84:f9:b7:d5:3c:89:1b:f9:2d:12:e8:66:e2:a5:17:
fb:d9:05:91:0a:ad:7d:38:c6:6f:46:85:c3:0a:1d:
9c:08:15:e6:b7:0c:86:13:32:1e:5e:a3:c3:e1:37:
a6:c8:47:c8:82:e4:fe:b2:3e:1f:fe:cf:e1:0e:72:
68:b4:2d:6c:dd:01:51:62:90:af:04:8d:52:c1:1e:
fe:8c:2e:b7:5c:78:21:69:a8:50:3d:4a:30:4f:94:
cf:86:5d:ce:a3:d4:bb:fc:86:73:e3:9b:0d:ca:e1:
7c:4c:63:d4:47:71:87:eb:3a:6c:18:44:21:ad:66:
1a:9d:28:da:7a:07:38:34:59:bb:06:27:ad:4a:9f:
0f:ff:ea:a0:f5:15:ec:1d:c1:3f:c2:fe:69:90:f3:
12:77:80:15:f2:00:cb:05:e8:09:fb:fd:a0:df:2e:
3c:93:41:df:64:01:03:f2:46:34:14:df:54:65:7b:
61:e5:c2:71:16:54:9e:84:9d:5d:0f:60:e2:7c:18:
92:67:bd:13:8b:76:53:4f:f8:2d:4a:f9:e0:7e:72:
9d:1d:7f:86:bd:62:54:9e:59:5c:da:31:c9:0e:2c:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E8:25:47:A8:D8:57:DC:0A:47:94:68:D2:03:BA:BD:8F:DD:02:4E
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:49:f8:e9:99:7a:33:e0:e7:3f:b6:b4:f1:4e:f0:d7:6c:b0:
e2:ad:4c:24:7a:8e:a4:dd:ea:80:5b:e0:62:21:d6:35:16:b2:
31:4f:10:73:50:89:51:62:4d:87:3e:22:95:9b:61:ef:b1:a6:
9c:c8:3c:81:0f:09:99:59:44:7c:21:0d:39:e8:83:94:61:3c:
74:8d:0c:66:31:fd:4f:b7:d7:aa:5c:d8:1a:09:2d:ba:a7:b4:
5c:6d:e6:50:bd:b0:b9:19:b7:e7:10:34:5b:2b:b9:34:42:a0:
a2:86:4d:7b:5e:09:55:ed:cb:3d:23:cd:05:7b:6d:80:6e:71:
0e:34:b3:df:90:6e:c6:6a:b5:fa:09:e9:9f:9b:26:60:34:6f:
5d:a5:05:e6:43:93:ca:e0:3f:95:93:96:32:4d:bb:12:94:91:
13:95:b3:d9:06:1b:a6:9d:ff:03:8e:dc:13:db:87:31:57:f6:
be:45:d8:75:86:1f:f0:f8:26:2b:69:d4:de:f6:40:e2:ea:92:
ec:41:57:0b:9b:84:45:c3:45:46:43:0b:7e:46:81:3b:c5:9d:
2c:c8:35:51:d5:6e:80:eb:17:04:3f:95:24:26:37:b5:5f:d2:
96:53:d8:12:cd:08:a0:dc:fa:7a:52:11:cf:25:b8:84:3c:bb:
c6:7b:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:13 2026 by rpki-client