Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: HuH09cnQoz18XJaDCCDpoEW6Z7h/3QHTe5wqJeUdzeE=
Subject key identifier: A4:17:C8:75:B8:15:60:8B:79:A0:01:25:20:F5:6E:1F:B6:24:1C:42
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 01A14CF4EFAF5DA7D4616019D9FEDD484818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0D86
Signing time: Sun 18 Oct 2026 03:01:22 +0000
Manifest this update: Sun 18 Oct 2026 03:01:22 +0000
Manifest next update: Mon 19 Oct 2026 03:01:22 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: FJV7Siqkgx2ue+KllakW30OwTMkxVcPf6vXdFaunrOI=)
2: NVWKSQ6XeTs9oBM9mH9GDWql-4U.roa (hash: 9ZIbG9al1rdRHLFehJy3ARx4hRFjcesPVT2nGXw1rKM=)
3: gr0cmRtDnRg8WRBE5wgHk-NVvyE.roa (hash: DWSi/wfOMBMvBppFfmkuW+E4394pYqKUQ4bx3UceSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:f4:ef:af:5d:a7:d4:61:60:19:d9:fe:dd:48:48:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Oct 18 03:01:22 2026 GMT
Not After : Oct 19 03:01:22 2026 GMT
Subject: CN=a417c875b815608b79a0012520f56e1fb6241c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:1a:7c:48:17:0a:3c:a8:6e:51:b8:41:88:
7d:90:a7:00:ce:c9:5d:52:5a:dc:af:df:11:82:2b:
e6:4e:37:b1:72:9f:1b:61:00:2e:02:17:c6:07:bf:
25:c8:45:72:34:9a:dc:08:18:52:ac:66:21:80:e4:
c6:48:5d:db:c4:4e:a9:63:d4:18:39:ce:05:f3:3a:
b8:08:fd:2a:ca:49:36:b1:be:22:f9:81:b2:7f:c6:
74:3f:02:25:af:0d:97:98:65:c4:a5:20:36:90:0a:
06:26:f9:3c:0b:67:27:8f:ac:bf:4c:90:c9:77:e0:
54:0e:9a:05:8a:1b:29:ad:5e:b9:66:e2:b3:1f:74:
61:ca:e0:8f:1d:8b:19:ca:57:23:73:3e:36:b3:82:
00:21:61:de:65:0a:bb:4d:49:0e:49:c4:aa:20:91:
e4:66:19:ff:f4:6d:62:96:c7:cf:08:c8:55:6f:56:
f1:a9:00:d7:a1:f7:ff:0f:02:b5:1e:df:95:cd:21:
56:50:38:75:39:4b:98:40:6e:25:00:3a:06:b6:e2:
0c:71:bf:7a:2d:2b:95:94:bd:da:01:f6:67:64:29:
a1:f9:21:74:47:c8:ac:12:89:31:66:96:eb:b1:a6:
95:44:a5:a9:2d:ac:be:6d:2f:f8:a8:c1:6a:8d:6e:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:17:C8:75:B8:15:60:8B:79:A0:01:25:20:F5:6E:1F:B6:24:1C:42
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:30:07:4a:e0:7c:f7:e9:a1:f2:45:a4:34:18:aa:9a:a4:4e:
76:38:0d:38:4a:a2:ee:fc:8a:f9:23:13:09:1c:b3:89:48:fd:
aa:5d:c9:ca:62:c8:62:8c:78:92:aa:1e:d5:4e:08:f1:9e:d3:
ab:81:d6:e5:a4:6b:40:18:ff:ff:a6:1c:07:9d:73:28:0a:58:
c3:9a:41:1c:28:d3:82:9b:2a:e7:75:1d:ae:51:b2:09:29:fd:
03:f9:c1:3a:75:da:b8:4c:e8:99:96:b1:c8:04:bf:87:4f:44:
5d:d4:b8:c9:18:e3:9f:c3:08:32:43:fd:54:f7:a1:4e:45:7c:
56:7c:b9:f1:a5:de:9e:f4:4a:7c:f7:bb:97:be:cb:39:91:24:
df:a3:ac:e2:b3:5d:6f:41:ff:06:fd:55:67:96:af:91:94:ba:
d9:aa:4c:f6:31:4c:2c:68:53:f6:d1:45:dc:6e:ab:2a:94:da:
c0:ae:66:19:75:7a:14:8b:96:fe:78:c8:9e:43:81:e4:8e:bb:
14:1a:99:34:08:b8:01:a1:9f:5f:35:5e:f2:bb:78:61:c1:34:
d1:ed:18:1f:0d:a3:11:6d:44:d6:fb:c6:b0:04:3d:49:fc:52:
52:fb:44:9c:45:8b:25:90:54:ed:f1:c9:a8:73:ba:29:a0:93:
5c:56:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:17:54 2026 by rpki-client