Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: DRoBfVRNK5mKrbPH+H8VdAiGErUAhKVxQidQ+eqRbkY=
Subject key identifier: 8F:AE:25:14:B6:34:EE:87:5E:65:BB:07:AE:43:6E:31:C0:85:7A:E0
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 01A000CAAB76AE6CAE7E74044A362085413C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0CDA
Signing time: Fri 14 Aug 2026 15:01:17 +0000
Manifest this update: Fri 14 Aug 2026 15:01:17 +0000
Manifest next update: Sat 15 Aug 2026 15:01:17 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: Xjdb7YaoUzUyPwrM6o01mpxsuSrN2O3kgcKx94oCE5w=)
2: NVWKSQ6XeTs9oBM9mH9GDWql-4U.roa (hash: 9ZIbG9al1rdRHLFehJy3ARx4hRFjcesPVT2nGXw1rKM=)
3: gr0cmRtDnRg8WRBE5wgHk-NVvyE.roa (hash: DWSi/wfOMBMvBppFfmkuW+E4394pYqKUQ4bx3UceSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:ab:76:ae:6c:ae:7e:74:04:4a:36:20:85:41:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Aug 14 15:01:17 2026 GMT
Not After : Aug 15 15:01:17 2026 GMT
Subject: CN=8fae2514b634ee875e65bb07ae436e31c0857ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:93:12:07:1b:75:d1:b9:23:14:10:af:34:
f3:69:e5:5e:44:ae:66:c4:6c:3a:7a:90:57:17:82:
3e:45:25:9b:63:28:0a:85:c6:91:a2:ef:0e:2e:7d:
fc:6a:5e:2a:e8:72:11:aa:aa:ec:fe:a1:26:59:8a:
2e:81:65:47:86:8d:1f:5a:d5:ef:e2:e4:d6:9d:73:
32:1f:3d:dc:d6:a8:59:b2:16:06:e4:35:69:ea:a8:
5d:d0:51:4f:61:18:0b:af:dc:09:e2:74:ba:8a:f9:
06:fc:38:e8:fa:b2:f6:3d:6f:d6:92:b6:fb:97:0f:
c5:fb:dd:7b:67:3c:b0:11:99:c4:ff:f3:8c:45:25:
e6:dd:57:7a:f7:1c:2d:bb:91:20:99:3e:03:64:89:
e3:ae:46:58:50:6e:2c:88:4d:45:c8:2c:fe:e8:0a:
b5:c1:83:92:0a:f5:e9:9a:e0:77:fc:73:70:42:ed:
61:f9:96:b7:f8:d8:4d:5f:c2:93:55:df:c6:9a:30:
06:04:3a:1b:87:20:6a:ea:06:22:9f:51:78:65:4a:
4b:73:42:77:1f:69:9d:d3:0a:78:9e:ee:f6:e2:f4:
97:7c:5d:7e:95:fc:c6:e3:91:bb:96:4b:ce:99:92:
5a:ee:fe:cd:4f:f4:12:a2:d4:82:75:be:41:e3:9a:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AE:25:14:B6:34:EE:87:5E:65:BB:07:AE:43:6E:31:C0:85:7A:E0
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1f:cb:84:94:ec:42:74:a9:a7:ac:d8:20:a5:a8:73:22:6c:
aa:77:9a:d2:ee:ea:a6:5a:3f:2e:45:c0:3f:ec:92:5a:56:c0:
78:17:04:2b:ea:00:c3:91:b5:0c:96:44:4e:24:be:8c:53:b1:
a8:9a:06:84:b0:b8:f8:b3:ad:af:fd:16:e0:4b:d4:e0:dd:30:
95:81:e2:3b:c3:02:dd:80:e8:ea:14:b4:c0:43:ce:ca:00:b1:
ba:30:c2:30:74:5e:5e:4c:1a:4f:74:e6:ff:6e:b9:60:fb:f7:
36:2f:a3:2c:a5:c5:ee:8c:d0:02:cc:cd:d3:07:e9:77:dc:b8:
d5:3d:c9:9b:42:12:fb:1f:4f:96:f1:0f:fd:f9:f2:86:80:1a:
a9:f7:8f:2f:e1:c7:37:94:66:aa:00:57:17:9b:4e:3b:62:a3:
2e:66:05:74:b6:f9:2b:90:99:c7:2c:0f:04:6d:4c:7d:f4:80:
4a:4c:12:8d:b5:4d:34:2c:8b:88:b4:cc:a0:5c:41:a4:4a:1e:
b5:91:23:96:5e:11:5a:4e:5d:f8:44:3e:76:13:bf:4b:0b:17:
fe:9f:d9:44:7f:0c:cf:87:c8:ed:f2:b7:25:21:3e:19:01:01:
e8:3d:7d:80:02:e7:e8:22:3f:b2:d0:f2:34:e7:1a:98:df:78:
68:8c:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:13 2026 by rpki-client