Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: 9pG5ll7LGbBBSVg34Cw8RX6X3VCHrumni+J6jVS8Vqc=
Subject key identifier: 9C:09:79:58:66:0A:74:1B:C3:F5:7A:B2:05:8C:98:0A:62:37:DB:51
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 01A002820671D4B135A669D21FE608F3D29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0B6B
Signing time: Fri 14 Aug 2026 23:01:10 +0000
Manifest this update: Fri 14 Aug 2026 23:01:10 +0000
Manifest next update: Sat 15 Aug 2026 23:01:10 +0000
Files and hashes: 1: RfhufGynG5LNQHrEypFz6AFg1zs.asa (hash: JPJ0jIZIsWV2v8aF8+w3gEqGL1SiRdsEzuLyeRr8+uE=)
2: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
3: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: 50KJe/eaTM6X7H9/H8UU4Q/TzI1knGZr/pB/snglxBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:06:71:d4:b1:35:a6:69:d2:1f:e6:08:f3:d2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Aug 14 23:01:10 2026 GMT
Not After : Aug 15 23:01:10 2026 GMT
Subject: CN=9c097958660a741bc3f57ab2058c980a6237db51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:6c:11:97:b1:c8:83:8a:34:57:7d:06:e7:
ac:94:df:a5:76:5b:dd:c4:a1:19:93:37:f9:f5:58:
f0:72:5b:4b:43:2c:d7:3a:1d:05:c6:7a:7c:c6:82:
db:26:27:11:21:12:d2:9c:45:8c:e9:f4:3b:ec:eb:
fd:47:e5:72:78:8a:a9:0d:34:6e:f9:e9:3f:fb:84:
be:69:b1:30:35:7e:1b:56:04:2a:da:35:dc:3a:a3:
c0:18:1c:77:6c:13:51:e0:67:eb:60:18:0b:55:22:
ad:c3:ff:c3:54:9f:f1:e1:ee:b9:ed:84:8a:5a:d1:
b8:5b:82:27:3a:b7:e0:6d:bb:15:a0:2a:56:f5:93:
90:35:70:41:a2:4b:36:d2:3f:76:85:97:08:a2:0e:
fe:51:e0:b4:f6:16:d7:20:da:4f:69:fc:a4:71:2d:
99:db:d1:00:60:eb:16:ba:cf:c2:69:d5:5c:50:c9:
1f:cb:aa:6d:ec:d5:42:c9:b4:99:9d:ad:8b:d0:cf:
c8:11:57:47:86:fc:df:b2:70:5d:f8:33:b6:f0:87:
1f:06:80:1e:d0:3f:8e:7f:bd:0e:f4:24:50:aa:ca:
ad:36:ac:ed:96:14:73:cf:c8:5a:65:0a:7a:ec:35:
7d:64:71:a6:0a:2c:0e:3f:20:25:8e:09:1a:c0:9e:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:09:79:58:66:0A:74:1B:C3:F5:7A:B2:05:8C:98:0A:62:37:DB:51
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:33:dc:98:94:fe:8d:cd:d4:40:48:95:6b:c1:ad:13:c2:41:
69:18:c6:6a:4d:15:94:50:f6:41:23:ee:bf:05:c3:f0:c1:85:
c5:87:09:a0:aa:de:30:c6:1c:80:19:75:ae:83:32:d6:5f:81:
c8:a2:24:73:31:72:c2:b0:e5:db:d8:b9:3b:3f:8b:ce:d7:b4:
e3:58:25:4d:d7:e2:ad:b6:33:bd:64:d3:ee:e0:9e:45:a1:41:
ea:cf:c0:62:8e:3b:e1:2b:fd:8c:06:2a:80:36:4c:0e:c4:64:
93:dc:6f:81:cb:bc:bd:6e:de:9b:76:1e:b0:1d:db:8a:96:ab:
4a:ac:9a:0c:31:30:d9:33:de:fd:58:dd:a3:c9:96:35:b3:93:
46:1e:d9:4f:c4:1c:a4:f0:dc:e6:08:e9:35:19:f4:33:37:cd:
46:83:2a:f3:2b:c2:06:4e:e8:c3:7e:a8:ef:c1:82:bc:01:a2:
52:49:ba:3e:10:fd:77:1c:ef:bd:e5:bb:dc:69:e8:c6:b2:23:
f8:ea:58:3a:ba:db:ff:89:d6:ec:32:b2:fb:5e:77:c2:65:62:
88:84:95:b5:ef:28:b1:33:03:71:e8:4a:c0:01:a7:8d:83:01:
51:12:b8:35:16:3b:c5:ae:eb:98:77:80:e6:88:a4:80:7a:c8:
46:1a:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:39:56 2026 by rpki-client