Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: G0gcewHVkcQIlhHW2JOmAtK2ISmiSYFx7d7uia4C14U=
Subject key identifier: 6E:68:B5:ED:E9:20:B3:77:52:70:1F:00:8C:39:9A:4E:8E:4F:E5:5F
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 01A1035B3FCEED317E5D81D80CF818F99F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0BF0
Signing time: Sat 03 Oct 2026 20:01:13 +0000
Manifest this update: Sat 03 Oct 2026 20:01:13 +0000
Manifest next update: Sun 04 Oct 2026 20:01:13 +0000
Files and hashes: 1: RfhufGynG5LNQHrEypFz6AFg1zs.asa (hash: JPJ0jIZIsWV2v8aF8+w3gEqGL1SiRdsEzuLyeRr8+uE=)
2: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
3: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: vI43CrjYJB7fJ/K+AjF48TQq8qv36MlLj0Xi+V2QLuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:3f:ce:ed:31:7e:5d:81:d8:0c:f8:18:f9:9f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Oct 3 20:01:13 2026 GMT
Not After : Oct 4 20:01:13 2026 GMT
Subject: CN=6e68b5ede920b37752701f008c399a4e8e4fe55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:9c:ea:12:e5:19:4a:c8:9e:2d:0d:e8:94:
23:c5:b0:25:70:2e:13:f2:f7:50:f1:67:e0:ee:4d:
94:9f:a5:76:c6:88:24:ba:f3:20:48:88:6b:67:64:
d9:be:94:5a:2b:15:9c:cc:15:52:76:25:ee:5b:e4:
07:c2:7e:93:3a:1f:05:80:2d:fc:36:9d:69:43:c9:
d1:e1:9c:1b:5f:85:86:cd:a4:15:02:cb:18:b9:3a:
bf:27:7d:31:8f:c4:0f:1e:6c:ad:32:3f:a7:4f:2a:
24:70:6c:da:e7:ad:ae:72:4d:4b:53:5a:38:b9:48:
b9:30:a8:2b:d4:5a:ee:7d:f4:e2:cd:4c:db:97:ec:
e6:17:3e:83:ff:8f:d3:f4:1e:2f:7d:51:d4:57:65:
47:d1:d9:0a:9d:02:37:4f:d1:49:fa:93:9f:a9:94:
31:a5:f6:ee:7a:0f:f0:a5:83:6b:18:9e:1a:c0:a3:
ee:e1:52:eb:94:a4:ac:fa:db:01:8d:63:f1:60:35:
14:7c:7e:cf:87:44:95:0e:3b:6c:ce:a0:58:8b:95:
b8:56:e9:a1:99:b3:e5:ee:94:3c:3e:24:a6:00:be:
05:62:20:1c:2f:c9:4d:1a:e8:56:3b:25:cb:d3:02:
96:27:f3:c7:c2:0e:c7:54:b0:de:f7:4e:f2:eb:86:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:68:B5:ED:E9:20:B3:77:52:70:1F:00:8C:39:9A:4E:8E:4F:E5:5F
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:90:36:ec:46:11:6a:c7:86:5d:a8:f0:32:72:3b:ab:b3:03:
6f:51:24:cc:04:4e:03:a1:79:01:a9:5f:e4:3f:3f:49:8f:ea:
43:59:b4:8b:bd:c6:d9:cd:a0:3a:db:c1:34:0b:f6:64:85:95:
5d:13:cf:3a:83:54:54:3f:42:77:3a:46:f0:ce:0c:9c:9b:f7:
52:8b:2a:53:c4:d0:07:25:d0:0b:26:6a:af:e5:9a:fe:c8:22:
a7:c5:68:fd:79:8f:14:17:e8:2f:74:93:48:81:3b:c0:ab:1a:
e5:78:f3:7b:1e:19:85:56:1c:dd:ff:8c:df:85:29:c5:dd:7c:
e7:c1:09:94:33:6e:b9:be:a6:ae:9b:61:5d:30:63:a7:fa:27:
65:46:77:46:6a:c9:30:18:dc:fa:61:73:ea:cb:ac:b1:df:ed:
47:ff:3b:65:7f:2c:06:65:a4:0d:5c:85:39:19:f6:62:c8:d2:
83:f5:40:69:74:3e:9f:fa:1d:c7:e9:ca:c7:c7:c2:18:05:12:
50:13:11:6f:92:20:d5:2e:53:4a:42:4b:52:7c:95:cf:23:8e:
bd:d5:e9:41:0e:09:ff:8f:ae:f2:7a:a6:d4:e0:f0:14:bc:c3:
8a:e4:e9:69:dc:b0:bb:83:66:97:a7:7b:c1:d0:b3:4e:fa:61:
51:64:71:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:40:17 2026 by rpki-client