Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: xkRV6kMLOtkAuyzTEPtx60NVyANN8ZiC/fwfTQTTygY=
Subject key identifier: 35:7E:A2:B9:01:E2:CF:C3:98:CB:95:6B:B2:1A:B5:AF:40:D5:A0:A3
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 01A001A6556B6236858368C0E47F309B27D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 19:01:13 +0000
Manifest this update: Fri 14 Aug 2026 19:01:13 +0000
Manifest next update: Sat 15 Aug 2026 19:01:13 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: FsG1WQMY0J/b+mH0orCIe4bv1/xSudKBR7J9PlqG3No=)
2: hhSORRB_cbi8J7UPYVa8deItbjI.roa (hash: tbnenU0D5ezQqQe74bKynFZLzheD+pCDrBBIC6BR1ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:55:6b:62:36:85:83:68:c0:e4:7f:30:9b:27:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Aug 14 19:01:13 2026 GMT
Not After : Aug 15 19:01:13 2026 GMT
Subject: CN=357ea2b901e2cfc398cb956bb21ab5af40d5a0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:08:09:ed:c0:61:db:46:48:c3:2f:82:7e:
c9:ac:b2:f6:65:b8:16:fe:f0:1e:94:1b:5e:2f:d4:
5a:47:30:a4:20:85:6e:fe:c4:f7:bf:b5:e6:6a:f9:
ed:ce:40:d3:08:ce:9d:c7:59:fb:bf:78:35:3d:c5:
05:44:33:ed:57:e0:33:b7:17:8c:61:76:92:4d:82:
95:cd:86:e1:90:5f:69:02:4c:c8:77:33:67:eb:6d:
a9:06:01:d0:e9:da:08:73:46:5b:e4:f1:c0:77:3d:
27:25:35:f8:45:d7:0d:0c:8e:96:32:88:33:dd:5b:
24:29:e8:7d:f3:38:75:9e:90:35:df:2e:45:ac:c1:
a9:36:34:b5:1f:84:4e:92:45:b1:e5:e9:e2:e5:1f:
57:8e:6d:d8:fe:3a:ff:69:53:9b:81:aa:ba:88:fb:
4e:1b:13:0c:a8:46:62:a0:79:63:d1:08:27:d3:09:
d3:ed:55:c4:e9:6e:19:e7:ca:4f:4e:4f:1d:5f:c0:
c9:ba:71:38:39:b3:d6:21:6f:c0:f0:00:60:ca:9b:
b2:e9:16:6b:af:86:43:f3:21:17:fb:24:3c:0a:55:
e4:9c:b6:26:22:6e:7d:39:c8:4a:51:c7:46:79:fd:
f7:8c:eb:db:37:27:3a:35:08:ea:ef:60:12:5c:72:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7E:A2:B9:01:E2:CF:C3:98:CB:95:6B:B2:1A:B5:AF:40:D5:A0:A3
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:07:c7:0f:a4:42:ce:76:b1:a5:c8:1c:ba:49:2a:90:4a:78:
40:8f:e4:64:9a:34:9d:c7:e0:52:85:ac:65:c3:d0:32:29:a1:
4a:a5:40:5f:3e:cd:03:22:f1:09:54:0d:cf:f0:15:95:15:09:
5e:62:a3:eb:85:ca:2d:75:19:02:ed:71:8e:0c:f6:a1:7d:e3:
ba:d4:cc:f8:ed:56:6e:00:62:59:1d:7d:4c:63:8c:ce:47:ac:
47:bb:1f:80:8b:82:4e:84:b4:61:7d:d8:d2:69:70:8a:0f:98:
7b:51:91:3c:f2:ed:34:57:bb:a5:fc:b2:72:d5:72:44:83:66:
7a:b8:46:44:f9:b4:c8:6c:69:3a:68:b4:ff:9e:55:9e:9a:b1:
06:e1:e5:f9:3c:ed:76:ed:fd:74:97:5b:e1:55:98:3f:d9:57:
44:39:3a:c6:ca:f1:41:a6:8f:88:be:ce:ba:99:a1:df:27:11:
6a:07:4a:a4:72:c8:c5:dc:45:73:ab:6d:93:89:d2:da:12:44:
74:4a:20:02:36:cf:a2:7c:ef:b5:a2:ed:2d:51:67:98:31:2e:
4b:ce:84:b4:2c:fd:1a:d6:58:6d:75:85:99:22:10:b6:00:ea:
33:91:93:ef:25:b7:b0:cc:f2:79:a5:0f:9c:70:70:15:0a:1f:
ce:75:0e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABplVrYjaFg2jA5H8wmyfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzNiOGI1ZjM3ZTIxMDY4MjUwNTcxZjRkYjgzYjQ3MTQ0
NjhhMmMwHhcNMjYwODE0MTkwMTEzWhcNMjYwODE1MTkwMTEzWjAzMTEwLwYDVQQD
EygzNTdlYTJiOTAxZTJjZmMzOThjYjk1NmJiMjFhYjVhZjQwZDVhMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmcICe3AYdtGSMMvgn7JrLL2ZbgW
/vAelBteL9RaRzCkIIVu/sT3v7XmavntzkDTCM6dx1n7v3g1PcUFRDPtV+AztxeM
YXaSTYKVzYbhkF9pAkzIdzNn622pBgHQ6doIc0Zb5PHAdz0nJTX4RdcNDI6WMogz
3VskKeh98zh1npA13y5FrMGpNjS1H4ROkkWx5eni5R9Xjm3Y/jr/aVObgaq6iPtO
GxMMqEZioHlj0Qgn0wnT7VXE6W4Z58pPTk8dX8DJunE4ObPWIW/A8ABgypuy6RZr
r4ZD8yEX+yQ8ClXknLYmIm59OchKUcdGef33jOvbNyc6NQjq72ASXHKTqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDV+orkB4s/DmMuVa7Iata9A1aCjMB8GA1UdIwQY
MBaAFAbDuLXzfiEGglBXH024O0cURoosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjQzZDAtMTlmZS00ZGEzLWEyMGEt
ZTZlZmZkM2NlZjMyLzEvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9lMjQzZDAtMTlmZS00ZGEzLWEyMGEtZTZlZmZkM2NlZjMy
LzEvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgfHD6RC
znaxpcgcukkqkEp4QI/kZJo0ncfgUoWsZcPQMimhSqVAXz7NAyLxCVQNz/AVlRUJ
XmKj64XKLXUZAu1xjgz2oX3jutTM+O1WbgBiWR19TGOMzkesR7sfgIuCToS0YX3Y
0mlwig+Ye1GRPPLtNFe7pfyyctVyRINmerhGRPm0yGxpOmi0/55VnpqxBuHl+Tzt
du39dJdb4VWYP9lXRDk6xsrxQaaPiL7Oupmh3ycRagdKpHLIxdxFc6ttk4nS2hJE
dEogAjbPonzvtaLtLVFnmDEuS86EtCz9GtZYbXWFmSIQtgDqM5GT7yW3sMzyeaUP
nHBwFQofznUOlQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:30 2026 by rpki-client