Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
File: bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json)
Hash identifier: 0ajvmy6NA80dEDT00EXAeJsv/AOdaQ6QGOiRLHyJZ6Q=
Subject key identifier: F2:45:9B:91:68:52:08:53:7B:B6:71:B3:E6:02:EB:33:DC:5C:C3:A8
Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Certificate serial: 01A08B9F114D83D62BF7B84DC49DF5409AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
Manifest number: 0301
Signing time: Thu 10 Sep 2026 14:00:52 +0000
Manifest this update: Thu 10 Sep 2026 14:00:52 +0000
Manifest next update: Fri 11 Sep 2026 14:00:52 +0000
Files and hashes: 1: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: CmPHdHz3lC6ykt/HXuJV6jcvSV9rz5LwMxM05jGz5hI=)
2: kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa (hash: LGB+6qc6f2IFP3yURAz7uhoUKkg6z1TzwYrDl1Ny9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:11:4d:83:d6:2b:f7:b8:4d:c4:9d:f5:40:9a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Validity
Not Before: Sep 10 14:00:52 2026 GMT
Not After : Sep 11 14:00:52 2026 GMT
Subject: CN=f2459b91685208537bb671b3e602eb33dc5cc3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:89:e3:b0:f3:f6:a1:2d:e5:0d:e0:f1:15:
72:9e:76:65:05:2b:59:c3:04:ef:fa:68:40:58:7e:
5b:5c:c0:20:ad:4f:68:f2:6a:a9:5c:7b:6c:c8:1a:
ec:a1:85:05:31:96:77:92:10:f5:63:3d:84:92:d6:
ed:73:f3:01:e2:0f:23:30:d3:1b:2f:d9:7d:da:53:
18:48:b7:07:7d:03:2b:81:38:63:e6:93:a2:36:10:
01:49:ae:f9:32:82:e8:1e:be:54:08:05:de:6b:f6:
03:b9:24:43:3e:cf:23:6b:4f:b9:6a:e9:a7:1b:2f:
ad:72:13:e4:14:a6:59:13:ca:80:a2:c8:eb:d6:01:
4b:8a:17:74:bc:bc:8a:2e:e2:b8:e5:63:4d:d2:d7:
b2:c4:66:37:09:37:55:f4:bd:b0:af:60:5d:a0:ae:
d6:b5:9f:47:c9:31:ed:96:b9:93:93:49:bf:dd:62:
b1:6d:23:bc:8b:64:67:eb:ee:f4:e8:13:1e:ba:62:
6d:bc:71:28:de:ed:81:d1:5b:91:1a:d8:46:b7:91:
8e:21:21:06:14:98:a7:3e:2a:fa:50:a6:64:2a:e8:
2a:09:3b:76:f0:79:a5:47:23:a2:bc:1b:e9:13:c1:
be:99:f2:1d:7a:64:98:0a:c3:1c:a8:43:41:da:35:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:45:9B:91:68:52:08:53:7B:B6:71:B3:E6:02:EB:33:DC:5C:C3:A8
X509v3 Authority Key Identifier:
keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6c:dd:8d:ed:fc:5b:ad:d9:b6:2e:cf:18:a2:17:cb:25:92:
a1:4c:c5:91:c8:a2:a9:36:b3:63:10:82:b5:90:b2:68:c2:49:
15:ac:1e:74:88:b3:96:a0:33:ab:8b:d8:ac:5f:6f:0e:80:fc:
30:45:95:47:1b:cf:4c:42:c6:ad:98:00:b2:c9:22:84:1b:18:
bb:b1:14:ca:b5:58:d1:b9:2c:dd:b8:cc:1d:e5:fe:1a:cc:0c:
3e:3b:83:fb:bf:2c:8b:00:f9:af:20:bd:7e:f3:46:47:3a:d9:
8c:30:17:ee:10:96:7f:44:06:dc:7f:84:67:11:82:08:b7:ee:
36:86:4f:c5:83:a7:c6:4c:96:f4:9a:23:cf:9d:3d:72:66:a5:
1b:3e:4d:af:1a:40:bc:26:8b:a8:40:67:21:0b:4d:c9:be:69:
c3:ff:5f:da:83:53:78:cc:4c:d5:0d:1e:56:52:22:eb:69:56:
17:88:ec:67:58:dd:f7:a2:86:e9:51:5e:ff:c4:71:7d:eb:3b:
70:e8:42:2e:97:c8:87:24:1c:29:fe:5d:eb:6d:dd:81:de:b1:
18:55:ae:5e:0a:2b:b4:68:10:5a:d7:ae:32:dc:be:d8:44:7c:
5b:0b:09:cf:a6:49:2f:75:f4:32:b4:8c:92:ca:16:40:84:36:
bd:84:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:26 2026 by rpki-client