Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
File: bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json)
Hash identifier: UXblLwZSA6UGBSo+99xOXVOGmA2rFkSeB7x61cviQnI=
Subject key identifier: 5A:0D:EA:41:98:7C:E9:DB:53:73:6A:33:E6:FD:76:F5:FC:A3:0E:24
Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Certificate serial: 019EB657A16EEF88E6DE4D54A54F9F1855EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
Manifest number: 020E
Signing time: Thu 11 Jun 2026 11:00:56 +0000
Manifest this update: Thu 11 Jun 2026 11:00:56 +0000
Manifest next update: Fri 12 Jun 2026 11:00:56 +0000
Files and hashes: 1: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: YPQv/pzczUvSK6QCgzZUi+O9oqnJy+Ka6EhE12C6CN8=)
2: kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa (hash: LGB+6qc6f2IFP3yURAz7uhoUKkg6z1TzwYrDl1Ny9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:a1:6e:ef:88:e6:de:4d:54:a5:4f:9f:18:55:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Validity
Not Before: Jun 11 11:00:56 2026 GMT
Not After : Jun 12 11:00:56 2026 GMT
Subject: CN=5a0dea41987ce9db53736a33e6fd76f5fca30e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:36:99:f0:08:03:ea:1a:7a:9d:30:c7:66:
c2:5a:44:bb:1c:15:6b:07:d7:1b:7b:e8:e1:94:c1:
9b:cb:b6:15:f2:11:dc:6f:8c:4f:9b:3d:b3:73:c9:
35:06:a8:23:d9:b5:6d:4e:c2:9f:d3:ba:80:c9:c1:
d5:03:1b:2f:ca:89:d6:0e:87:56:c7:66:23:14:1d:
76:35:5b:3c:2c:a8:7d:c6:dd:9a:0b:a0:a5:ca:f6:
67:14:5d:eb:d8:62:77:3d:6e:75:4a:ae:a3:f5:0d:
e9:e5:b0:ef:e0:48:48:9a:d6:34:aa:b5:fb:27:37:
ea:e1:03:cf:6f:71:f8:e5:6a:93:9b:11:5a:ed:d0:
d7:28:a3:27:6c:25:78:ee:a3:d1:a6:c6:30:20:d8:
c4:5c:ff:1d:7f:a1:43:cd:1e:91:9f:b3:27:57:b0:
9b:d9:82:bf:b0:9d:eb:c3:86:ee:6c:06:1b:7f:ea:
b7:c2:b6:13:74:2f:e9:d8:e2:a9:8d:67:f8:97:2a:
6e:ae:fb:fe:b0:e9:61:75:ad:af:6d:2a:c9:ef:15:
1f:0c:ed:69:b1:4a:69:51:9b:91:29:ab:45:8e:a1:
63:e3:3e:55:ec:26:71:59:6b:43:66:a4:63:b1:8f:
ee:f3:ff:83:d4:51:74:aa:be:da:7f:e0:13:1b:46:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0D:EA:41:98:7C:E9:DB:53:73:6A:33:E6:FD:76:F5:FC:A3:0E:24
X509v3 Authority Key Identifier:
keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:17:00:46:15:e3:20:d4:c0:26:ea:7d:b0:f5:af:17:93:54:
f4:4e:73:ce:78:17:08:20:76:5b:88:95:65:69:81:a4:fa:06:
e4:5c:13:8f:65:14:f7:43:f7:a8:73:5d:07:bd:e6:61:8a:9d:
12:6b:f0:88:cd:3e:6f:35:ad:30:2c:cc:49:6d:89:52:a2:2d:
8b:29:06:f7:a0:5a:8a:13:b0:f0:8b:a9:50:ec:70:15:38:86:
a0:9b:b1:1f:30:81:5a:97:0a:4c:72:7f:57:01:f2:8b:b4:cc:
9b:dc:b1:0a:16:8a:ce:a5:5f:81:60:e0:11:46:24:80:aa:61:
46:d2:8c:25:d9:8a:db:18:14:b2:76:31:bf:f8:e0:fd:2d:18:
8a:00:20:19:8c:0f:65:a8:83:5d:df:24:78:25:89:79:44:42:
88:e6:f8:2c:f1:e7:2c:27:3d:bd:ea:f9:3f:c8:01:e8:2a:f8:
64:36:40:a8:38:96:43:a1:2c:42:9c:2e:46:2a:2f:3d:af:ea:
e0:ad:06:96:ce:2a:40:57:e3:14:e0:fe:ad:f6:11:cd:07:cf:
fc:f8:34:b4:84:03:f4:af:39:1c:38:aa:12:98:d8:52:7c:05:
4b:67:52:6e:01:e3:87:06:58:c8:36:ec:87:62:bf:a8:6d:91:
32:44:a7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:59:43 2026 by rpki-client