Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
File: bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json)
Hash identifier: Bce7t6z27r884cbyZoPXFa3kNB7AYSagKVc+wiC4nqk=
Subject key identifier: A6:E1:11:8D:BF:AD:4B:79:5A:5D:B9:41:DD:D5:92:76:12:B3:88:8A
Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Certificate serial: 019D39E5C9F61DBA8911DCAFBC03ED422E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
Manifest number: 0149
Signing time: Sun 29 Mar 2026 14:00:53 +0000
Manifest this update: Sun 29 Mar 2026 14:00:53 +0000
Manifest next update: Mon 30 Mar 2026 14:00:53 +0000
Files and hashes: 1: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: ZiVVI3vyNuKFAV8pF2TtBtvn+Bd430ns2IHvRmOCetY=)
2: kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa (hash: LGB+6qc6f2IFP3yURAz7uhoUKkg6z1TzwYrDl1Ny9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:c9:f6:1d:ba:89:11:dc:af:bc:03:ed:42:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Validity
Not Before: Mar 29 14:00:53 2026 GMT
Not After : Mar 30 14:00:53 2026 GMT
Subject: CN=a6e1118dbfad4b795a5db941ddd5927612b3888a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:f3:1b:b6:a7:08:a3:1b:b8:c7:c1:4c:41:
d9:b8:17:d2:58:f5:e0:42:39:c7:50:e0:1d:03:ee:
b1:1f:a9:f3:f5:a9:6f:73:ee:f1:35:11:8b:3c:ee:
3b:84:f3:0b:e8:e6:9b:a3:4f:78:08:c9:7a:63:03:
ab:26:c4:24:50:e8:78:5b:d3:55:01:50:c0:41:b6:
73:ed:11:c2:7a:2d:54:81:c6:d2:4b:bf:89:fd:ac:
25:26:59:01:f7:39:a5:03:d6:d5:35:ca:c5:14:bc:
93:f0:39:07:48:38:02:b1:bc:ed:99:64:3f:df:61:
1e:5c:7c:68:43:bb:6c:50:28:9a:10:57:da:10:1a:
7a:d5:02:35:b8:c9:19:fb:01:5c:d4:f2:fb:f5:43:
c1:94:77:42:e1:df:7e:79:22:e6:17:e9:96:fd:7e:
7f:be:61:6d:30:a7:73:65:48:c2:87:fa:60:e4:81:
68:aa:12:91:72:98:3d:a4:76:b6:fe:2b:07:30:43:
e7:90:c9:00:91:f6:91:1f:6d:34:06:c3:7e:c2:ce:
a7:db:4a:a0:8a:44:85:ea:92:25:2c:dd:bf:c7:5f:
89:76:c3:57:ac:8d:37:00:64:a0:06:c6:0e:18:58:
df:6d:05:05:65:99:5b:58:ea:41:b8:23:31:0c:75:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E1:11:8D:BF:AD:4B:79:5A:5D:B9:41:DD:D5:92:76:12:B3:88:8A
X509v3 Authority Key Identifier:
keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:91:92:d3:59:46:48:6e:1d:86:9f:fb:78:7a:07:51:10:ff:
65:a8:61:4d:e8:1c:55:21:c6:6b:0f:b3:88:9c:f2:e8:60:87:
67:a4:78:3f:ca:a7:90:e7:1f:4f:0d:2d:72:7f:0b:87:1c:54:
af:bb:e0:4c:77:d9:15:2f:1d:9f:e7:7d:06:96:ce:e8:95:3f:
8d:26:22:cb:fd:5b:c9:db:3c:44:6e:2c:5b:d8:94:77:ad:eb:
c7:18:18:76:f9:8d:f5:41:8a:74:72:f2:55:88:53:05:fc:af:
1f:df:63:39:60:e2:84:87:ca:a0:d9:d1:0f:6c:b4:92:a6:50:
11:c6:28:8a:2c:77:04:d7:03:dc:e9:cd:c1:e5:c5:d7:e7:1f:
af:d1:8e:2f:b9:60:56:03:fa:c8:2e:04:5b:9e:a2:14:0a:ee:
3a:4f:b0:99:f2:d9:49:f2:9c:e6:95:60:9b:3d:7a:b5:46:8b:
77:b3:f1:d4:b8:e9:7b:be:1f:11:f6:80:f3:04:85:45:d2:2a:
8d:be:57:25:7f:0f:c9:e4:fa:e2:46:e3:82:ff:91:64:7e:9b:
37:2f:88:2f:a6:0c:b4:0a:9a:7d:27:97:f8:62:67:be:fb:64:
02:b0:50:77:15:b0:dd:dd:3c:00:5a:75:21:4a:60:1a:a1:6a:
47:a5:ba:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:47 2026 by rpki-client