Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
File: bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json)
Hash identifier: gV+YdybXJXnrFqPCVoGPdo3WYEALcNYb4EDEwFh+KFg=
Subject key identifier: A4:A3:82:37:DC:D5:29:C5:36:28:12:49:57:4C:3D:89:83:FC:33:18
Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Certificate serial: 019FA004035FE8F3CA3964F9CB2CDCC0546E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
Manifest number: 0287
Signing time: Sun 26 Jul 2026 20:00:45 +0000
Manifest this update: Sun 26 Jul 2026 20:00:45 +0000
Manifest next update: Mon 27 Jul 2026 20:00:45 +0000
Files and hashes: 1: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: v53gID8DDeM2mrjhgmr2cdqkDYW2WbGkUPtiDpzW+tw=)
2: kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa (hash: LGB+6qc6f2IFP3yURAz7uhoUKkg6z1TzwYrDl1Ny9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:03:5f:e8:f3:ca:39:64:f9:cb:2c:dc:c0:54:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Validity
Not Before: Jul 26 20:00:45 2026 GMT
Not After : Jul 27 20:00:45 2026 GMT
Subject: CN=a4a38237dcd529c536281249574c3d8983fc3318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:45:8b:14:05:b3:4d:f7:44:4a:06:c8:78:
31:56:1b:56:3d:b6:f7:c7:f8:ab:01:98:36:f9:a5:
d0:d2:55:0a:8e:fd:7e:b6:99:7f:51:d5:c0:1a:2d:
7d:c7:20:13:a8:0d:30:ef:2e:0c:2a:08:b3:74:81:
9f:a0:f0:3a:53:ba:06:4e:4c:53:46:b1:46:ea:4e:
88:20:da:f1:b5:0b:3f:4c:98:27:66:a2:76:29:9e:
2e:81:d7:4c:af:1c:6b:3b:f5:65:e0:1b:fc:8c:b4:
c4:b9:06:20:ff:32:9b:e5:a2:49:86:d5:c2:07:81:
59:45:70:a9:e5:94:9f:17:8a:7f:da:a8:de:26:a8:
ed:a0:b9:1e:66:34:e2:5c:c4:da:30:8d:9c:97:8b:
f5:ea:bc:f2:60:bd:72:ed:06:0f:5f:4e:0c:aa:70:
6d:32:28:6f:c9:05:ba:98:42:84:e6:e6:99:66:a3:
5a:46:8e:89:f3:41:80:03:4b:9f:16:54:a0:0d:b4:
27:43:32:a2:11:a2:68:9d:07:8d:6f:1f:1d:ff:04:
eb:31:30:33:07:69:6f:b1:d0:e0:73:05:03:79:91:
8d:8d:58:ea:e9:52:65:46:93:91:62:be:af:41:33:
9f:03:1b:94:ae:d3:27:c6:cd:5f:d4:9b:69:af:b9:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A3:82:37:DC:D5:29:C5:36:28:12:49:57:4C:3D:89:83:FC:33:18
X509v3 Authority Key Identifier:
keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a8:37:13:98:d1:2c:e7:11:f6:d7:91:e8:f0:84:ff:21:6f:
68:d0:9f:33:55:12:45:50:6a:90:a4:3a:3d:9e:25:2c:ea:b7:
b4:54:57:db:26:6c:50:9c:68:c7:4c:7c:7a:26:9b:13:64:da:
46:87:b0:af:0f:5e:58:9c:a6:0c:36:53:4d:2a:4b:1e:f2:26:
91:9a:91:24:f3:38:c2:90:ba:ff:59:d6:9f:9d:93:4e:98:8e:
ff:7a:f4:55:49:83:2d:63:c8:43:47:27:c0:80:1c:73:f2:88:
7d:90:a0:2f:25:31:5e:d7:5b:14:1a:62:f4:71:14:52:62:19:
1e:cf:67:09:14:ed:22:72:43:14:18:9a:28:55:2c:2b:5f:be:
6e:50:1e:bb:69:1d:40:b5:ad:1d:01:1a:b7:ca:42:26:e2:68:
3b:a1:0f:39:d1:58:96:05:7d:e5:de:52:81:57:5d:8f:26:90:
37:0d:77:04:75:e1:94:dd:cb:3b:97:59:95:06:a8:c6:44:f1:
5e:cd:9e:62:ae:0e:98:b6:cf:c8:c2:f5:8d:69:0a:6b:8f:33:
c0:a3:05:d2:8b:17:00:9b:aa:56:e5:76:23:74:16:66:fa:b0:
48:72:a6:77:83:b3:13:73:f5:9e:0b:f8:7c:c3:4f:b5:db:e5:
c3:d9:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:06:30 2026 by rpki-client