Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: yqH3ZhyLY6coWOZIqoqMk6wKM+OSINEX+9ghGl/iTM8=
Subject key identifier: EF:43:E1:21:F9:1F:DB:AA:5A:81:38:C6:C9:65:EB:08:4D:E2:B5:EC
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 01A0C88F07B5AABDF86AD6A5F0618FFD21C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 15C3
Signing time: Tue 22 Sep 2026 10:00:11 +0000
Manifest this update: Tue 22 Sep 2026 10:00:11 +0000
Manifest next update: Wed 23 Sep 2026 10:00:11 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: Gb4uuW4ZgzOAgP12dtd4P1CmSe27+ZV7Zz1Sx6KcmsA=)
2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:07:b5:aa:bd:f8:6a:d6:a5:f0:61:8f:fd:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Sep 22 10:00:11 2026 GMT
Not After : Sep 23 10:00:11 2026 GMT
Subject: CN=ef43e121f91fdbaa5a8138c6c965eb084de2b5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:60:0d:1e:c8:98:f7:18:a8:55:29:03:70:
24:e0:eb:77:2d:12:b7:a1:71:55:01:65:dd:34:10:
f9:15:6f:46:cc:2c:da:0f:31:06:bf:19:cd:62:42:
98:59:50:97:b5:4b:d8:9a:7f:f9:d5:38:34:80:25:
97:c4:13:5d:69:32:ae:07:ef:66:4c:54:e9:50:b8:
fd:91:4d:6d:d5:40:6b:56:40:bc:05:f3:79:93:c4:
b5:bb:5c:88:18:f0:2c:07:65:9f:96:f6:c0:55:6b:
b8:6a:16:73:dd:09:41:73:5b:9c:e0:b5:ef:54:3a:
53:93:48:b9:44:a3:28:c3:7e:56:6f:ae:00:c2:b2:
06:d2:c7:18:92:d7:8b:91:b8:3f:82:e5:69:60:7e:
04:fe:11:99:69:7f:ac:c0:ec:94:be:0c:d8:d5:28:
a2:c9:62:83:92:67:1b:6f:e8:f8:c6:48:ec:d1:ed:
00:f4:25:24:fd:0a:78:44:db:0c:36:71:f6:cd:19:
55:c3:d6:75:33:d8:fa:c6:a3:59:f3:82:6f:91:7f:
ad:23:09:61:41:02:38:6e:af:e9:7f:7c:ae:38:84:
ac:93:fd:55:a7:db:72:87:ad:76:7c:4f:c2:b0:c2:
38:f0:24:56:2c:e0:bf:f2:00:36:ac:57:52:54:f1:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:43:E1:21:F9:1F:DB:AA:5A:81:38:C6:C9:65:EB:08:4D:E2:B5:EC
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:59:b4:20:0c:2a:bd:5f:41:40:4d:41:5d:9b:9b:fe:1d:01:
47:af:2f:36:4a:d7:ac:d7:af:0b:4b:d4:58:96:c3:b6:a4:11:
cb:89:ab:ff:ec:ba:d1:70:1e:23:d4:ad:67:f5:01:f1:8a:f9:
11:da:68:95:5a:bb:67:be:59:a8:5f:0b:b6:e3:bd:53:63:a1:
cb:42:7f:97:d7:3b:09:7c:9a:46:a3:e5:da:79:b9:35:48:1c:
24:25:8c:34:6d:78:55:90:80:8d:2c:9c:1f:91:fc:db:77:bd:
93:16:fc:db:75:78:b7:e6:31:15:02:a7:1b:a4:93:b4:f2:97:
eb:13:77:a7:c4:fd:31:01:6a:4a:68:04:5a:68:c9:ec:69:0a:
1c:c4:cb:62:5b:d2:9d:4e:45:6b:38:42:0d:e2:c4:41:d3:eb:
bf:a9:ca:c6:26:72:1c:36:13:68:22:1c:a5:cd:5c:8d:28:6f:
f3:3b:da:2b:72:e2:ab:83:71:35:6c:0f:8b:a1:8c:98:9b:aa:
b5:61:f5:8b:09:b6:84:4e:fb:ff:df:7f:75:22:cc:b6:f9:b7:
1c:22:0d:42:48:98:69:d9:d1:b2:70:3c:d3:13:d8:13:fd:8c:
41:f6:e1:71:66:3d:02:4d:79:98:f5:89:18:b4:f5:55:0d:d8:
3f:0d:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:07:57 2026 by rpki-client