Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: JvhVi8XwIO+lldxRcFS4EMAOhr6kAFiQC/MihW04Pqg=
Subject key identifier: A0:C1:CF:1C:B3:45:2B:B9:3F:C7:3B:4C:B8:8B:3D:41:0E:BD:D1:00
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 01A0DCF302261F8AD04B8625A91A40AAF92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0D4C
Signing time: Sat 26 Sep 2026 09:01:48 +0000
Manifest this update: Sat 26 Sep 2026 09:01:48 +0000
Manifest next update: Sun 27 Sep 2026 09:01:48 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: I0nfyYtG5g+SOKG/DQoZ2/IsTw2RghRlaEHNJKflcG8=)
2: NVWKSQ6XeTs9oBM9mH9GDWql-4U.roa (hash: 9ZIbG9al1rdRHLFehJy3ARx4hRFjcesPVT2nGXw1rKM=)
3: gr0cmRtDnRg8WRBE5wgHk-NVvyE.roa (hash: DWSi/wfOMBMvBppFfmkuW+E4394pYqKUQ4bx3UceSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f3:02:26:1f:8a:d0:4b:86:25:a9:1a:40:aa:f9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Sep 26 09:01:48 2026 GMT
Not After : Sep 27 09:01:48 2026 GMT
Subject: CN=a0c1cf1cb3452bb93fc73b4cb88b3d410ebdd100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:13:b8:ed:ba:00:81:2a:6a:98:dd:7f:47:
07:0c:12:11:8b:29:48:60:db:ea:61:a9:61:c2:a5:
f6:09:b1:dd:58:2f:bc:cd:da:8b:f5:d6:3c:36:e6:
02:52:55:0f:0e:9b:38:c5:e4:c7:e9:58:10:b6:4f:
fd:72:c8:5a:21:8e:66:e2:b7:d1:61:db:9d:fa:06:
a3:1d:54:cb:e0:1e:1e:64:34:c2:00:09:af:2c:7e:
68:81:3e:81:4a:b2:74:9b:ac:37:48:14:4c:af:99:
5c:02:6a:f0:0e:ef:19:d0:c0:0e:06:ed:2a:db:14:
75:2a:0d:5f:3e:71:f4:39:8a:8a:3c:d1:04:62:78:
6b:74:54:ce:18:21:13:a2:c0:e4:2d:73:c4:f0:93:
30:52:6e:48:d3:8c:95:b4:ee:d7:d8:27:dd:0a:30:
45:14:ff:09:3f:c9:0b:bb:9b:92:46:14:e4:d6:fd:
05:ef:eb:0c:20:a5:6f:65:b7:15:98:b9:d6:32:91:
5d:6e:56:8b:1a:07:17:6b:0e:c7:3a:ad:31:c0:95:
3b:c3:88:60:9d:2c:ab:6f:a9:24:a1:9b:95:0c:36:
ac:f2:4b:2b:61:da:e2:41:94:68:96:cf:c2:56:82:
fb:3d:70:ba:a5:ae:4a:60:65:36:86:d8:60:92:06:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C1:CF:1C:B3:45:2B:B9:3F:C7:3B:4C:B8:8B:3D:41:0E:BD:D1:00
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3f:9e:ed:19:0b:52:59:2e:9e:40:65:6b:39:20:c8:ba:84:
5a:74:df:d1:f7:90:40:26:71:74:eb:69:59:9e:02:52:c4:92:
96:42:4c:d5:d3:51:98:3e:51:55:33:55:49:9f:7c:18:37:29:
e4:7a:ba:8c:3d:86:a4:f5:e8:21:30:ff:92:ac:2e:50:cf:13:
6c:a0:06:58:23:ae:42:c9:71:a0:b7:3c:a5:53:ce:35:c4:d2:
74:e1:44:e8:48:23:73:18:8a:ac:78:f3:45:e2:36:2a:8e:9e:
e9:b1:44:ee:5a:bb:38:fd:34:15:19:cb:3f:05:2d:bc:d6:25:
d9:e2:46:9b:96:4a:f2:6e:bc:9a:2b:38:0a:c3:4f:38:bc:db:
be:e6:2c:04:13:e4:21:5c:54:a9:1f:eb:0a:91:2b:6b:5f:39:
7d:e5:9e:f6:83:41:c5:b7:90:8e:c8:bb:4d:27:6d:7e:5b:84:
bd:41:5e:b1:cc:6f:f8:73:6e:8e:1f:39:9d:cc:5e:b3:33:34:
85:98:df:d1:84:69:84:40:7f:d3:dc:ff:12:3b:1f:b9:40:4a:
84:7b:83:d2:ff:30:18:cb:1f:63:a4:b5:8b:d1:95:a4:ba:ba:
df:5d:f4:fc:24:35:85:50:d8:bb:7f:81:95:14:d3:5f:3c:8f:
a3:b0:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:46:40 2026 by rpki-client