Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: eN4g2YakrBBPDBb5/GEGRskh8YqicO3P/r/fMpfg+J8=
Subject key identifier: 1C:6B:9B:0C:A1:33:E7:20:25:8D:E9:F0:E7:0C:9C:17:FE:CE:60:6F
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019D28BBD355FF0A10532AF017DB94305BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0B61
Signing time: Thu 26 Mar 2026 06:01:31 +0000
Manifest this update: Thu 26 Mar 2026 06:01:31 +0000
Manifest next update: Fri 27 Mar 2026 06:01:31 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: rdSPcXCLYwiX2Mc/Pd5Vfe//TmU7WVo+Vhj0ucrCUik=)
2: NVWKSQ6XeTs9oBM9mH9GDWql-4U.roa (hash: 9ZIbG9al1rdRHLFehJy3ARx4hRFjcesPVT2nGXw1rKM=)
3: gr0cmRtDnRg8WRBE5wgHk-NVvyE.roa (hash: DWSi/wfOMBMvBppFfmkuW+E4394pYqKUQ4bx3UceSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d3:55:ff:0a:10:53:2a:f0:17:db:94:30:5b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Mar 26 06:01:31 2026 GMT
Not After : Mar 27 06:01:31 2026 GMT
Subject: CN=1c6b9b0ca133e720258de9f0e70c9c17fece606f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:26:97:07:65:14:4e:0c:23:7f:dc:ef:03:
65:06:3d:76:64:76:4b:7e:7b:c3:bb:33:10:ca:e5:
e7:c3:19:51:30:67:82:2e:b0:cf:00:3c:23:9e:a5:
de:a0:7f:c1:40:7c:cd:7d:32:12:70:0e:02:95:7a:
e2:22:c7:f4:bf:99:73:16:f4:48:8b:49:24:d6:5d:
21:67:75:3e:8a:d2:db:f0:11:65:55:f2:43:2b:9e:
82:d1:10:99:bc:e9:43:18:6b:89:d2:7a:95:04:0f:
c7:d8:af:5b:65:20:d5:5b:69:86:f8:54:6f:b2:77:
dc:b7:90:90:3e:75:69:36:dc:88:b6:fa:63:56:4b:
a8:2d:ce:8f:94:47:ed:cc:f9:4e:0d:fe:15:81:9c:
a3:ca:6e:d7:14:19:90:eb:9d:88:77:56:44:34:41:
f2:39:c9:7d:35:bd:9e:8a:db:7f:9f:43:68:c8:53:
47:55:b0:f8:a4:2c:e6:3d:ae:8e:bb:be:54:00:85:
85:85:8a:c3:da:25:c4:91:24:76:bc:cc:57:01:d3:
7c:67:9f:c5:88:1f:80:11:d7:05:c1:54:d5:fa:81:
c2:7d:56:aa:c6:3c:e1:45:15:ce:39:a1:12:b8:22:
59:74:10:2f:a4:00:93:b4:4e:19:eb:10:84:f4:d2:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6B:9B:0C:A1:33:E7:20:25:8D:E9:F0:E7:0C:9C:17:FE:CE:60:6F
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e5:54:cb:8d:c7:7a:55:51:b5:d0:23:73:51:fe:f7:41:b7:
2f:a7:f2:59:41:0e:d4:ab:35:c5:38:15:92:26:9a:f6:1a:23:
4d:0d:45:9a:22:f7:b5:f8:99:56:cf:53:05:b1:32:d9:64:29:
46:7d:8b:6b:7d:e0:28:97:67:c6:45:eb:5d:1c:40:31:70:ae:
92:63:45:a2:55:b3:a2:a9:bd:21:da:6e:b8:48:88:49:c4:00:
cb:67:52:32:f3:64:07:49:e3:1a:c7:52:bc:7f:18:ce:dc:3f:
f3:80:89:7e:8e:6c:90:01:f3:bf:25:89:dc:f3:6d:cb:c7:cb:
81:4b:33:eb:e5:c2:32:27:fa:31:f5:54:43:57:c3:8d:98:8b:
08:54:3e:c3:af:b1:22:94:72:34:b6:32:f6:eb:7a:fa:44:9b:
aa:cc:e1:cd:69:ff:e9:a1:a7:cc:b2:52:8f:23:50:7f:7b:51:
2f:56:c6:62:4a:45:6a:dc:65:8e:8b:e2:bc:13:8b:19:da:2f:
47:f9:10:1a:8f:b4:09:ea:f3:3b:c7:65:19:20:e9:fd:d5:84:
88:f5:2a:ac:bf:0f:dc:9f:d3:24:c8:02:20:fb:e5:45:83:97:
eb:60:34:d3:fe:fc:01:5d:91:63:9a:9d:00:bd:d0:d0:04:97:
20:65:83:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou9NV/woQUyrwF9uUMFvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzFmYWMyNGUzMGQ5MjU4ZWIyZWY3MmYzMWVkOWJkNjA4
ZmUwZGUwHhcNMjYwMzI2MDYwMTMxWhcNMjYwMzI3MDYwMTMxWjAzMTEwLwYDVQQD
EygxYzZiOWIwY2ExMzNlNzIwMjU4ZGU5ZjBlNzBjOWMxN2ZlY2U2MDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuugmlwdlFE4MI3/c7wNlBj12ZHZL
fnvDuzMQyuXnwxlRMGeCLrDPADwjnqXeoH/BQHzNfTIScA4ClXriIsf0v5lzFvRI
i0kk1l0hZ3U+itLb8BFlVfJDK56C0RCZvOlDGGuJ0nqVBA/H2K9bZSDVW2mG+FRv
snfct5CQPnVpNtyItvpjVkuoLc6PlEftzPlODf4VgZyjym7XFBmQ652Id1ZENEHy
Ocl9Nb2eitt/n0NoyFNHVbD4pCzmPa6Ou75UAIWFhYrD2iXEkSR2vMxXAdN8Z5/F
iB+AEdcFwVTV+oHCfVaqxjzhRRXOOaESuCJZdBAvpACTtE4Z6xCE9NKc5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxrmwyhM+cgJY3p8OcMnBf+zmBvMB8GA1UdIwQY
MBaAFAbB+sJOMNkljrLvcvMe2b1gj+DeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kZjBlNGItOGY2Ny00Mjk1LTllNDIt
MzQ2YTNjY2U1ZjA5LzEvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kZjBlNGItOGY2Ny00Mjk1LTllNDItMzQ2YTNjY2U1ZjA5
LzEvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+VUy43H
elVRtdAjc1H+90G3L6fyWUEO1Ks1xTgVkiaa9hojTQ1FmiL3tfiZVs9TBbEy2WQp
Rn2La33gKJdnxkXrXRxAMXCukmNFolWzoqm9IdpuuEiIScQAy2dSMvNkB0njGsdS
vH8Yztw/84CJfo5skAHzvyWJ3PNty8fLgUsz6+XCMif6MfVUQ1fDjZiLCFQ+w6+x
IpRyNLYy9ut6+kSbqszhzWn/6aGnzLJSjyNQf3tRL1bGYkpFatxljovivBOLGdov
R/kQGo+0CerzO8dlGSDp/dWEiPUqrL8P3J/TJMgCIPvlRYOX62A00/78AV2RY5qd
AL3Q0ASXIGWD1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:05 2026 by rpki-client