Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: +5C4BKvFxyykWp+3XcPPs+byy1IjlT7Tn/TFSBmpqb8=
Subject key identifier: E7:EC:C8:73:8A:6C:FD:BE:1B:56:4B:4D:B5:DD:D6:FE:10:AA:34:42
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019F92B60D439D81B69DCBE751D8299A9C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0CA1
Signing time: Fri 24 Jul 2026 06:00:32 +0000
Manifest this update: Fri 24 Jul 2026 06:00:32 +0000
Manifest next update: Sat 25 Jul 2026 06:00:32 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: JWkN/S2RYj8SLGmJgPVlmqSQxj5d1UzlnP32zqKmfnQ=)
2: NVWKSQ6XeTs9oBM9mH9GDWql-4U.roa (hash: 9ZIbG9al1rdRHLFehJy3ARx4hRFjcesPVT2nGXw1rKM=)
3: gr0cmRtDnRg8WRBE5wgHk-NVvyE.roa (hash: DWSi/wfOMBMvBppFfmkuW+E4394pYqKUQ4bx3UceSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:0d:43:9d:81:b6:9d:cb:e7:51:d8:29:9a:9c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Jul 24 06:00:32 2026 GMT
Not After : Jul 25 06:00:32 2026 GMT
Subject: CN=e7ecc8738a6cfdbe1b564b4db5ddd6fe10aa3442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:77:bf:a9:38:1f:90:e8:ee:49:ec:e0:5d:
e6:98:d0:99:e2:be:7a:fd:87:4b:50:c4:c8:d1:15:
31:ef:a2:5f:e2:d4:9b:6e:9c:f6:bf:32:9b:87:09:
31:c9:4a:c0:9c:02:c1:c0:45:68:54:54:e6:66:ff:
aa:85:c9:13:2e:dc:e2:0f:70:f4:15:cc:76:02:e9:
16:f9:84:06:df:a6:e8:0a:a4:2e:5a:5b:49:42:56:
a1:43:25:97:b9:cb:91:44:c1:90:f7:0c:27:ce:5a:
4a:f2:12:d2:99:9b:7c:79:79:7f:6d:42:7b:eb:86:
10:47:c4:27:99:bf:a2:12:a7:a4:27:b2:92:1a:13:
0e:b6:8f:8b:ba:16:58:8b:34:e4:47:77:69:ad:4a:
1c:58:fc:41:65:89:c8:f0:24:2c:b4:d9:42:7c:01:
10:67:53:82:14:a1:4e:82:40:8b:b2:9a:b1:3c:7e:
5d:87:73:d0:88:15:03:17:72:47:cc:b1:a9:8d:ec:
0e:69:62:4a:bb:3e:92:46:92:81:39:b9:da:de:f8:
66:c2:e7:0b:c2:3d:36:48:89:dd:5d:0c:12:37:7e:
31:d1:02:78:c0:c0:ce:30:c5:8d:9e:60:bc:e3:22:
7b:ba:a3:46:d4:82:d7:ea:f1:99:76:d2:fd:90:83:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:C8:73:8A:6C:FD:BE:1B:56:4B:4D:B5:DD:D6:FE:10:AA:34:42
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:66:5a:8a:7f:d1:b6:95:59:46:43:99:3a:3e:96:4a:21:3c:
27:1d:19:f8:88:57:7a:77:b3:b8:4a:b9:7d:47:e8:e9:47:59:
b8:7c:30:20:ab:7e:cd:28:3e:71:39:a4:3b:e0:05:fb:f0:89:
de:12:29:a7:91:4f:75:a1:f3:bc:b3:3f:5c:61:fc:f6:dd:26:
16:bc:6b:87:cb:0f:15:f2:e2:5a:4b:45:bb:d4:00:ea:d7:7a:
5e:5d:76:a0:ba:c2:a3:de:6c:33:2c:b5:2d:21:2a:44:53:64:
62:14:34:18:05:a1:ec:f5:1f:55:82:50:97:5c:74:ff:65:99:
6f:d2:61:b1:68:65:d3:5b:bd:c1:cc:12:d6:18:3e:04:91:f3:
1a:e4:ec:f5:3d:45:31:ed:66:17:e4:c0:ae:e5:6f:5a:9c:18:
d8:78:1c:2e:a9:a8:e7:c4:44:e4:ab:1e:51:3b:25:9b:78:31:
5a:bb:77:34:d7:b7:bf:38:cf:85:30:6d:49:a1:af:e7:fe:51:
52:0d:26:8f:af:48:e8:86:04:b5:e0:56:6c:a0:59:2a:81:bc:
77:5b:44:9b:10:78:3b:54:9d:e3:ba:bf:e7:ab:c8:ab:07:d8:
24:a4:0a:03:3e:26:05:72:b7:16:02:5f:62:0d:52:9b:6a:a7:
45:db:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:10:54 2026 by rpki-client