Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: 7qkMLwY5eBUGZSSlIqWYaSipI2J2SInUoFrq/j5/gAk=
Subject key identifier: 8A:27:C0:62:B1:03:63:BE:54:2E:3F:86:63:4F:C7:D1:CD:5E:05:51
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 019F9090E10100910BE4B8C9E245C80AEE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0B30
Signing time: Thu 23 Jul 2026 20:00:41 +0000
Manifest this update: Thu 23 Jul 2026 20:00:41 +0000
Manifest next update: Fri 24 Jul 2026 20:00:41 +0000
Files and hashes: 1: RfhufGynG5LNQHrEypFz6AFg1zs.asa (hash: JPJ0jIZIsWV2v8aF8+w3gEqGL1SiRdsEzuLyeRr8+uE=)
2: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
3: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: uyYD/eMyyAJCzDyivblMrxHK0hRsN0cEN+y3NkKGmSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:e1:01:00:91:0b:e4:b8:c9:e2:45:c8:0a:ee:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Jul 23 20:00:41 2026 GMT
Not After : Jul 24 20:00:41 2026 GMT
Subject: CN=8a27c062b10363be542e3f86634fc7d1cd5e0551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:7c:a0:71:f0:da:e2:cc:80:6f:0a:37:3f:
89:8e:84:b6:5b:b2:72:8c:cb:14:51:43:a5:c0:fa:
3e:b7:20:c0:6c:0f:72:03:f8:90:fb:50:9a:ef:6c:
b1:af:01:ec:e7:02:50:1f:e7:89:53:07:35:61:43:
c5:3a:d2:f3:4b:57:16:e1:31:9c:45:ae:82:13:d1:
25:03:f3:fc:15:29:60:60:0a:fd:08:a3:bd:95:aa:
80:84:5b:9c:44:62:41:f1:c6:5e:d2:5e:a4:17:b0:
e1:de:23:18:b3:33:98:40:84:f2:c0:bb:30:04:29:
25:9c:01:9e:30:d6:66:83:8c:a8:d9:5e:b8:b8:dd:
22:51:ba:b6:0c:cd:67:ad:3b:6e:1f:77:b0:79:d8:
ec:d8:d5:2c:d0:34:71:3e:22:1a:76:36:9e:40:49:
59:81:20:0a:50:2a:fd:e3:25:6d:08:24:5e:4e:0c:
37:ea:98:c8:5b:55:0a:1e:48:81:cc:d3:9a:a3:9b:
9a:4f:b6:e0:44:12:ea:fb:39:75:c7:a4:27:31:18:
2c:a5:c1:b7:aa:24:2c:04:cf:f8:cc:44:14:0d:74:
e3:95:15:94:83:9d:38:0a:99:26:94:00:49:23:68:
e2:d0:82:c7:d4:5e:9e:2e:ed:0c:a9:ba:88:ab:23:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:C0:62:B1:03:63:BE:54:2E:3F:86:63:4F:C7:D1:CD:5E:05:51
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:90:93:27:22:2f:7b:d8:0c:90:3b:18:b5:f5:48:81:bf:59:
1b:63:bc:45:df:68:42:46:0a:0f:d3:04:ba:91:86:78:ee:2a:
e7:c1:8c:89:86:fd:46:1a:50:59:48:f3:7c:4f:80:41:69:09:
af:37:21:ba:a7:b6:a0:5d:49:d9:7e:c1:da:db:0b:dd:26:7c:
ba:2e:e1:94:ca:ac:5a:15:73:3b:ce:4a:05:89:38:26:14:82:
c4:a5:88:94:d9:ff:fe:31:aa:96:90:d1:25:90:a0:fb:d4:5d:
48:e2:b5:a8:db:61:b7:41:04:a9:18:37:1f:5f:32:6b:06:02:
fd:32:e1:be:bc:1e:cf:83:ad:ed:fc:47:32:4d:aa:f4:14:77:
c0:d4:20:d9:db:03:ad:58:92:1b:16:ba:f2:c9:c7:f8:a2:3d:
a9:0b:b4:eb:ef:3e:2e:d7:79:24:7c:6e:0d:e7:97:6d:00:6b:
f9:65:b3:36:98:4e:5b:fe:ff:03:b7:84:9b:19:95:e4:7d:e4:
7b:70:25:eb:c0:5b:9d:e3:2e:b1:70:77:cf:46:94:18:66:40:
84:1d:b9:55:fb:8b:9f:a1:59:d4:aa:2f:82:f9:75:53:8e:03:
49:30:e0:71:bb:a6:18:5f:7b:80:41:ac:82:82:b7:94:cf:1f:
ba:5b:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:03 2026 by rpki-client