Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: cEKTYGFybM2cThl+9nCl2il+JQezNHGR5NLC32ySNmk=
Subject key identifier: 06:65:E8:B8:AD:10:62:01:82:46:54:8F:1C:39:C8:79:B8:17:0E:7A
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 019D25F1C6EBDC954043FF837BA871EA752E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 09EF
Signing time: Wed 25 Mar 2026 17:01:35 +0000
Manifest this update: Wed 25 Mar 2026 17:01:35 +0000
Manifest next update: Thu 26 Mar 2026 17:01:35 +0000
Files and hashes: 1: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: OEZDFVJ8m4FBO8FKC+xlqcNCvSOqsuc3K5OEVIFdNIM=)
3: wRsM-J-_RdemGYQhUq06PflenDM.asa (hash: pjI+PT7nOc9seCJaC2jOV5Z3Ysbs3FSmgOLK6vNi+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c6:eb:dc:95:40:43:ff:83:7b:a8:71:ea:75:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Mar 25 17:01:35 2026 GMT
Not After : Mar 26 17:01:35 2026 GMT
Subject: CN=0665e8b8ad1062018246548f1c39c879b8170e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:6e:10:a3:35:98:89:a3:00:3e:12:d3:83:
43:ce:90:42:14:07:b0:c3:31:1c:de:82:b9:6c:e0:
e8:26:87:67:48:50:aa:79:b8:d1:b5:e8:0e:0b:c7:
62:e5:f7:53:06:02:55:44:a0:fb:d7:2d:fd:b3:8d:
75:07:dd:55:c9:b3:e6:9a:5b:90:34:95:42:ba:63:
5b:e2:2f:ce:79:a2:03:87:b1:69:2b:e9:d0:a5:8f:
56:3d:70:13:4b:c2:63:77:70:54:26:79:dc:10:7f:
45:86:b8:61:98:b2:8e:e2:46:b2:7a:0d:1b:1e:95:
fe:99:69:87:09:85:ea:4e:67:01:3a:66:6d:d3:fe:
de:54:aa:7d:49:5f:c7:f6:23:5b:6e:3a:8a:09:d0:
9c:a5:93:5b:73:e8:54:99:ff:40:c2:2f:c0:bc:0c:
92:f0:b1:b5:7a:d1:c7:78:be:c5:c8:2e:06:4d:e6:
18:7c:89:f8:f6:e9:35:18:df:31:25:6b:18:e8:85:
0b:60:b5:ea:a5:87:a9:d3:d9:4a:b9:8b:7f:c7:d4:
1d:51:6f:d5:0f:bb:84:fd:04:8f:d4:2b:11:ac:c2:
a9:5e:67:19:15:b8:3d:34:98:13:c0:04:3a:04:b0:
32:2e:fa:d6:b2:49:8d:15:79:69:ab:ed:70:f8:4e:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:65:E8:B8:AD:10:62:01:82:46:54:8F:1C:39:C8:79:B8:17:0E:7A
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0a:14:f7:02:dc:6f:2a:7c:56:bc:2a:be:2c:33:11:64:83:
61:d0:f5:b3:74:30:d7:5e:56:94:21:bc:4b:d4:1d:9b:7b:4f:
97:b8:e7:06:a8:5b:e4:d3:db:1b:f2:89:74:22:5e:67:b5:0c:
63:b6:09:44:8b:d4:30:b2:88:f4:fd:20:5e:55:66:a2:25:eb:
cd:55:d2:ec:de:3f:ad:f7:15:2c:5c:b3:4b:80:e8:a1:85:a5:
52:77:36:f2:3a:67:b8:2f:84:2c:a6:24:fb:cd:c6:e2:5f:88:
5d:dc:a5:ed:7b:29:0e:df:44:07:9a:7c:54:a4:1f:02:49:b5:
1e:c8:05:f7:72:4c:e3:a6:0f:d3:7f:28:18:b1:b9:52:b7:3a:
9c:6a:2b:4d:b4:88:d3:90:f6:be:33:1d:f9:04:44:cc:c4:52:
5d:fd:da:04:c0:61:f9:2f:d8:85:b5:6a:36:71:f1:ea:58:12:
08:92:63:a7:fb:a8:eb:ed:22:c4:49:75:29:32:22:4c:d2:2a:
0d:35:7d:31:5c:a0:52:51:59:88:f7:65:cc:be:42:04:84:eb:
be:6b:e7:fc:ce:43:6e:78:03:d6:ef:52:46:3e:ca:15:fa:58:
5e:47:58:ad:6d:98:6c:d4:7c:20:07:97:f9:f1:39:7d:a9:01:
15:a6:35:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8cbr3JVAQ/+De6hx6nUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx
YjNlMjYwHhcNMjYwMzI1MTcwMTM1WhcNMjYwMzI2MTcwMTM1WjAzMTEwLwYDVQQD
EygwNjY1ZThiOGFkMTA2MjAxODI0NjU0OGYxYzM5Yzg3OWI4MTcwZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0puEKM1mImjAD4S04NDzpBCFAew
wzEc3oK5bODoJodnSFCqebjRtegOC8di5fdTBgJVRKD71y39s411B91VybPmmluQ
NJVCumNb4i/OeaIDh7FpK+nQpY9WPXATS8Jjd3BUJnncEH9FhrhhmLKO4kayeg0b
HpX+mWmHCYXqTmcBOmZt0/7eVKp9SV/H9iNbbjqKCdCcpZNbc+hUmf9Awi/AvAyS
8LG1etHHeL7FyC4GTeYYfIn49uk1GN8xJWsY6IULYLXqpYep09lKuYt/x9QdUW/V
D7uE/QSP1CsRrMKpXmcZFbg9NJgTwAQ6BLAyLvrWskmNFXlpq+1w+E6dPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZl6LitEGIBgkZUjxw5yHm4Fw56MB8GA1UdIwQY
MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt
N2E3NDczYzU0NWIxLzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx
LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQoU9wLc
byp8VrwqviwzEWSDYdD1s3Qw115WlCG8S9Qdm3tPl7jnBqhb5NPbG/KJdCJeZ7UM
Y7YJRIvUMLKI9P0gXlVmoiXrzVXS7N4/rfcVLFyzS4DooYWlUnc28jpnuC+ELKYk
+83G4l+IXdyl7XspDt9EB5p8VKQfAkm1HsgF93JM46YP038oGLG5Urc6nGorTbSI
05D2vjMd+QREzMRSXf3aBMBh+S/YhbVqNnHx6lgSCJJjp/uo6+0ixEl1KTIiTNIq
DTV9MVygUlFZiPdlzL5CBITrvmvn/M5DbngD1u9SRj7KFfpYXkdYrW2YbNR8IAeX
+fE5fakBFaY1WQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:16:24 2026 by rpki-client