Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: iQzZYlI6fmuPmSQXSqA0yjoGqKgL6vPdIaJzwlNvNZs=
Subject key identifier: 9A:32:B3:FB:76:94:9F:72:05:BD:71:B7:A0:28:7D:C0:71:A0:44:17
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 019E1D229F0F21EDE2D37954A22C5DF0D44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0A6F
Signing time: Tue 12 May 2026 17:01:08 +0000
Manifest this update: Tue 12 May 2026 17:01:08 +0000
Manifest next update: Wed 13 May 2026 17:01:08 +0000
Files and hashes: 1: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: tETMSgw5u4dh68N2necLKgy/liw4BUTRdklfF5Rj9Vg=)
3: wRsM-J-_RdemGYQhUq06PflenDM.asa (hash: pjI+PT7nOc9seCJaC2jOV5Z3Ysbs3FSmgOLK6vNi+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:9f:0f:21:ed:e2:d3:79:54:a2:2c:5d:f0:d4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: May 12 17:01:08 2026 GMT
Not After : May 13 17:01:08 2026 GMT
Subject: CN=9a32b3fb76949f7205bd71b7a0287dc071a04417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:78:c6:05:b5:4d:76:fb:89:51:7a:23:0d:
d2:9b:e9:a1:ef:ed:e4:9f:94:a3:08:3e:c6:85:69:
b3:a2:78:8a:43:ec:44:8f:ef:32:14:37:97:c0:97:
4f:ec:ec:5b:8f:77:13:63:03:33:ce:13:eb:7a:27:
c3:23:fd:d4:86:b7:1b:bb:94:9a:a1:ce:22:b8:1d:
33:d3:74:cc:e2:f7:5f:e9:12:5c:cc:15:a8:b6:34:
b3:21:76:44:76:13:5d:71:e9:1f:cf:e2:3a:cc:5a:
2f:d3:8b:fa:ca:a4:bd:05:25:fe:2e:d2:78:e7:8e:
98:e7:3e:f7:a4:ea:6f:8f:c2:96:b2:fb:b5:d9:74:
c0:f0:b0:ee:6e:8f:e6:98:a5:78:86:b6:0c:89:52:
9b:b5:7a:2e:10:30:2d:d1:4e:f1:b3:83:1e:8e:f3:
80:42:9d:91:5f:02:52:af:f3:f2:a6:2b:0e:6a:7e:
d4:c2:a3:54:79:66:45:38:56:a8:3c:74:07:cd:f9:
58:74:0d:35:ff:94:d4:6f:68:af:38:2c:e5:d0:74:
5e:78:00:9b:e2:81:87:f1:67:f1:07:03:88:d5:66:
02:aa:f1:2f:e8:00:a5:8f:76:c1:eb:f9:8b:83:17:
0a:e7:42:54:46:45:71:42:6f:a0:3c:24:9f:35:17:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:B3:FB:76:94:9F:72:05:BD:71:B7:A0:28:7D:C0:71:A0:44:17
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0f:d2:e8:a2:ff:35:61:d0:09:b5:37:4a:f5:dd:72:01:cb:
45:1b:02:7b:96:27:00:b4:65:d5:19:34:7f:33:38:e8:b7:38:
f2:f3:29:03:d4:2b:78:6a:dd:0c:2d:62:7c:e8:11:63:c1:05:
e2:2d:62:bb:71:43:76:32:ba:a7:6e:d5:a3:18:99:ff:f0:29:
8b:63:88:af:0f:d4:78:eb:1f:41:81:bc:35:71:25:f3:eb:e0:
56:a7:13:8b:55:73:d1:87:4a:80:01:27:e1:65:1d:12:29:94:
ed:b6:0e:7a:1f:59:90:ac:58:a2:dd:8b:f7:3f:1c:17:dc:5a:
9f:9e:99:e4:87:ed:89:f2:c0:72:cb:d8:b4:14:7b:ca:8a:6e:
3a:eb:26:c8:f4:61:4c:27:7d:c5:d4:82:0c:1a:3c:60:7c:ef:
eb:23:c2:88:c5:c6:f9:b9:14:7c:fe:4c:0f:68:76:65:36:86:
34:4e:de:4c:e8:3a:e3:dc:cf:f5:31:ec:0e:e8:66:79:37:5e:
09:44:4e:f9:ae:c5:06:3a:1a:20:b0:0d:25:51:e7:5b:51:ca:
a8:d0:37:f6:26:87:b8:53:94:24:92:b1:aa:f1:ef:b8:de:64:
47:03:c7:7b:c3:4c:cd:99:04:3b:a0:5b:f3:1d:c8:04:e9:31:
ff:db:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:05 2026 by rpki-client