Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: +zFuPtkDJKAqS0ezjrpXdf3jFzVUaHFOMm163lTXYnI=
Subject key identifier: 9E:0D:5C:A0:49:CE:AA:3E:6E:86:63:8F:97:04:97:50:78:22:93:8C
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 01A0D5021388D433812AF517DADB6E7E2AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0BD8
Signing time: Thu 24 Sep 2026 20:01:18 +0000
Manifest this update: Thu 24 Sep 2026 20:01:18 +0000
Manifest next update: Fri 25 Sep 2026 20:01:18 +0000
Files and hashes: 1: RfhufGynG5LNQHrEypFz6AFg1zs.asa (hash: JPJ0jIZIsWV2v8aF8+w3gEqGL1SiRdsEzuLyeRr8+uE=)
2: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=)
3: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: lYUVVodf2jHMIqI0di61k65ItRC+OWQrFiV/yDl9tpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:13:88:d4:33:81:2a:f5:17:da:db:6e:7e:2a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Sep 24 20:01:18 2026 GMT
Not After : Sep 25 20:01:18 2026 GMT
Subject: CN=9e0d5ca049ceaa3e6e86638f970497507822938c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:25:b4:13:f6:cc:c4:6f:d5:d0:03:b9:af:
d1:51:df:46:77:a1:d3:a1:cd:d9:8d:4e:39:9c:0b:
e1:b5:53:7a:87:a2:89:a6:3c:8d:cc:c7:7d:c2:70:
4c:af:91:f0:6f:83:34:2e:45:77:f2:b6:b8:d9:66:
7d:9b:26:3d:3a:86:10:ab:9b:2a:4e:ef:1d:d6:cc:
22:ef:07:8d:a3:20:af:d8:d4:e5:e0:db:dc:12:f6:
78:64:1e:83:1b:5a:f9:bf:de:45:16:34:75:c6:da:
d4:01:b5:2e:81:df:42:d6:d8:a4:1a:1a:73:6e:72:
fb:fc:7a:06:ab:eb:c1:fb:8a:da:39:17:2b:a9:d3:
87:cc:2b:36:e1:0a:0d:b7:87:f7:40:7c:a6:dc:e0:
a8:3d:f3:a1:7f:63:ab:ab:35:2d:2c:c8:d0:d9:47:
d8:8f:0d:76:13:3a:9c:6a:71:8f:c7:65:d5:f1:6f:
ed:10:e4:ad:58:96:1c:5e:90:f0:46:49:96:65:42:
9c:4d:95:95:92:9b:d6:2b:9b:d9:47:2f:16:af:41:
0f:81:40:74:af:08:7e:41:27:2d:f3:81:f2:08:88:
2f:03:cf:a5:27:da:42:95:ec:da:27:2e:01:a4:7c:
4d:3e:6b:b5:5e:d4:de:b1:7a:b5:66:5f:10:7b:45:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0D:5C:A0:49:CE:AA:3E:6E:86:63:8F:97:04:97:50:78:22:93:8C
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c9:da:29:ce:ac:61:7d:44:da:fd:49:03:32:0d:34:48:e8:
ce:8e:c9:8f:a2:b0:97:f0:c2:11:61:cd:24:94:d4:68:d4:ef:
53:d0:f1:17:47:87:d3:4a:89:66:2e:a4:b5:0a:96:3f:78:33:
c2:59:a2:35:1b:ad:ca:00:03:66:7e:ae:f0:86:04:d6:c9:aa:
d1:f8:ab:9b:a6:d4:ad:ba:f1:47:91:19:71:a1:ef:90:75:f5:
7c:29:ea:5d:e4:9f:71:64:54:5c:d3:97:54:e1:3f:f7:ff:8d:
35:98:53:ef:10:b2:41:ae:be:1d:f4:3c:2d:e2:2b:85:ee:7d:
a6:3e:22:a9:2f:5b:9e:e0:4b:13:cc:a7:f4:f6:dc:d2:6e:2f:
31:82:50:8c:ab:6b:d5:d4:c0:13:ac:56:3a:48:49:c7:d5:44:
57:61:36:ce:24:03:72:18:52:bb:84:91:60:95:b6:bc:35:7a:
70:60:04:a9:b5:7f:c9:cf:ec:60:d1:c1:ac:fa:86:80:e8:00:
e3:0e:f6:c6:53:d6:ae:e9:a1:6f:56:3c:69:ef:8a:7c:d3:c8:
ab:19:52:73:3e:ed:64:0f:d1:cc:81:b8:8a:f1:39:c0:5d:bc:
c4:40:6f:b9:7f:a2:cc:d7:88:57:70:f1:2d:49:4f:18:df:9d:
32:cf:87:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:52:27 2026 by rpki-client