Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: 4+ohqRYkhCRCV7ZbshH9Kz9nOm4jJmWrgHrWyk6MCWs=
Subject key identifier: C8:58:69:AD:92:2F:4C:54:55:72:C8:CD:29:21:56:09:CB:0D:AE:58
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 01A0CC6C3A356EEEED66C3D9672E5FC69C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 04:00:39 +0000
Manifest this update: Wed 23 Sep 2026 04:00:39 +0000
Manifest next update: Thu 24 Sep 2026 04:00:39 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: FyD7ZLJL2xeDuU+vULF01tdxWIK/K/6d6gl735L9Pqc=)
2: hhSORRB_cbi8J7UPYVa8deItbjI.roa (hash: tbnenU0D5ezQqQe74bKynFZLzheD+pCDrBBIC6BR1ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:3a:35:6e:ee:ed:66:c3:d9:67:2e:5f:c6:9c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Sep 23 04:00:39 2026 GMT
Not After : Sep 24 04:00:39 2026 GMT
Subject: CN=c85869ad922f4c545572c8cd29215609cb0dae58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:09:d5:7c:0d:c9:4b:46:a9:3d:ca:76:95:
e6:1c:70:6c:72:70:f6:1e:16:47:ab:ac:60:d7:59:
0a:52:9b:fa:8c:fa:f3:f0:89:66:86:fe:60:75:b3:
dc:c4:d5:9e:b1:e2:3d:92:f6:e2:a3:c5:6d:e7:4c:
33:45:df:83:f4:e5:15:41:cb:91:61:69:57:57:34:
c4:0a:e5:82:5d:93:80:6a:a2:fa:1a:ae:5b:0d:40:
7d:d0:a6:21:52:d8:1a:4b:b1:88:68:27:e3:14:d5:
0f:5a:c3:05:92:3f:5f:70:ca:68:8d:a9:65:07:4d:
bd:a3:01:7a:8b:e4:49:6a:66:92:26:b6:d1:c8:3d:
7b:ad:7f:4b:ec:60:a8:ce:8c:1c:52:4e:31:06:68:
c1:5f:51:4f:da:c7:78:3e:a2:82:db:70:7c:fd:27:
a0:7c:1b:81:73:6e:f7:a1:c2:dd:92:db:4a:79:75:
78:70:92:01:91:ae:3c:76:7a:bd:da:33:e8:69:93:
5f:84:4b:68:d9:ec:a5:6a:02:ad:f9:6e:1d:74:6e:
94:cb:ab:07:4f:c0:40:61:85:28:d6:cf:7f:bd:31:
9f:52:21:49:9f:90:07:a0:15:e1:1e:9a:8d:32:52:
9f:ad:f7:fc:01:f3:70:5a:c8:14:3c:8f:26:b8:19:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:58:69:AD:92:2F:4C:54:55:72:C8:CD:29:21:56:09:CB:0D:AE:58
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ba:37:52:a3:fe:c2:3b:2e:20:78:29:42:93:d4:c7:b5:ac:
f8:88:e9:01:27:ff:6f:c2:76:c0:43:fa:63:a5:ea:2e:67:39:
a8:ef:ca:22:36:2f:54:e5:f6:03:35:12:f9:2e:5c:54:d7:e6:
d9:d3:d8:33:7d:47:87:e8:1f:50:98:d8:9a:a6:24:dd:df:a9:
33:13:c1:39:05:03:95:6e:8a:c4:6f:8e:a1:8c:76:9c:99:88:
cf:43:88:9a:20:b3:03:27:25:68:8c:31:34:31:34:6a:15:83:
b0:79:07:b6:26:d1:2e:58:85:d2:9f:da:9e:db:2c:fd:fe:c2:
9f:86:56:d3:fd:7e:f7:98:e4:e9:1d:4d:cf:29:23:c0:ab:e3:
c6:48:a5:2a:f4:86:f4:77:44:34:4f:0e:74:e4:84:9b:40:f8:
57:af:eb:a0:7c:a1:0d:0b:28:70:55:8f:98:e2:d2:e8:7c:3d:
cc:2a:06:80:33:29:1a:6d:3a:42:17:8d:4d:14:a2:ec:72:78:
23:04:28:9b:50:90:0c:68:4b:88:e7:d0:a1:76:23:b8:35:43:
80:ed:37:34:f2:7a:3a:3d:b3:7a:01:3c:53:dd:82:80:c9:ef:
31:70:ac:97:d0:ed:26:b6:84:20:e3:69:cf:b5:ed:fd:7a:e1:
3e:bf:b2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:35:59 2026 by rpki-client