Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: uL2m9r/SAnhg1wfnsykgNLa8TJKh/XQy+iC4IS6+aQg=
Subject key identifier: 76:5E:0A:BA:9D:8E:60:48:D4:0B:75:49:28:9D:4A:3C:8B:F0:94:B7
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 019F93924E7C661CEBA2F3C4674C79D3E0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 10:01:06 +0000
Manifest this update: Fri 24 Jul 2026 10:01:06 +0000
Manifest next update: Sat 25 Jul 2026 10:01:06 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: 10sIlXIKkUePIehG+Px9wJRwtJvmTm5mH5h4e4b+74w=)
2: hhSORRB_cbi8J7UPYVa8deItbjI.roa (hash: tbnenU0D5ezQqQe74bKynFZLzheD+pCDrBBIC6BR1ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:4e:7c:66:1c:eb:a2:f3:c4:67:4c:79:d3:e0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Jul 24 10:01:06 2026 GMT
Not After : Jul 25 10:01:06 2026 GMT
Subject: CN=765e0aba9d8e6048d40b7549289d4a3c8bf094b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:20:e7:b3:df:80:c5:8d:7c:b8:20:87:6d:
5a:93:33:1e:b9:22:73:72:b5:10:8b:8c:ee:1b:52:
c5:e7:16:92:57:df:f3:29:55:d5:09:f5:7d:6c:55:
f9:f0:a8:86:c4:cb:7f:fb:d8:1d:18:c1:ce:ec:22:
fd:c9:c5:92:f6:f6:9c:6e:ef:db:c0:cd:8d:79:39:
7c:b6:57:57:e0:f3:9b:5b:b0:8d:bd:7c:62:25:b5:
26:f6:84:85:59:39:ea:ba:7b:5e:12:ec:32:98:07:
16:d0:04:f0:83:19:5c:3a:e1:d8:e6:23:5e:73:af:
b6:e7:86:ed:dd:d7:9c:c0:84:dc:88:cb:23:f8:65:
1b:39:f8:6a:01:c4:22:32:4f:97:c3:46:7b:24:5f:
e0:e8:80:1b:8f:f7:e0:37:0e:d2:40:44:4b:a9:e4:
0b:95:5f:d2:38:c3:42:5c:27:ac:c6:44:b2:5e:a7:
10:ea:04:9e:08:b8:9c:90:72:5c:41:c4:3e:99:e5:
d7:1e:70:39:3e:cf:65:7a:5e:ec:87:4c:68:2f:40:
8e:a5:23:79:a2:02:d8:0b:6d:04:b7:18:3c:cb:b1:
6f:65:07:2c:cc:63:0c:3c:98:09:f6:66:cc:05:4e:
6b:c9:5b:aa:1d:e6:b6:9f:5b:2e:ea:ba:05:cc:d8:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:0A:BA:9D:8E:60:48:D4:0B:75:49:28:9D:4A:3C:8B:F0:94:B7
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d7:bb:d4:53:b5:7b:cb:b4:7a:e8:d4:53:04:77:dc:63:16:
c8:7f:2f:b2:36:f9:81:64:cf:35:15:ba:0d:8d:c9:64:7f:a4:
04:eb:46:49:c8:d9:10:ae:4b:32:df:02:42:72:5e:f1:8a:c6:
b4:10:a8:30:cc:67:e2:89:21:8c:84:0a:cc:8f:84:4b:55:c8:
1e:bb:36:4f:64:ab:fd:a0:1b:8d:20:09:94:5c:9c:9a:bd:24:
6d:be:8a:36:75:66:6b:cc:c2:60:ec:a8:0f:68:de:50:20:90:
59:f4:65:e7:9e:22:8e:3f:71:da:ff:5f:b1:f0:91:a5:ea:d9:
6d:08:30:7d:39:75:a9:a8:b9:88:d7:af:ea:68:03:60:98:62:
ab:87:ff:96:ca:b5:c3:1c:64:5b:e3:5a:78:73:9d:35:46:99:
16:0a:30:9f:29:51:08:6a:f9:4a:c8:c7:2e:d8:a9:c9:9b:b0:
9c:41:d0:7a:89:03:23:73:4d:db:c0:9f:41:38:c2:1d:17:88:
b3:1f:bc:ce:c8:15:8c:8d:6b:5a:73:5e:ae:ff:56:d7:e9:69:
8a:51:d6:34:0d:61:96:72:51:5e:05:55:21:20:11:6a:f3:19:
20:f2:2e:78:54:ac:af:ff:3c:6a:c1:0a:9f:16:a8:99:f1:99:
06:bc:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:45 2026 by rpki-client