Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
File: bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json)
Hash identifier: /UieKBDJj/gRQjsv7+BwHjaeurY9rX3huidpo0F0RfE=
Subject key identifier: B0:76:4B:D5:50:9A:05:78:2B:54:5F:04:DA:D6:A0:67:52:6E:1F:0F
Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Certificate serial: 01A0DCBB61039F5D083C496BD0ECC47F4CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
Manifest number: 032B
Signing time: Sat 26 Sep 2026 08:01:02 +0000
Manifest this update: Sat 26 Sep 2026 08:01:02 +0000
Manifest next update: Sun 27 Sep 2026 08:01:02 +0000
Files and hashes: 1: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: +zPW6r7bLZOmTKqhhRM6KpTsoca8gJRvM24xYeOBeh8=)
2: kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa (hash: LGB+6qc6f2IFP3yURAz7uhoUKkg6z1TzwYrDl1Ny9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:61:03:9f:5d:08:3c:49:6b:d0:ec:c4:7f:4c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Validity
Not Before: Sep 26 08:01:02 2026 GMT
Not After : Sep 27 08:01:02 2026 GMT
Subject: CN=b0764bd5509a05782b545f04dad6a067526e1f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:3c:70:de:0f:74:94:eb:ed:8c:a7:66:81:
6e:9f:94:5e:3c:5c:55:99:c0:a6:f4:7d:3f:0a:fb:
79:f8:91:58:b7:f3:7f:2b:07:26:19:e8:71:3c:f3:
1c:99:dd:e3:f3:58:dd:bc:40:ed:f3:b8:74:37:40:
16:24:09:a8:40:7e:00:29:0d:94:50:8c:67:74:8a:
14:05:18:90:78:7b:38:58:17:52:76:6f:5f:b9:c9:
e5:06:dc:9a:c8:25:09:38:f5:5a:2e:0a:77:b7:00:
ef:39:d6:04:49:86:e3:c7:dd:e9:9f:74:96:41:41:
98:3a:32:a3:ac:e5:8c:49:06:4a:62:41:1a:ee:be:
fd:4e:ef:ae:f6:ff:d8:e7:2d:a3:a3:6a:4a:72:69:
69:48:bd:7e:0a:3b:b8:4b:64:a3:98:0c:7e:e8:38:
21:6d:60:5f:44:5d:fb:dc:9e:87:d5:13:88:b5:56:
f2:67:e5:97:4a:95:8c:fa:7b:8f:9f:72:bf:74:f7:
62:a1:0f:3d:b0:b1:e0:0b:01:a2:dc:28:f4:81:a3:
4e:48:61:b7:96:5e:b7:eb:48:8f:ca:9f:02:d5:09:
1f:03:85:e8:72:6e:58:ed:b6:2e:3b:18:57:36:6b:
6f:4e:05:1e:b6:87:9b:15:78:f0:02:39:67:03:29:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:76:4B:D5:50:9A:05:78:2B:54:5F:04:DA:D6:A0:67:52:6E:1F:0F
X509v3 Authority Key Identifier:
keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f3:a2:d7:df:d1:df:7a:4a:c4:8f:77:6b:9a:11:d6:fe:30:
ed:89:0d:f2:eb:a4:fb:09:74:86:6e:b2:fe:c7:d9:33:55:c0:
9d:6b:23:7e:0b:20:00:89:bc:75:40:92:5d:e6:6c:08:8c:56:
77:50:1a:9d:4e:c1:8b:34:99:7e:ef:ca:c0:4b:86:d3:fc:09:
29:f1:a9:c6:ea:f0:9b:4c:ba:c0:f3:dc:c8:e4:c1:45:4b:b4:
3d:e0:13:da:b5:a1:b8:15:95:61:7e:aa:bd:19:84:c4:bf:de:
fa:a8:6f:03:c6:c4:43:a7:71:40:c6:b8:5b:3c:95:86:8b:f5:
c9:46:3a:bb:40:f5:05:e0:d3:ef:91:4c:c9:52:f8:39:4d:4c:
e7:be:58:52:54:8f:e7:9a:fc:9c:91:e9:4a:20:7f:f8:28:f0:
aa:e1:b9:2b:a5:5d:ac:83:c1:93:30:65:88:b7:d0:0d:c9:7f:
2d:61:58:23:ff:0e:eb:69:5b:f5:00:d2:62:c7:70:41:49:f8:
cb:f9:fb:ab:3a:41:76:18:5a:56:e2:4b:06:99:b6:1c:42:34:
da:f8:00:c6:e9:50:5b:07:3a:e0:ac:f4:d4:dd:82:e2:68:76:
d5:59:2f:8a:fc:78:8f:0c:78:ea:47:28:26:96:bf:d9:22:8a:
bb:3e:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:18 2026 by rpki-client