Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
File: bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json)
Hash identifier: U61G6s+u2BD0gzftlPHvser90YXd2F6TTVYK1mUPSb0=
Subject key identifier: 19:24:BC:3C:3F:7E:EA:78:BA:8E:1E:0F:A1:4D:7D:E3:47:11:1A:7E
Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Certificate serial: 019D2695F448F51F53CA2461BFE98F043159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
Manifest number: 013F
Signing time: Wed 25 Mar 2026 20:00:54 +0000
Manifest this update: Wed 25 Mar 2026 20:00:54 +0000
Manifest next update: Thu 26 Mar 2026 20:00:54 +0000
Files and hashes: 1: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: RtiT4h3oIM3uO4gq4xPFy6wb74qWIxC94wxY/5NxgfM=)
2: kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa (hash: LGB+6qc6f2IFP3yURAz7uhoUKkg6z1TzwYrDl1Ny9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f4:48:f5:1f:53:ca:24:61:bf:e9:8f:04:31:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Validity
Not Before: Mar 25 20:00:54 2026 GMT
Not After : Mar 26 20:00:54 2026 GMT
Subject: CN=1924bc3c3f7eea78ba8e1e0fa14d7de347111a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:96:f7:34:d3:3a:99:2f:db:44:9b:61:51:
a5:0a:0a:d7:46:0f:08:a6:58:e8:62:1a:40:29:22:
da:88:85:ea:4b:7a:ad:23:08:b8:e5:bc:b8:69:cd:
26:eb:0b:8c:82:4b:7d:bc:10:cc:64:3e:05:28:dc:
b2:0b:91:d4:25:bf:9b:3d:e9:82:e6:e4:c3:02:e3:
d2:9d:a6:07:70:f0:27:4e:00:39:e3:05:bf:87:7c:
ba:6d:e5:69:10:96:1c:b4:ae:8b:6f:d6:e4:41:8b:
f0:26:00:a1:86:42:45:bf:e2:bc:39:34:2b:bc:c5:
39:35:ea:3f:ed:5b:57:90:02:57:9b:fe:81:29:1a:
02:be:70:0c:3f:86:a4:bf:0e:08:90:30:3d:35:51:
bf:fe:99:6c:a0:d5:c0:bc:68:84:be:fc:35:72:23:
03:ab:7a:23:e0:b6:f2:84:e0:05:07:49:d6:05:30:
c6:34:c9:3f:72:59:63:30:b9:e9:fa:7a:48:22:bf:
3c:1d:57:89:39:e9:d3:70:ff:f5:ff:83:26:46:f4:
f4:af:5d:67:47:54:6c:68:4d:96:a6:a8:2e:89:79:
2b:1d:aa:e7:88:be:e7:6b:41:4f:c9:51:79:e3:ff:
e7:eb:d9:d9:e0:0b:4c:bc:bc:2f:d7:73:39:f1:20:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:24:BC:3C:3F:7E:EA:78:BA:8E:1E:0F:A1:4D:7D:E3:47:11:1A:7E
X509v3 Authority Key Identifier:
keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:3a:4b:2a:49:a9:a7:ba:f7:0f:91:de:1d:cf:dc:80:4b:
35:64:92:4f:bb:54:bb:d4:1c:b2:cc:0f:e3:21:30:59:89:4e:
20:17:ce:71:1b:f3:96:ea:80:45:1f:67:fd:87:e1:2d:44:a9:
14:df:39:f8:05:ea:0c:9c:e2:b6:d3:f3:84:26:a3:b7:27:fc:
14:c2:3e:61:c5:6b:1a:5e:2e:4b:59:9d:ae:b3:8f:6d:9f:88:
07:5e:66:c3:1e:47:f6:8d:73:42:35:61:dd:9a:5e:be:d5:24:
18:fd:d7:f9:a5:75:69:54:98:8e:1e:76:d0:02:02:2c:a8:d6:
4e:49:d9:1a:cb:52:26:cc:bd:df:ce:8d:57:40:23:6e:22:b8:
9e:79:d5:d2:af:aa:76:3a:61:74:12:43:e2:64:44:99:74:c2:
f7:84:d9:a8:1a:1f:b8:12:67:6f:e0:35:d1:3d:bf:5a:c1:64:
95:bc:0b:a5:40:8d:e0:f6:1e:49:d3:22:cf:ee:98:74:3b:99:
98:b6:0b:18:7e:61:d6:d7:70:93:78:65:c7:58:d7:1f:aa:c7:
1e:ca:8a:be:8e:5f:90:2e:81:02:c8:ce:e4:55:d1:fb:08:c9:
50:fc:60:f3:68:6a:f8:3f:e7:0c:99:39:69:6c:dc:4b:38:29:
f9:5f:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:56 2026 by rpki-client