Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier: odVYH0s1bARzTTU8AF0AFrlyaTom4mb9u3OUn3vzots=
Subject key identifier: AE:62:B3:80:5B:DA:E2:6B:EF:4E:EE:F6:C2:93:A8:F5:D7:F6:AE:67
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial: 019D2997305E54C9A29F197519369F435690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number: 0638
Signing time: Thu 26 Mar 2026 10:01:07 +0000
Manifest this update: Thu 26 Mar 2026 10:01:07 +0000
Manifest next update: Fri 27 Mar 2026 10:01:07 +0000
Files and hashes: 1: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: QPdAHeUf8jKj3rs1plw8crXntz7PCmRAK+Ko1Mx1o4g=)
2: d5Zhp1cA_fqDZ1FzU959TA66aj4.roa (hash: SuNZX9fanarDL2+daC3fGFckgN7apSeTYCwNJVS+b94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:30:5e:54:c9:a2:9f:19:75:19:36:9f:43:56:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Validity
Not Before: Mar 26 10:01:07 2026 GMT
Not After : Mar 27 10:01:07 2026 GMT
Subject: CN=ae62b3805bdae26bef4eeef6c293a8f5d7f6ae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:df:fe:a5:20:66:3f:bb:31:9e:5b:12:bc:
f2:24:18:b3:45:60:f0:3d:49:f6:b2:ad:be:0e:a7:
93:8e:07:f1:ad:d3:03:c5:fa:e3:ff:d8:40:44:38:
d3:4d:28:d5:19:97:f7:6b:bb:4d:7c:96:dd:88:35:
81:16:05:f2:e2:f1:6d:49:22:8a:1c:c5:9c:d1:b6:
41:ce:18:8e:19:1a:93:62:29:32:48:f4:f3:cb:93:
24:f6:c7:60:18:d4:7d:4e:56:d1:9e:0c:53:cb:08:
b7:97:be:99:ec:66:e9:23:c1:b2:23:9f:61:5f:49:
f4:ee:51:b7:f1:53:1f:bd:96:95:2c:74:0d:fa:53:
d0:12:78:a6:57:b7:e3:11:dd:4b:b2:b2:fc:05:a1:
c1:5f:1b:3d:91:2b:7f:ac:37:bc:0a:43:48:12:51:
e3:9e:04:42:88:9f:ca:80:cd:2d:3f:f1:8b:e7:dd:
47:93:48:43:8b:be:a2:36:5e:9c:5f:93:8a:85:22:
67:08:48:8a:a7:0e:9b:68:c4:a8:99:fb:e2:06:ef:
02:8d:24:b5:5a:d1:c5:d6:eb:63:3b:58:f7:53:40:
61:37:30:39:a2:1e:0b:0d:3b:a8:3d:c8:f3:66:43:
ae:0b:0b:29:00:93:6d:7f:32:dd:45:b8:20:24:ef:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:B3:80:5B:DA:E2:6B:EF:4E:EE:F6:C2:93:A8:F5:D7:F6:AE:67
X509v3 Authority Key Identifier:
keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:64:f0:0c:07:cd:92:17:68:5a:83:d6:87:50:97:ba:9b:29:
7c:67:12:d5:c0:a4:07:c0:d4:d8:03:fc:f6:69:15:1a:b7:c7:
71:89:d6:fe:c5:a0:0c:09:b5:cc:5e:6f:d8:f3:9f:1a:f5:a4:
f8:5c:07:4b:95:13:b3:76:80:56:2c:c2:90:a1:32:b7:71:1b:
22:2b:68:2f:8a:db:0f:6e:31:53:87:1d:38:82:11:e0:17:f3:
46:7f:13:de:0e:43:26:1a:7d:b1:7b:4c:00:19:a5:d9:69:6b:
71:3e:7f:ba:63:e7:31:db:c5:69:c9:b5:f2:df:4c:e7:a7:dd:
fc:52:44:02:fb:d7:ee:da:e8:9e:61:fc:58:28:33:55:16:0b:
43:30:e7:29:5c:95:c8:7f:87:9d:df:9b:5b:48:0b:f4:49:05:
56:81:b1:09:20:b6:95:40:53:93:cc:f4:a9:e8:8d:e2:39:82:
36:ba:54:30:c1:dc:51:cb:d8:0a:33:2a:47:89:d1:a5:ff:e3:
38:99:ac:ae:87:8f:f4:6b:45:90:5a:5f:77:89:21:db:52:18:
fd:25:65:b7:6b:6b:e5:fb:73:e5:df:e2:00:c9:dc:a2:d0:36:
5e:24:1f:8f:9a:a9:30:db:37:6c:40:1b:28:87:6e:9b:be:bb:
d7:13:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:32 2026 by rpki-client