Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: N0Hs552jSNUdqRScLWERdLSdyFdFB3FktnajOdB2l7k=
Subject key identifier: 0F:D6:15:2C:58:71:88:74:42:4E:0C:69:72:FD:AC:92:39:19:FA:FB
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 019E202466FA2D80719F489C00FE4D4CBDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 1903
Signing time: Wed 13 May 2026 07:01:56 +0000
Manifest this update: Wed 13 May 2026 07:01:56 +0000
Manifest next update: Thu 14 May 2026 07:01:56 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: wAj1ao1OWMlRFTWGgGdNQe+opfuuoPvzB5hAg2lfnqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:66:fa:2d:80:71:9f:48:9c:00:fe:4d:4c:bd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: May 13 07:01:56 2026 GMT
Not After : May 14 07:01:56 2026 GMT
Subject: CN=0fd6152c58718874424e0c6972fdac923919fafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:06:d7:1d:65:9d:ec:f2:47:a6:1f:ac:d7:
80:b9:ad:e6:1c:f5:52:d9:96:02:c8:10:43:90:30:
05:e5:c9:dd:5a:63:6f:07:17:76:7b:2a:4a:bd:af:
b0:39:58:4d:03:0e:16:6f:d8:41:6f:c3:43:e4:e8:
6b:7e:55:b5:8f:76:41:02:b0:b3:9e:79:5d:28:24:
d7:d8:e7:64:e1:33:9a:47:55:62:1a:b5:6f:0d:ce:
3d:d6:a9:f4:84:0e:d7:bd:9c:18:65:ac:f1:10:c6:
b5:d0:6c:8e:7e:c2:cf:fc:74:ab:46:c4:9a:d2:7b:
e6:68:0e:84:11:fc:dc:93:72:61:b9:b5:c3:69:15:
9a:cc:83:0c:5c:4b:dc:fd:98:1d:95:03:a5:9e:e9:
42:f6:e4:8d:09:76:4d:3f:b3:18:d5:c1:f4:4f:95:
f1:f5:80:dc:81:c0:47:ed:9f:e0:2e:c8:16:52:f4:
f0:ec:24:97:65:05:54:a8:c3:41:ab:14:de:3b:ff:
19:0a:61:90:93:7a:4b:2b:49:97:ac:4c:0a:37:ee:
5b:8b:b5:ea:29:68:24:56:ce:e4:b5:18:ce:b8:e3:
c5:20:ce:06:29:2e:8b:fc:c1:aa:7f:e4:b5:16:d8:
7b:07:6e:67:09:b4:26:85:dc:93:3d:00:aa:e1:70:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D6:15:2C:58:71:88:74:42:4E:0C:69:72:FD:AC:92:39:19:FA:FB
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:88:89:d3:17:b3:d1:0d:20:a0:9b:b3:88:ba:c8:63:4b:0e:
0e:06:49:d3:7d:e2:45:0d:b0:0c:b5:cc:1e:3b:47:dc:14:7d:
31:70:ea:a2:ed:90:cd:ae:3a:4f:d8:2b:54:da:8d:80:da:15:
22:5b:1f:e1:d3:0c:e0:de:3e:ae:18:5e:a6:a7:57:22:e8:1f:
29:3e:dc:30:14:ce:a9:2f:dc:cb:10:2b:8f:04:22:2d:46:2f:
11:59:fe:0a:ef:09:ba:75:26:7a:7b:3c:ea:79:2e:07:84:26:
81:59:10:03:82:52:92:b1:28:3a:5a:66:04:80:cd:9e:c9:3b:
0f:4d:a9:d6:9e:c9:86:e0:7f:2d:c8:09:46:d6:31:e6:f9:6d:
b1:32:2b:e0:f3:44:25:db:3b:f2:31:2d:4f:ec:8d:04:87:4f:
b8:37:7e:8e:20:b5:fb:e5:a2:32:4a:c0:ee:50:84:f4:89:33:
c4:2d:20:d0:fe:0f:1f:11:cc:8b:eb:38:b3:c8:3b:18:d1:38:
9f:81:dd:54:5c:c0:e0:5f:f1:2d:b8:dd:0b:8d:72:b7:fc:49:
3e:13:fc:ec:57:a7:06:80:32:d6:7a:5d:b9:cc:e0:b0:fa:c1:
1c:d1:09:5a:db:92:98:e9:9c:d2:db:8a:ad:d2:a5:50:cf:cd:
75:94:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:20:24 2026 by rpki-client