Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: rpZ4L22vM9Y9yb9sCExUHEl7BEwPPlQn2Gg4KgJYHJo=
Subject key identifier: 0D:09:E4:40:AD:08:30:9E:96:3E:DA:02:8C:B5:7A:E5:9D:88:8F:58
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 019D270429148AA004C313C3E2B455C4C6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:17 +0000
Manifest this update: Wed 25 Mar 2026 22:01:17 +0000
Manifest next update: Thu 26 Mar 2026 22:01:17 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: bjPPEdm/BYK2xPL4HtkzGu6/7mzwBQIefCrwEq1+qH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:29:14:8a:a0:04:c3:13:c3:e2:b4:55:c4:c6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Mar 25 22:01:17 2026 GMT
Not After : Mar 26 22:01:17 2026 GMT
Subject: CN=0d09e440ad08309e963eda028cb57ae59d888f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:1f:ca:81:f6:5f:f4:7d:b1:ab:6e:9a:a8:
60:a6:14:a6:79:93:f0:8d:d4:39:26:93:94:cd:cf:
30:03:95:37:60:e5:31:2f:1c:30:19:d9:cc:d1:87:
dd:3c:c4:2c:15:ac:45:3a:57:dd:d2:69:1e:59:5c:
4c:3d:63:57:3b:9f:bc:79:ce:40:f7:1a:98:65:ba:
6f:ce:27:56:83:a9:a9:38:c5:29:25:d2:f7:f4:f6:
0c:c9:3f:31:d8:1c:e9:83:5c:c5:ce:80:43:3b:77:
2b:8f:e6:56:4e:e0:26:9d:15:a2:0b:7d:93:4a:bb:
82:99:7a:69:3f:ed:4d:49:b9:bb:51:13:82:ea:75:
58:5a:f6:80:d2:be:0a:13:24:e4:b9:51:ea:a0:4e:
7e:ae:2f:c9:55:75:9b:82:94:84:2e:d7:73:f1:dc:
37:b0:c1:fa:0f:7f:29:74:5a:a6:a2:b8:32:62:77:
4f:38:0c:be:a7:80:13:98:5f:cb:49:76:8d:e5:a4:
8f:16:70:da:94:e4:90:b6:1a:14:98:65:7a:39:d8:
d3:1b:64:95:be:5e:4c:cb:ac:c5:1c:4f:cb:82:c9:
c9:0c:09:4b:73:a1:c5:20:35:7c:d5:11:fd:ed:88:
63:55:69:ed:26:38:2d:b8:f8:fc:6b:f3:fe:10:5f:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:E4:40:AD:08:30:9E:96:3E:DA:02:8C:B5:7A:E5:9D:88:8F:58
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cd:ac:3c:1d:92:56:20:21:6e:4b:73:a2:a1:bb:b0:a1:2a:
95:d4:76:2d:c4:80:d8:2c:05:a2:d4:94:ff:2a:52:38:bf:a6:
50:dc:cf:d9:7a:97:9e:45:82:19:01:a8:dc:98:b3:9c:d6:f2:
5c:91:e3:4d:e3:cb:17:6d:e2:17:b0:3f:3d:5d:04:2a:06:f4:
9c:88:6f:10:ef:fc:24:cd:46:3b:2f:2e:18:49:1b:35:57:36:
f3:cd:57:41:b4:e9:7f:80:8c:e2:51:40:ec:2e:3c:1c:77:6b:
d7:6c:57:10:3a:c6:75:98:5c:6b:ba:b5:aa:f3:87:7a:bd:e6:
3c:27:14:dc:b6:64:e5:3e:55:d3:50:46:ed:17:c4:e6:e8:62:
d2:35:10:91:c0:66:81:7f:67:75:2e:77:81:ec:8a:cb:f7:d1:
4a:c3:39:d5:91:1a:a9:36:2a:10:e6:04:19:ae:d9:5d:48:ac:
72:78:1f:8c:4e:c5:cc:37:1d:da:38:e1:4a:38:38:f5:20:f8:
ce:40:d0:91:57:27:0f:e3:5e:d5:f2:10:da:9b:28:02:bd:b2:
33:09:fc:0c:a6:96:23:2e:0d:08:95:d0:d8:9b:7c:dd:99:e1:
4f:c3:81:81:19:d6:f7:b8:48:6a:10:e2:2e:ee:af:a6:f9:d1:
a4:80:ed:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:12:43 2026 by rpki-client