Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File: boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier: NGLc0153kFqXAMbn3A1U0wAWXXRIAEyeBqJWaPpTYeU=
Subject key identifier: 55:F6:36:6F:48:14:61:4B:3E:65:23:01:74:72:96:6F:33:69:7E:36
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial: 01A1DACA7D02DDE3E5E137EBC75FCAAB6803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number: 1AF5
Signing time: Sat 14 Nov 2026 16:01:05 +0000
Manifest this update: Sat 14 Nov 2026 16:01:05 +0000
Manifest next update: Sun 15 Nov 2026 16:01:05 +0000
Files and hashes: 1: Jb2gO1BQcML39rnxFGep61phXGU.roa (hash: 8e9M6TIpgOCh+hUbFPaNx/cdQqfZysi89tk+qyctjYM=)
2: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: r7dMzUf1o4ltwGksdUJ50INmhBD8NPNdIb/sFRp/dIA=)
3: mNpdXKWJkISb2lRdTODfubt1kNs.roa (hash: ySSUuCm7wtMq5dX67A2of7qfSBu2XTsgfJ1fOTuaKd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:7d:02:dd:e3:e5:e1:37:eb:c7:5f:ca:ab:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Validity
Not Before: Nov 14 16:01:05 2026 GMT
Not After : Nov 15 16:01:05 2026 GMT
Subject: CN=55f6366f4814614b3e6523017472966f33697e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:0b:68:cf:8d:52:87:cc:6e:c4:9b:fe:25:
26:96:25:ec:8c:90:79:13:c2:85:8e:36:6e:27:ce:
24:e8:c7:e6:a3:a4:32:da:8e:72:e3:32:3c:29:2e:
68:41:99:93:79:4d:cf:b0:ec:c3:b8:6a:e1:ea:37:
4e:55:6b:83:78:cd:af:87:ad:ff:5b:ce:9c:91:cf:
52:f5:da:89:48:b1:e7:3e:66:f4:d7:aa:71:57:56:
3b:60:42:53:c7:6b:53:60:a3:e1:9b:d2:81:c4:17:
b2:78:6c:ef:d5:03:5e:b3:f1:b3:29:9a:9e:a6:f3:
21:5b:68:a6:52:46:41:37:62:8d:6f:b5:15:88:d6:
9e:dd:b6:65:c8:13:f7:a8:5e:94:94:72:df:68:ab:
ab:dd:98:bc:9a:eb:38:e2:4d:00:f9:c2:df:d4:51:
08:0d:0b:51:39:7b:75:90:a5:95:e2:45:95:c6:2b:
5a:7a:4e:c7:e8:f5:b4:67:07:05:52:f5:f9:f2:cd:
4e:b7:4b:c7:ca:e0:36:51:4a:ef:b9:da:6d:4a:bc:
74:e6:c8:ff:24:35:ef:80:ac:01:d4:8e:d8:1c:2b:
b8:50:d9:b9:7a:f5:99:f0:58:d1:f8:68:76:b4:11:
15:2f:a9:eb:07:f4:c0:5e:fc:33:95:70:db:89:8b:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F6:36:6F:48:14:61:4B:3E:65:23:01:74:72:96:6F:33:69:7E:36
X509v3 Authority Key Identifier:
keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:8f:e2:69:26:a5:ec:b3:41:41:2f:4c:cb:8c:c0:d3:be:
c3:e2:7a:25:65:43:5e:9c:7f:64:cb:f2:05:7e:e4:72:be:36:
32:30:5e:5d:d4:45:22:4d:02:20:4f:c5:88:2f:34:cc:9b:01:
25:b0:5a:b1:b1:87:d3:92:cc:fb:a2:b5:54:00:43:bb:13:2d:
b1:0e:08:c0:56:cb:51:a7:a8:39:76:0f:2f:9d:ce:1a:33:bf:
84:52:de:d5:b2:61:2b:45:d1:ea:c7:bb:70:54:35:8d:7d:88:
44:99:31:1e:44:60:35:cd:f8:3a:eb:f8:77:86:58:c5:ec:c8:
1a:4a:48:50:3f:3c:b3:77:74:0c:e5:43:c5:fa:c1:a3:b5:f5:
ac:88:b2:a5:c0:e0:70:a9:47:d1:82:e6:f1:ea:da:e5:26:aa:
a2:73:91:06:e0:18:f2:c2:c5:40:d5:23:bc:03:17:3f:e9:e4:
18:05:4a:b3:11:c9:30:af:75:e3:21:c6:5f:36:e7:24:95:04:
0f:32:b2:e2:56:29:e9:49:88:98:38:39:3c:51:47:8f:a7:36:
75:23:53:67:4e:93:1d:36:7e:72:9d:d7:3a:65:6c:96:e0:ff:
1b:4c:ec:8d:da:7d:ee:fc:85:b6:12:2a:0f:13:4d:78:ba:2a:
10:29:99:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:30:20 2026 by rpki-client