Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File: boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier: gdswY4GduUEqUtt1Lsf8wat9MlSi6oVHUbZNYRFGmjU=
Subject key identifier: 06:97:A7:0C:3B:98:40:64:AC:F3:E6:2E:DE:70:72:9E:50:4F:A5:D0
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial: 01A0E99B6D11F45D3FFFBB08FA34ABE9A491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number: 1A7E
Signing time: Mon 28 Sep 2026 20:01:12 +0000
Manifest this update: Mon 28 Sep 2026 20:01:12 +0000
Manifest next update: Tue 29 Sep 2026 20:01:12 +0000
Files and hashes: 1: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: unuYFy2IxNSR2dvcNt3iifjHehzInmQN8U7VIGBXwYc=)
2: xmUoPe_uoUefJbAVDkhT4XlknC8.roa (hash: 8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:6d:11:f4:5d:3f:ff:bb:08:fa:34:ab:e9:a4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Validity
Not Before: Sep 28 20:01:12 2026 GMT
Not After : Sep 29 20:01:12 2026 GMT
Subject: CN=0697a70c3b984064acf3e62ede70729e504fa5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:db:ad:bb:81:31:70:d5:57:eb:88:d8:56:
5a:1d:75:c4:c1:f5:4c:8d:39:2b:d9:b2:06:26:7f:
e3:78:47:a1:61:a3:0b:c2:86:b2:84:f9:16:8c:96:
40:6b:3c:3e:24:e9:16:67:0c:2d:40:9a:53:6a:62:
ad:ca:cc:b2:aa:b5:84:bc:10:7c:06:c2:f4:94:c2:
06:9a:ae:48:00:5a:26:9b:f6:9f:bb:33:68:ea:0e:
3e:ca:96:0a:4a:1f:d4:1e:c3:8e:6b:7d:a4:74:f0:
54:6e:86:56:32:68:b6:e5:60:5d:a5:c0:0b:da:c7:
62:8f:8b:89:e7:ca:ee:ba:8d:ef:23:ca:58:e6:53:
a7:a4:c8:0b:bd:1a:de:f4:9e:1c:54:66:7c:1f:d7:
58:b1:05:23:ed:3d:35:0f:73:51:55:cb:e5:e4:e9:
bf:a3:b5:6f:a9:82:bb:66:a3:a2:d2:62:8d:00:bd:
55:b7:92:8a:1c:c5:bb:9f:08:be:d2:09:41:51:9c:
a1:ed:cd:db:fb:0e:68:7e:ae:68:48:71:6c:d8:9c:
b3:63:19:6e:92:8e:33:46:1f:31:ac:f4:a5:e4:61:
75:fa:be:51:d4:0a:df:c1:f0:1a:35:e9:07:77:07:
e3:07:90:82:16:78:17:fb:69:89:47:d7:b4:c9:b9:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:97:A7:0C:3B:98:40:64:AC:F3:E6:2E:DE:70:72:9E:50:4F:A5:D0
X509v3 Authority Key Identifier:
keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:86:47:0f:76:dc:94:b5:4a:3a:e5:b0:87:3d:1b:96:c4:58:
b0:5c:54:38:cc:22:8e:6a:5f:5b:8a:a2:d7:f9:64:2e:e8:20:
b9:45:64:da:8a:38:77:ed:6e:a7:9b:a8:01:da:b7:68:5a:db:
d9:b5:f5:ae:9f:97:cd:fc:f1:22:d6:e5:2a:73:ef:9a:9e:1c:
70:cb:42:b8:ec:e4:1f:c8:bb:22:ac:48:f5:59:70:76:39:6c:
73:6f:c7:fd:8d:e4:97:9d:41:30:7f:fc:59:f9:95:b3:d1:cb:
43:81:d4:b6:01:e9:a0:d7:2d:5d:93:62:ec:92:11:f3:2b:c3:
09:14:c0:bb:e2:33:9b:3d:b8:06:62:03:76:de:65:6c:91:2d:
78:68:aa:9c:eb:d8:70:b1:a5:44:47:15:cf:94:6c:09:11:28:
27:c8:ae:00:03:c3:77:cd:c2:52:e8:14:ab:99:fa:98:cf:16:
1c:8e:ab:96:9e:64:0c:65:b6:2d:91:2c:6c:94:93:c2:f0:8f:
70:12:5d:15:26:b0:c6:4d:6c:2b:18:2f:3c:1a:43:9a:2c:e0:
bd:93:4f:f1:b8:bf:53:72:63:91:d1:66:93:27:05:60:18:d0:
48:8e:f2:57:d8:ae:6e:64:c0:55:9d:5f:9e:57:7d:77:89:5b:
7a:1d:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:46:58 2026 by rpki-client