Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File: BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier: vvvLW9PhToUl4Fz1K90XPqGLOHF3ulAYou9jp/HHf1Y=
Subject key identifier: 77:FB:6E:46:67:A4:2B:95:7D:40:39:9B:8D:C1:21:5C:42:52:A9:26
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer: /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial: 019D25BA63E1976858A76EE617F8F8B9DEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number: 17A4
Signing time: Wed 25 Mar 2026 16:01:05 +0000
Manifest this update: Wed 25 Mar 2026 16:01:05 +0000
Manifest next update: Thu 26 Mar 2026 16:01:05 +0000
Files and hashes: 1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: 3F2pFHGHkrlCZkwhyVcZsIyixih84fp5UEbsb73tb+k=)
2: qh-sD6kOkExAEQOZYjnoqxx9DpY.roa (hash: 5t8eLCXvC3atBWqULd/nurDvBUxx1v91TFam4vLNrJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:63:e1:97:68:58:a7:6e:e6:17:f8:f8:b9:de:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
Validity
Not Before: Mar 25 16:01:05 2026 GMT
Not After : Mar 26 16:01:05 2026 GMT
Subject: CN=77fb6e4667a42b957d40399b8dc1215c4252a926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:6c:27:54:bb:7b:fc:f3:00:2c:c8:fa:f9:
41:f1:15:40:75:12:48:63:1d:4f:ce:49:df:00:dd:
3c:ea:5e:ba:ec:1a:79:e2:9a:9e:14:53:ac:b4:06:
27:68:32:c4:0f:4d:d4:e2:13:42:b3:92:10:e0:10:
8c:57:75:52:06:38:03:42:d8:34:65:19:d3:17:40:
f9:8c:b5:f3:34:fa:fc:3d:61:09:d4:48:99:aa:3d:
9f:b6:03:66:a5:17:8a:23:f1:e4:1f:b1:50:df:92:
7e:df:44:a4:28:02:57:a0:68:4d:be:c9:5c:f8:1d:
fb:e0:c1:d9:cb:45:77:fe:b8:c8:76:fa:b5:39:11:
76:d2:30:96:73:2e:0b:3d:37:1c:ea:4c:2d:d2:c6:
8d:92:b0:47:6d:e2:d4:7b:9b:3c:af:aa:d7:61:28:
a9:7c:69:45:57:ca:b3:a2:95:12:a0:9a:d0:65:d5:
cf:2e:61:72:9d:81:fb:7c:91:be:6c:af:6f:64:02:
be:43:7d:68:63:ff:60:98:c5:4e:9f:05:26:d0:b8:
6a:aa:7c:b5:01:83:d2:33:3f:48:7b:f2:ab:ff:11:
29:e9:08:ae:6c:f2:6b:7e:e1:22:b8:13:aa:7a:4d:
c3:65:55:6b:12:75:27:d0:0a:17:25:02:dc:14:65:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FB:6E:46:67:A4:2B:95:7D:40:39:9B:8D:C1:21:5C:42:52:A9:26
X509v3 Authority Key Identifier:
keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c3:72:2e:da:b9:b3:8f:4f:ff:b3:be:30:81:9c:b0:f3:56:
85:fd:0e:73:23:54:fe:69:f4:0a:41:7f:9a:4f:de:2c:52:f7:
c6:5a:87:74:e1:67:0f:92:60:44:32:68:74:00:f4:25:7f:ba:
13:94:ee:ea:40:b0:09:bd:9d:a9:27:09:3c:d1:3c:e3:45:9d:
7b:b4:95:e8:ee:a7:78:f5:a9:b4:0a:9f:63:79:6b:b4:c1:54:
70:17:61:c4:02:38:d5:f9:35:ca:01:5b:da:eb:b9:94:df:27:
3b:18:35:7f:28:46:cb:64:e4:8b:fd:d2:91:dc:e1:c8:d6:b8:
9b:94:ff:ff:d5:5f:f2:6e:6e:19:bd:75:e5:3f:bf:92:a9:88:
0c:ac:4e:db:97:85:d4:92:06:32:99:fe:1c:3a:7d:8b:1e:7a:
81:d5:0d:56:3b:5d:44:96:92:17:95:ae:f4:90:22:0d:ef:c8:
1c:be:51:5e:1c:ee:86:69:2e:c0:99:c7:19:c3:f5:60:d6:17:
c1:65:b7:16:02:42:fe:c9:f7:8b:e5:c7:25:dc:b1:69:cb:38:
1a:b6:ed:33:1b:94:d2:9b:ee:94:df:00:43:ed:8d:eb:d7:ac:
97:10:3f:d7:70:23:84:50:ab:9b:83:88:03:24:01:ad:9c:f1:
f2:a4:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:50 2026 by rpki-client