Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
File: bov4V64H8NXv1Xda1SnOTu2bfS8.mft (raw, json)
Hash identifier: ve1g/LNwtyYAJtV1kw78zxthEvQV8/+C6gdVrMLp94s=
Subject key identifier: 33:5D:E3:2D:E9:E8:E3:F1:C0:E1:8D:7D:0A:07:04:08:5C:AF:45:24
Authority key identifier: 6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F
Certificate issuer: /CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f
Certificate serial: 019D29CE43D04EAD3CAF11D99B9CD32100F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
Manifest number: 02EA
Signing time: Thu 26 Mar 2026 11:01:16 +0000
Manifest this update: Thu 26 Mar 2026 11:01:16 +0000
Manifest next update: Fri 27 Mar 2026 11:01:16 +0000
Files and hashes: 1: 8b5Q1Ep96tHPZfrlguEX1Fphr7Y.roa (hash: NSjlTmAwF3tYTL1sHlW6s/mlYkWitDTfZbrAsFJSNPQ=)
2: bov4V64H8NXv1Xda1SnOTu2bfS8.crl (hash: ls41+lm8/MDLq0viWywwLI0j+kzBLcHs5vSR4BzLojA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:43:d0:4e:ad:3c:af:11:d9:9b:9c:d3:21:00:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f
Validity
Not Before: Mar 26 11:01:16 2026 GMT
Not After : Mar 27 11:01:16 2026 GMT
Subject: CN=335de32de9e8e3f1c0e18d7d0a0704085caf4524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:9b:a0:97:fc:81:9e:03:d6:23:f4:d2:68:
db:bd:98:85:22:30:eb:03:7c:7d:44:be:59:0c:97:
34:96:05:9f:c2:2f:40:6c:ea:24:a8:9d:94:2d:f4:
de:fc:27:9a:64:94:86:9b:7b:02:83:20:1a:99:34:
88:b3:73:ad:72:95:05:52:a3:db:ac:fc:11:64:0d:
65:06:89:c5:b5:1d:b4:19:a1:15:67:6c:e6:4c:ed:
38:73:ba:44:22:d5:10:85:af:df:9c:18:1d:a8:b1:
a9:af:39:be:00:17:d9:c1:f8:da:35:87:b6:f6:0e:
42:e3:d2:22:be:40:1b:ce:8e:84:5c:7b:b3:42:90:
aa:80:9b:03:73:45:72:1f:87:f9:88:4a:39:75:cd:
17:64:d4:8f:0c:51:8e:a0:9b:aa:cb:cc:63:72:92:
39:d8:ad:fe:20:ab:c2:b6:1c:62:f1:e6:ae:2e:79:
4d:6e:d8:6e:5a:88:e0:74:f3:e8:67:be:8b:4c:90:
73:8c:e0:d7:85:a0:cc:a2:0b:4a:fb:e7:db:90:ec:
50:57:9f:a4:a5:f3:5f:0f:d7:8e:02:41:84:c7:bf:
12:4d:a1:80:c8:3f:45:05:c8:c8:39:27:dc:cf:0a:
7d:ab:cb:94:08:ef:7a:39:29:9b:d6:d8:05:5b:8a:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:E3:2D:E9:E8:E3:F1:C0:E1:8D:7D:0A:07:04:08:5C:AF:45:24
X509v3 Authority Key Identifier:
keyid:6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:64:24:0f:99:dd:6e:be:95:3b:f3:ca:a4:82:17:b0:18:0d:
16:60:d5:5d:92:42:bd:cd:f0:68:ae:74:53:31:c3:30:43:a6:
9b:ee:9c:30:f6:8b:ac:07:ff:51:77:3e:8d:b8:32:db:5b:4e:
19:95:a9:f4:be:69:70:02:6c:9c:cc:4d:c3:b1:6a:43:25:2e:
fc:f1:f0:ce:ef:88:39:20:40:f6:82:48:b6:4a:40:2d:04:32:
cc:34:91:08:cf:e8:4b:7b:76:11:e1:d6:1a:74:0a:38:31:81:
92:3d:72:b1:fb:65:0c:3a:16:3e:06:e1:e4:a4:d7:c3:c4:4e:
da:ad:8b:31:18:d5:4c:62:ac:26:b4:37:30:b4:06:eb:05:01:
9f:75:b0:71:9f:33:5a:9c:cc:54:85:e0:08:cd:9b:30:9d:91:
a9:bc:1d:7e:24:53:34:19:fd:8c:b1:bf:ac:19:f6:fc:d9:96:
03:95:bd:8d:b6:a6:cd:96:f2:f8:64:0a:87:07:74:e9:77:ec:
fd:31:d6:e1:d5:2b:da:1d:91:b7:5e:2f:95:fb:4e:fb:bc:d4:
e8:77:db:94:76:e1:11:bc:19:ac:9d:03:5d:4a:f4:e1:f8:2f:
98:6e:5c:81:cd:03:d7:14:b9:91:0b:bb:cf:19:de:61:7f:42:
d6:46:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:43 2026 by rpki-client