Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
File: BozI9XorPCKZsfSCtn4V2d5DrTw.mft (raw, json)
Hash identifier: +u/M4wsQRVLAqQmIo7DwOnRvflCn4Bdjm0/65rSKeNc=
Subject key identifier: 9E:6B:DB:8C:56:39:F2:22:10:09:F0:98:7C:9F:ED:E1:EA:97:0B:1E
Authority key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
Certificate issuer: /CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Certificate serial: 019F90C768C94714FD78C1FCDC87C554663D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
Manifest number: 173C
Signing time: Thu 23 Jul 2026 21:00:15 +0000
Manifest this update: Thu 23 Jul 2026 21:00:15 +0000
Manifest next update: Fri 24 Jul 2026 21:00:15 +0000
Files and hashes: 1: 1-2P8OWE-nT9yglepyYQAlaB5NfE.roa (hash: hXJitTuZsInHr+UtjyUxAZf5csxkpDvw7CF/W7Cve9U=)
2: BozI9XorPCKZsfSCtn4V2d5DrTw.crl (hash: zio8IW6sgxy6Jtaf1GxtDgVbKS0PlxlfAwCv2hvZim8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:68:c9:47:14:fd:78:c1:fc:dc:87:c5:54:66:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Validity
Not Before: Jul 23 21:00:15 2026 GMT
Not After : Jul 24 21:00:15 2026 GMT
Subject: CN=9e6bdb8c5639f2221009f0987c9fede1ea970b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:94:bd:7c:2c:08:85:03:db:c7:3a:5f:c1:
b9:41:01:b4:c0:a9:af:c2:24:60:d1:0a:e8:55:bb:
a8:ab:bc:e3:94:7d:6f:57:f5:18:61:45:d5:6b:47:
c6:82:53:c4:70:b6:1c:ab:e7:db:37:bb:e2:c1:8b:
0e:ce:f9:18:cc:e9:a9:56:f6:f3:11:0f:9e:69:9e:
75:8d:59:e1:6d:5b:a4:1e:10:04:25:d7:70:28:e0:
6b:06:8c:5a:00:95:54:61:13:c2:99:e2:1c:60:a4:
18:47:83:72:df:a0:91:9a:ec:13:80:b1:f8:a5:11:
3e:b0:07:3e:ff:d6:4f:83:97:96:29:1c:71:40:52:
97:18:03:ef:9f:f6:82:50:44:23:d1:e7:66:6a:60:
ea:81:ee:26:a3:28:68:10:2e:88:7f:4e:87:7a:90:
0f:0c:c8:e5:e4:4a:2c:3e:8b:2f:94:8c:8d:bc:dc:
3b:f6:b8:a7:92:6d:11:21:53:71:dd:05:68:d2:3e:
12:e0:d6:c5:62:05:47:91:c5:e0:54:f5:2b:40:70:
fd:c3:e5:f1:1b:1c:73:c2:7c:9d:f9:00:20:a9:61:
78:ba:3b:60:1e:bc:ea:fe:11:1f:94:75:6a:cc:fa:
33:00:f8:bf:86:d6:76:5b:3f:14:27:3a:d0:83:c1:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6B:DB:8C:56:39:F2:22:10:09:F0:98:7C:9F:ED:E1:EA:97:0B:1E
X509v3 Authority Key Identifier:
keyid:06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:31:50:d7:7b:d7:2a:a9:4b:3d:b4:5a:df:fe:79:c3:3e:8f:
5f:e0:e1:b6:2b:e1:dc:d4:62:43:5b:2a:bf:a9:08:f7:84:b6:
50:ba:c3:39:d5:d7:78:8c:d7:25:e8:12:dc:33:43:f4:63:5c:
b0:cd:7a:d7:7c:de:d2:9e:92:13:da:09:89:22:97:ab:90:e7:
7f:41:71:29:13:db:3f:82:10:b3:b1:f8:b5:e5:81:ae:44:8e:
35:e2:f4:41:21:7d:67:67:53:6b:07:fd:87:3a:3b:59:a2:24:
f9:1b:50:12:0e:08:b1:1b:2e:7a:85:3a:6c:05:65:23:14:1c:
90:d8:14:82:18:1c:db:53:96:c6:ca:2e:16:df:a1:2b:3c:8d:
f9:f8:1d:82:54:43:ee:84:e8:20:c2:e6:63:95:6b:28:0f:89:
f9:e9:6c:fb:44:b8:55:c9:1d:3f:fb:45:2f:6e:5b:35:cc:9d:
07:d6:44:e6:9a:a2:7f:dd:2c:44:07:b2:55:6b:4d:34:92:42:
79:0c:6d:0e:b5:9b:a0:a9:99:47:10:42:e8:95:b1:45:43:1f:
29:91:23:11:a1:a9:9b:55:38:b2:cf:5d:f5:67:b6:c0:8d:53:
e2:37:45:32:b0:94:4d:9d:d7:8b:9c:14:8f:dd:50:fe:9c:c3:
16:97:9a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx2jJRxT9eMH83IfFVGY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OGNjOGY1N2EyYjNjMjI5OWIxZjQ4MmI2N2UxNWQ5ZGU0
M2FkM2MwHhcNMjYwNzIzMjEwMDE1WhcNMjYwNzI0MjEwMDE1WjAzMTEwLwYDVQQD
Eyg5ZTZiZGI4YzU2MzlmMjIyMTAwOWYwOTg3YzlmZWRlMWVhOTcwYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nqUvXwsCIUD28c6X8G5QQG0wKmv
wiRg0QroVbuoq7zjlH1vV/UYYUXVa0fGglPEcLYcq+fbN7viwYsOzvkYzOmpVvbz
EQ+eaZ51jVnhbVukHhAEJddwKOBrBoxaAJVUYRPCmeIcYKQYR4Ny36CRmuwTgLH4
pRE+sAc+/9ZPg5eWKRxxQFKXGAPvn/aCUEQj0edmamDqge4moyhoEC6If06HepAP
DMjl5EosPosvlIyNvNw79rinkm0RIVNx3QVo0j4S4NbFYgVHkcXgVPUrQHD9w+Xx
Gxxzwnyd+QAgqWF4ujtgHrzq/hEflHVqzPozAPi/htZ2Wz8UJzrQg8FCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5r24xWOfIiEAnwmHyf7eHqlwseMB8GA1UdIwQY
MBaAFAaMyPV6KzwimbH0grZ+FdneQ608MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2It
MmEyODQxNmQ0NWIyLzEvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2ItMmEyODQxNmQ0NWIy
LzEvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDFQ13vX
KqlLPbRa3/55wz6PX+Dhtivh3NRiQ1sqv6kI94S2ULrDOdXXeIzXJegS3DND9GNc
sM1613ze0p6SE9oJiSKXq5Dnf0FxKRPbP4IQs7H4teWBrkSONeL0QSF9Z2dTawf9
hzo7WaIk+RtQEg4IsRsueoU6bAVlIxQckNgUghgc21OWxsouFt+hKzyN+fgdglRD
7oToIMLmY5VrKA+J+els+0S4VckdP/tFL25bNcydB9ZE5pqif90sRAeyVWtNNJJC
eQxtDrWboKmZRxBC6JWxRUMfKZEjEaGpm1U4ss9d9We2wI1T4jdFMrCUTZ3Xi5wU
j91Q/pzDFpeaMQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:20 2026 by rpki-client