Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
File: BozI9XorPCKZsfSCtn4V2d5DrTw.mft (raw, json)
Hash identifier: uPMY+uQnzYQVn2sMdkuy89ZuSjRTF4NFDvSME6J3Mho=
Subject key identifier: FC:CF:DD:C4:47:49:94:9C:80:62:9C:64:76:C4:87:5A:5A:7B:00:47
Authority key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
Certificate issuer: /CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Certificate serial: 01A0D15BFF9B53BF082A788AA96A0F44DE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
Manifest number: 17E2
Signing time: Thu 24 Sep 2026 03:01:02 +0000
Manifest this update: Thu 24 Sep 2026 03:01:02 +0000
Manifest next update: Fri 25 Sep 2026 03:01:02 +0000
Files and hashes: 1: 1-2P8OWE-nT9yglepyYQAlaB5NfE.roa (hash: hXJitTuZsInHr+UtjyUxAZf5csxkpDvw7CF/W7Cve9U=)
2: BozI9XorPCKZsfSCtn4V2d5DrTw.crl (hash: u+MF8oG8etstjDEh7g4NLgdGKlzoJpXrluWYUm1XLUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:ff:9b:53:bf:08:2a:78:8a:a9:6a:0f:44:de:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Validity
Not Before: Sep 24 03:01:02 2026 GMT
Not After : Sep 25 03:01:02 2026 GMT
Subject: CN=fccfddc44749949c80629c6476c4875a5a7b0047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:af:80:4d:46:c6:e7:84:4c:45:9d:46:05:
7e:fa:62:e4:3a:61:27:02:44:67:a6:ab:2d:41:e4:
0f:b0:3c:8f:2f:20:96:9b:d0:37:f3:ce:e2:15:ec:
d2:59:f9:b5:0d:d0:90:b1:e2:50:5c:d0:f3:2a:86:
92:8a:1e:9f:a1:f9:dc:e8:91:08:b0:64:52:47:76:
67:73:f3:00:1e:09:85:96:71:1f:61:7e:b2:44:df:
a3:fb:b3:81:31:1e:1a:c1:71:d5:80:fe:e1:15:35:
6f:73:4e:a5:c3:4a:fe:5a:0f:5f:29:89:1c:6a:4a:
35:70:1e:22:12:ad:3a:71:cb:62:19:18:89:cc:95:
2c:9e:59:ca:e0:7b:ea:b6:01:f3:e2:53:25:ee:04:
25:94:ea:8a:8f:76:39:92:12:9b:0a:79:94:cd:e5:
ac:78:39:db:3d:c5:2a:d7:09:b0:0b:e4:a5:a4:30:
3c:67:d6:7a:0d:0d:55:e4:f0:2d:55:39:b3:62:9a:
f9:ab:ad:21:68:eb:8a:bf:1d:a3:f2:4e:c7:02:ed:
8f:b0:6d:91:56:9c:44:dd:8b:e8:fd:5a:4d:3d:f0:
66:10:c3:f0:08:48:c4:c1:09:2a:d7:52:d0:92:25:
72:2a:a6:68:5a:7d:f9:e5:7a:47:55:86:6f:6e:1c:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CF:DD:C4:47:49:94:9C:80:62:9C:64:76:C4:87:5A:5A:7B:00:47
X509v3 Authority Key Identifier:
keyid:06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d4:36:63:2d:c5:32:3b:30:2e:ef:0f:3b:a4:e0:a7:51:41:
d4:ec:f7:c8:f2:99:b7:28:cf:30:2d:d1:3d:d8:47:56:4e:7e:
d2:e4:71:53:62:18:6b:f4:6b:d5:bd:9e:fb:13:a8:13:e2:fa:
c7:d4:eb:bf:1d:78:73:b7:fd:87:42:33:27:fc:86:52:d7:99:
13:d6:82:00:4d:82:4f:6f:9e:e1:97:56:2e:fe:fd:8e:7f:79:
f1:5d:bb:a1:9a:27:0a:b1:c1:32:72:11:d0:f2:55:e5:d3:4b:
9c:63:c5:f8:e8:37:d3:0e:30:df:db:0a:4c:b9:8b:e5:8f:f6:
2f:29:79:ca:8f:d8:07:15:be:4f:d6:44:e8:92:ce:00:64:8a:
c2:f3:f0:90:ce:dd:14:a5:72:01:53:75:c3:55:64:7c:66:29:
b6:88:0a:c7:79:42:e1:f9:4c:25:7f:2b:fa:aa:9d:91:5b:d5:
ed:62:70:64:5d:1d:3a:32:67:b9:70:8b:9e:b9:21:cb:fa:a4:
96:1b:a9:05:c4:83:d1:75:b8:df:63:74:49:cc:f0:14:80:f9:
de:23:32:20:94:e8:13:be:be:22:e2:48:7f:9d:70:21:c2:cc:
73:48:65:c7:f9:0c:d6:7c:a9:51:35:bb:85:7e:11:5c:e7:9b:
9e:15:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:55:00 2026 by rpki-client