Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: Cevlu7ltGAtzHe142E4EdjcmRDrtgE5Dq6nSdLfRqhs=
Subject key identifier: 08:C6:CD:8F:4B:AA:18:F9:83:CA:C5:97:FC:B0:B0:F7:39:3F:35:32
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 019D2960FAE10C9A9D9EA01A9772BACE2BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:54 +0000
Manifest this update: Thu 26 Mar 2026 09:01:54 +0000
Manifest next update: Fri 27 Mar 2026 09:01:54 +0000
Files and hashes: 1: KmFH08iC5J-95oBTnRmMORdBhYQ.roa (hash: jxzbdMpWjw66b8Fw1Ba2LpATegGadHxvfHdlKL67I8A=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: aQqjZ4zgQpa21CUzA6Y3LINKWPUGe5Qhma4zFrrCy3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fa:e1:0c:9a:9d:9e:a0:1a:97:72:ba:ce:2b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Mar 26 09:01:54 2026 GMT
Not After : Mar 27 09:01:54 2026 GMT
Subject: CN=08c6cd8f4baa18f983cac597fcb0b0f7393f3532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:de:30:82:67:72:f8:96:0a:e8:ae:3a:3b:
76:c5:31:19:b6:05:96:d9:c1:62:4d:d0:ef:21:a0:
23:b0:8a:66:15:90:20:f4:83:b7:84:ce:33:cd:d8:
4e:55:a4:9e:d6:46:2a:d0:b3:2f:32:7d:83:da:04:
b8:4a:c5:f0:59:fb:77:4e:68:a4:14:d9:bb:42:97:
a3:a3:66:1f:e6:cc:02:51:d6:5f:43:36:08:74:ba:
c0:7e:48:b5:9d:f2:f3:82:c4:d4:cb:af:37:73:26:
e8:67:f2:ee:02:3e:df:2e:83:77:58:77:52:ff:96:
a5:b5:bc:ae:59:54:29:48:f2:ee:40:fc:0c:a0:a8:
3a:e0:7c:c9:01:9f:fe:53:30:b0:d4:5b:72:ab:20:
bd:c0:7d:4f:07:d3:43:e0:3a:64:97:1b:e5:42:04:
c8:28:96:c8:04:8c:8e:72:43:09:3b:e0:d3:b2:34:
c9:6b:95:ca:62:ce:4f:e7:85:34:97:db:69:a0:c1:
4c:59:63:6f:96:e5:92:19:cf:12:9a:c3:5e:66:25:
6e:c7:77:b4:01:b1:86:0c:59:53:a5:61:72:c3:34:
be:08:54:2b:b5:3f:2c:a7:1f:b2:4b:2c:6a:5e:b5:
a2:f7:b3:dd:db:48:20:69:ba:4c:7c:dd:52:a6:4a:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C6:CD:8F:4B:AA:18:F9:83:CA:C5:97:FC:B0:B0:F7:39:3F:35:32
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:20:58:10:3c:31:b6:06:ab:2f:f0:ef:06:97:52:54:eb:ee:
8a:99:91:9e:e5:c6:ab:bd:62:8e:b0:10:3c:9b:f5:db:60:1c:
10:3a:31:9a:91:d9:e0:5d:88:27:4e:c3:aa:cb:6f:41:de:7d:
d3:9b:40:42:3d:36:97:37:47:fa:ce:bd:f3:00:ae:09:3d:e5:
45:27:17:6c:cf:03:a0:87:77:f6:ac:de:f3:61:e6:93:1d:7b:
87:80:d5:0c:1a:62:54:26:91:6b:e0:7b:29:71:a0:69:c6:72:
24:ed:04:f8:1b:b5:2e:3a:76:10:91:9c:4e:7c:75:f5:08:3f:
e0:69:42:ea:51:92:13:35:db:be:47:da:ae:49:85:bd:8b:be:
91:6a:e9:78:75:c4:1a:74:9b:f1:03:67:93:3a:6a:0e:e6:b1:
76:dd:63:73:35:e1:d6:21:50:c3:4b:a9:08:1e:80:21:f4:20:
25:d8:c5:e9:b2:35:c5:c7:ae:2a:2b:2a:24:b4:ae:04:9a:b8:
b0:4a:81:86:df:69:11:c7:76:d3:4d:0b:30:4d:4f:70:68:a8:
83:88:6b:8d:9d:58:e8:49:44:93:1e:70:df:c1:b7:3d:f1:93:
9b:0a:10:37:96:23:82:c8:df:f8:c5:55:c5:d8:9c:4d:11:d2:
34:b6:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:40 2026 by rpki-client