Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
File: BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft (raw, json)
Hash identifier: NpJPA0u5xvKpe2wWCmRkqMyXc0NxpE78hMIY6/LNNkI=
Subject key identifier: C0:E0:A3:45:95:A8:C0:6B:D9:27:06:D3:2E:06:40:D5:CC:38:54:D8
Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
Certificate issuer: /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Certificate serial: 01A0EB8AAF7DEEBAC0A5000298ED2803A240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
Manifest number: 0C24
Signing time: Tue 29 Sep 2026 05:02:09 +0000
Manifest this update: Tue 29 Sep 2026 05:02:09 +0000
Manifest next update: Wed 30 Sep 2026 05:02:09 +0000
Files and hashes: 1: BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl (hash: l2ZU8VMaXSsWkyjZoYFhCdZslqAuHsWT1Ubc6H1+bTk=)
2: Uo9-W2ZV65vRiK7JyaEHx54nLwM.roa (hash: UJ7a0gKDZTd9yEENvLgRe2acSSS/hxOdpooHg+CZtds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:af:7d:ee:ba:c0:a5:00:02:98:ed:28:03:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Validity
Not Before: Sep 29 05:02:09 2026 GMT
Not After : Sep 30 05:02:09 2026 GMT
Subject: CN=c0e0a34595a8c06bd92706d32e0640d5cc3854d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:bb:17:dc:82:9a:ae:a0:80:ae:57:20:bd:
6d:4b:46:54:eb:d4:68:7a:e1:64:c9:5c:a0:79:2b:
a3:2a:22:1a:47:88:3e:3a:30:da:b6:c6:4b:28:c7:
43:ae:7b:77:54:49:dc:39:60:70:02:da:1e:41:f4:
a3:eb:22:2c:e6:56:97:26:a4:a8:f6:b0:95:6f:a1:
99:af:21:72:43:96:1a:13:af:0a:ac:3b:13:ad:80:
10:3e:bf:da:dc:5d:60:45:0e:c3:0e:54:f2:4e:03:
ea:64:99:f4:58:31:a8:f1:10:4f:31:61:4a:64:37:
90:e9:05:9a:e2:e3:3c:32:22:51:46:9f:89:ea:34:
43:fc:1a:94:53:b3:f9:24:08:86:53:ec:31:d0:16:
93:33:ea:cd:d2:b9:26:66:ca:be:a8:64:93:79:91:
2a:98:ea:ae:24:09:8f:0a:89:c3:d8:68:27:63:fb:
63:ae:87:bd:49:c9:02:ac:f3:63:ae:c1:ee:eb:91:
6f:4b:1f:cc:c1:fa:19:70:b1:fc:f1:f1:ea:e7:58:
d1:70:c5:28:09:f0:95:2e:9d:71:a3:ac:1c:6f:a9:
d7:bd:b8:13:88:9b:70:1c:08:3a:ca:1f:53:22:19:
de:dd:0b:d1:5c:1e:33:b5:9e:f3:36:2d:ac:62:04:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E0:A3:45:95:A8:C0:6B:D9:27:06:D3:2E:06:40:D5:CC:38:54:D8
X509v3 Authority Key Identifier:
keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f2:05:56:21:fc:25:f3:b3:c4:29:29:e0:1a:e8:4d:7e:c9:
29:f4:93:88:ab:b3:81:43:69:51:53:93:4e:ea:d3:92:c4:d0:
d1:aa:d5:e3:b2:0b:69:26:59:b4:fe:8e:31:85:85:66:7f:88:
a1:30:2e:ca:83:51:f6:8a:10:0d:43:8f:4f:82:23:36:56:62:
88:77:56:b0:64:d0:53:7e:50:62:b9:65:d7:6a:b0:d1:ad:27:
e6:19:b0:b0:51:8c:26:99:3c:87:1a:09:51:11:5b:4d:45:a3:
3b:74:bd:ac:29:21:a9:f7:60:05:cd:b9:75:ec:85:ba:52:bf:
ac:54:01:09:58:48:9f:f7:5f:49:a5:38:33:6d:3d:8d:5d:f6:
8c:e6:cb:b0:34:eb:cb:4e:77:2f:eb:46:e5:7b:e5:cc:65:52:
fd:ad:e0:4e:fc:14:c1:ff:1d:23:4c:f3:7f:31:61:82:a1:58:
71:86:8a:d1:8b:0a:eb:e4:3d:05:6c:64:22:44:a8:d2:a4:d5:
13:45:58:28:09:aa:c7:4c:e2:c2:31:25:6a:e4:f6:7f:74:f2:
5e:a1:37:1f:10:47:0b:6f:ab:85:e6:c6:b8:b6:4a:77:b1:84:
ab:d0:ac:54:39:5b:6d:f9:a0:5a:b8:24:fb:59:61:e1:71:ec:
34:14:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:38:53 2026 by rpki-client