Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
File: BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft (raw, json)
Hash identifier: EQQdJQTUuv0Rm6iiR/3XVVwdv4jgVHmqb7x57dP2A0s=
Subject key identifier: 81:03:C2:32:61:53:5E:C1:06:9B:6D:41:B5:6C:B8:29:FD:F2:56:61
Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
Certificate issuer: /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Certificate serial: 019F8FEBCCC84120027F15A0C3A483119B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
Manifest number: 0B70
Signing time: Thu 23 Jul 2026 17:00:22 +0000
Manifest this update: Thu 23 Jul 2026 17:00:22 +0000
Manifest next update: Fri 24 Jul 2026 17:00:22 +0000
Files and hashes: 1: BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl (hash: Qf/gZXKYsntxdPRjCtoEQgHVZ0bv2n24Z1lAhaaMELI=)
2: Uo9-W2ZV65vRiK7JyaEHx54nLwM.roa (hash: UJ7a0gKDZTd9yEENvLgRe2acSSS/hxOdpooHg+CZtds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:cc:c8:41:20:02:7f:15:a0:c3:a4:83:11:9b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Validity
Not Before: Jul 23 17:00:22 2026 GMT
Not After : Jul 24 17:00:22 2026 GMT
Subject: CN=8103c23261535ec1069b6d41b56cb829fdf25661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:8b:a9:dc:26:41:52:dd:53:71:ef:0d:81:
ed:d0:5e:03:01:2b:96:ad:e4:43:51:fa:d4:5e:7a:
74:9e:84:ce:32:a8:d6:59:d3:5b:68:7a:9a:1f:89:
18:0c:58:8e:54:60:7c:4d:3f:ea:69:14:3d:68:52:
2e:e8:8f:a1:a7:54:fb:93:54:6c:72:07:d5:4f:58:
ad:74:57:b2:d4:4f:bd:84:00:da:32:f3:dd:1b:e6:
64:37:2a:af:75:5e:8c:fb:9a:a5:67:fc:95:05:4b:
e4:83:69:b0:b5:ad:58:a1:ba:ff:db:91:73:8b:ec:
2b:a0:b5:99:13:6d:b0:35:9f:00:45:c4:31:33:bd:
92:b2:9c:20:6a:22:14:68:0b:0f:f3:1c:04:92:cf:
6d:9c:05:dd:40:75:31:90:02:16:0d:58:28:53:80:
74:0e:04:1e:08:e9:27:e4:73:27:b6:aa:c5:62:e2:
6b:83:53:a7:4d:70:28:cc:0b:9e:14:23:64:b3:04:
88:e5:44:f2:55:4e:3c:16:45:95:1b:bc:0e:6f:6d:
2c:18:80:82:74:9e:e4:a9:80:e9:20:03:1e:8e:a2:
ad:3f:28:82:77:6e:57:ef:66:4d:03:d3:71:56:59:
2b:5e:70:23:c2:b0:3d:ca:76:b7:7e:71:ec:e5:48:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:C2:32:61:53:5E:C1:06:9B:6D:41:B5:6C:B8:29:FD:F2:56:61
X509v3 Authority Key Identifier:
keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4a:a4:21:e1:d8:f3:6e:42:5e:98:e0:3a:62:cc:a9:7c:45:
40:21:0f:e5:d5:b0:1e:69:7c:76:8e:c8:22:0c:ec:e8:d7:44:
5c:c3:58:3d:82:49:08:fd:61:94:30:3b:20:a3:b2:5c:b3:7f:
1b:91:0e:c3:da:07:0e:fa:8e:fd:ca:fd:ef:9d:a9:9d:62:aa:
4d:e3:70:74:cd:10:e9:7b:24:26:d6:dc:42:29:a1:9b:95:96:
75:20:d1:10:6e:99:dd:99:97:ad:d1:39:3d:26:0d:da:f2:55:
e9:3f:0a:4b:4e:7c:c2:04:59:83:bc:eb:07:6f:a7:fa:d0:0a:
d7:bd:0e:19:5a:03:79:00:64:c3:de:9c:c9:1a:ba:88:50:f5:
0e:95:c6:c2:03:6c:95:09:de:ba:fb:2f:1b:6e:ae:29:a8:d5:
62:ee:cb:c0:5c:1f:a2:66:f5:d9:3c:6c:32:64:fe:ed:2e:34:
bf:f6:55:87:b1:93:83:07:2a:9a:29:c7:6a:90:7b:8f:06:4e:
81:98:56:e9:38:c2:7b:39:a7:9b:85:a7:36:14:29:0a:11:21:
ea:0c:07:17:2f:b9:32:76:e2:14:c4:cf:7a:ce:76:b5:dc:92:
32:7f:69:85:5f:59:74:96:86:f8:28:df:44:fe:c5:da:89:17:
51:9f:9f:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P68zIQSACfxWgw6SDEZsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTMyYzQzZjk2OWJhNDE3YmEzNmQwNzIxYjFkOWQ1MDYy
NGM0MGYwHhcNMjYwNzIzMTcwMDIyWhcNMjYwNzI0MTcwMDIyWjAzMTEwLwYDVQQD
Eyg4MTAzYzIzMjYxNTM1ZWMxMDY5YjZkNDFiNTZjYjgyOWZkZjI1NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu16LqdwmQVLdU3HvDYHt0F4DASuW
reRDUfrUXnp0noTOMqjWWdNbaHqaH4kYDFiOVGB8TT/qaRQ9aFIu6I+hp1T7k1Rs
cgfVT1itdFey1E+9hADaMvPdG+ZkNyqvdV6M+5qlZ/yVBUvkg2mwta1Yobr/25Fz
i+wroLWZE22wNZ8ARcQxM72SspwgaiIUaAsP8xwEks9tnAXdQHUxkAIWDVgoU4B0
DgQeCOkn5HMntqrFYuJrg1OnTXAozAueFCNkswSI5UTyVU48FkWVG7wOb20sGICC
dJ7kqYDpIAMejqKtPyiCd25X72ZNA9NxVlkrXnAjwrA9yna3fnHs5UgQmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEDwjJhU17BBpttQbVsuCn98lZhMB8GA1UdIwQY
MBaAFATjLEP5abpBe6NtByGx2dUGJMQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9Nc1FfbHB1a0Y3bzIwSEliSFoxUVlreEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMTZmMTUtYmNiNS00MjJjLTkyYTAt
ODI2YTQ4ZWVmZDk2LzEvQk9Nc1FfbHB1a0Y3bzIwSEliSFoxUVlreEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zMTZmMTUtYmNiNS00MjJjLTkyYTAtODI2YTQ4ZWVmZDk2
LzEvQk9Nc1FfbHB1a0Y3bzIwSEliSFoxUVlreEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUqkIeHY
825CXpjgOmLMqXxFQCEP5dWwHml8do7IIgzs6NdEXMNYPYJJCP1hlDA7IKOyXLN/
G5EOw9oHDvqO/cr9752pnWKqTeNwdM0Q6XskJtbcQimhm5WWdSDREG6Z3ZmXrdE5
PSYN2vJV6T8KS058wgRZg7zrB2+n+tAK170OGVoDeQBkw96cyRq6iFD1DpXGwgNs
lQneuvsvG26uKajVYu7LwFwfomb12TxsMmT+7S40v/ZVh7GTgwcqminHapB7jwZO
gZhW6TjCezmnm4WnNhQpChEh6gwHFy+5MnbiFMTPes52tdySMn9phV9ZdJaG+Cjf
RP7F2okXUZ+fXw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:55 2026 by rpki-client