Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier: U4InO1FrcwUtgeYtA1/TgKarkHpip6b26JFPecAuRic=
Subject key identifier: DB:60:90:A0:CB:4C:14:54:BA:9D:F0:91:57:15:58:9C:EE:E5:CE:FC
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial: 019D2B4EF71BC109CB04501213672DB21CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 18:01:28 +0000
Manifest this update: Thu 26 Mar 2026 18:01:28 +0000
Manifest next update: Fri 27 Mar 2026 18:01:28 +0000
Files and hashes: 1: 0k6yeX0L5XdNUvHFP70s6xMMn5M.roa (hash: WcJmVDT/EJf9CPgLP7/H/uUbqnwpeSXGEJKY3KaRY/o=)
2: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: YkWTzTWPIvl8R7/I6nZ+SfUwbk/oeqUbwogSYx3cONk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:f7:1b:c1:09:cb:04:50:12:13:67:2d:b2:1c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Validity
Not Before: Mar 26 18:01:28 2026 GMT
Not After : Mar 27 18:01:28 2026 GMT
Subject: CN=db6090a0cb4c1454ba9df0915715589ceee5cefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:1f:cc:5e:18:ae:cd:10:72:d0:85:25:8f:
3c:90:5e:f7:69:72:7b:85:c2:71:f9:29:f7:7e:8b:
1e:15:31:cf:49:1d:91:10:a0:97:69:94:25:7c:bb:
06:82:85:d8:c0:e9:03:e2:1e:80:5b:3d:f2:e4:13:
e7:3e:0a:d5:11:48:57:98:09:48:0d:e4:ac:b4:31:
bd:f1:09:0e:b3:93:0e:f2:ab:ee:60:dc:cc:08:d9:
28:71:72:d0:08:12:16:40:af:17:17:b9:ca:71:35:
d6:da:f4:92:d2:f0:e8:56:94:13:07:b9:f8:84:cc:
49:7b:59:33:5b:6d:38:21:a8:4d:5d:cb:bc:da:3e:
26:05:5f:4b:21:de:80:12:f7:00:d0:6b:d8:ee:21:
bb:ce:c9:9e:85:ca:b5:3b:ee:c8:0f:b1:d0:73:9e:
76:25:41:4a:d9:9f:d6:a7:ec:d4:be:c7:59:ca:08:
22:88:0e:26:77:26:be:64:d1:19:22:a7:e6:35:c0:
1e:29:4d:01:7b:a4:1b:16:a5:e1:ff:a0:51:fe:1e:
e0:26:bd:12:09:a3:22:2e:2d:a7:5f:37:b8:03:b9:
21:86:93:f1:2f:a2:ab:09:c3:42:43:ed:b3:47:fd:
28:ef:56:70:6f:1b:a5:5c:64:7e:27:93:9b:b2:1d:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:60:90:A0:CB:4C:14:54:BA:9D:F0:91:57:15:58:9C:EE:E5:CE:FC
X509v3 Authority Key Identifier:
keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:19:94:cb:9f:8a:bb:23:1d:2e:cb:e7:58:08:ea:7e:e7:d7:
80:51:6c:a1:18:21:fe:08:50:03:83:5b:15:61:98:52:33:96:
9d:62:a2:51:13:1a:1c:f4:b8:5b:19:c2:3a:3c:3a:5c:9a:9f:
50:0f:01:97:9e:e6:12:e8:f9:cf:1b:13:7b:f0:55:b9:af:0c:
9f:ee:9b:81:96:9f:da:2d:50:68:37:06:90:d5:01:40:34:96:
9e:2d:73:a7:d6:b5:34:6b:78:43:ae:bf:17:14:b5:55:65:b8:
6a:07:0d:c1:b5:33:90:ce:82:6a:9f:c6:a2:e9:15:8c:7a:6a:
8b:2c:fb:70:7c:eb:dd:0c:21:62:e4:50:ec:07:46:4c:5b:73:
45:4c:dd:2b:6d:e0:1d:a7:a3:ea:f1:c3:d4:d1:93:2c:84:fe:
19:21:bf:8b:32:6a:b3:57:9a:a5:41:08:72:5f:f1:f5:a9:46:
78:50:30:3e:f6:c0:99:66:2e:aa:89:b6:7a:04:bf:49:b2:11:
5b:bd:c0:48:50:ff:31:5d:cd:b6:5a:66:7f:9b:85:81:c0:9b:
45:f0:37:ec:3e:60:5d:eb:4e:0c:98:18:84:61:62:21:05:79:
ea:c3:2c:a8:55:53:79:b8:f5:d2:66:4f:95:d6:41:81:27:ff:
4e:26:07:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTvcbwQnLBFASE2ctshzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZWVlM2YwOWFiZWI2YTQzNGU5OTA1Y2JjMGIwMDAwNDRl
NzlkZTcwHhcNMjYwMzI2MTgwMTI4WhcNMjYwMzI3MTgwMTI4WjAzMTEwLwYDVQQD
EyhkYjYwOTBhMGNiNGMxNDU0YmE5ZGYwOTE1NzE1NTg5Y2VlZTVjZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzscfzF4Yrs0QctCFJY88kF73aXJ7
hcJx+Sn3foseFTHPSR2REKCXaZQlfLsGgoXYwOkD4h6AWz3y5BPnPgrVEUhXmAlI
DeSstDG98QkOs5MO8qvuYNzMCNkocXLQCBIWQK8XF7nKcTXW2vSS0vDoVpQTB7n4
hMxJe1kzW204IahNXcu82j4mBV9LId6AEvcA0GvY7iG7zsmehcq1O+7ID7HQc552
JUFK2Z/Wp+zUvsdZyggiiA4mdya+ZNEZIqfmNcAeKU0Be6QbFqXh/6BR/h7gJr0S
CaMiLi2nXze4A7khhpPxL6KrCcNCQ+2zR/0o71ZwbxulXGR+J5Obsh1EkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtgkKDLTBRUup3wkVcVWJzu5c78MB8GA1UdIwQY
MBaAFATu4/CavrakNOmQXLwLAABE553nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80YzI4MzUtYmE3Mi00MWVhLWJiZDUt
NDgxM2Q4NTUwMmQ3LzEvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80YzI4MzUtYmE3Mi00MWVhLWJiZDUtNDgxM2Q4NTUwMmQ3
LzEvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRmUy5+K
uyMdLsvnWAjqfufXgFFsoRgh/ghQA4NbFWGYUjOWnWKiURMaHPS4WxnCOjw6XJqf
UA8Bl57mEuj5zxsTe/BVua8Mn+6bgZaf2i1QaDcGkNUBQDSWni1zp9a1NGt4Q66/
FxS1VWW4agcNwbUzkM6Cap/GoukVjHpqiyz7cHzr3QwhYuRQ7AdGTFtzRUzdK23g
Haej6vHD1NGTLIT+GSG/izJqs1eapUEIcl/x9alGeFAwPvbAmWYuqom2egS/SbIR
W73ASFD/MV3Ntlpmf5uFgcCbRfA37D5gXetODJgYhGFiIQV56sMsqFVTebj10mZP
ldZBgSf/TiYHJg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:57 2026 by rpki-client