Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: yked2mLdW1RRp6U4qy23LCofjtb/B8jMEXQlwkZ+wiE=
Subject key identifier: D2:73:AF:47:8A:B8:EE:46:D6:AC:11:EF:C3:4B:E4:BB:DA:5D:98:6F
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 01A0D0B65E6BC7537CED9B8F2AEBADA6BA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 00:00:07 +0000
Manifest this update: Thu 24 Sep 2026 00:00:07 +0000
Manifest next update: Fri 25 Sep 2026 00:00:07 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: na1gWGsodZWuVExK/pELPr3XXFrLikacUhAPaXSGuHU=)
2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:5e:6b:c7:53:7c:ed:9b:8f:2a:eb:ad:a6:ba:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Sep 24 00:00:07 2026 GMT
Not After : Sep 25 00:00:07 2026 GMT
Subject: CN=d273af478ab8ee46d6ac11efc34be4bbda5d986f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:18:77:7c:06:b8:07:a3:a1:85:4e:3e:6f:
f6:bf:07:64:7f:4a:9e:3c:d9:da:a9:0c:f1:a4:c8:
2c:b4:25:93:a4:ce:86:99:94:46:41:44:30:b5:0d:
63:1e:f0:10:a7:9b:21:be:d0:de:67:b9:c4:ea:a5:
1d:65:0c:d0:73:6e:3a:20:72:66:62:09:b1:9a:9f:
3a:a8:b5:ba:65:9f:5d:fe:02:cc:20:20:9c:c8:fa:
0f:76:35:38:a0:0c:a6:8d:b5:70:a0:d4:2e:79:d5:
6e:8f:b0:cb:9a:f8:41:c0:29:bc:bf:67:0f:ef:72:
22:1a:79:52:6f:90:05:04:f0:93:88:a6:05:51:9c:
e5:10:b4:d2:a9:05:bd:58:c3:c3:31:c6:a0:5f:62:
ff:56:99:3f:f1:53:83:9a:8f:d0:14:59:15:43:f2:
28:e1:d1:e0:93:cf:52:58:f9:d0:eb:d4:2e:fe:0c:
16:9e:f9:20:4e:a1:c3:64:87:9f:0f:cc:94:a1:f9:
51:ba:b5:b2:9b:96:88:bc:ed:f5:c8:51:99:82:02:
5b:03:3a:f4:db:9d:ad:1e:f1:03:80:34:d1:81:09:
a9:1b:8e:99:29:3c:55:e6:53:ac:42:55:cc:ee:ad:
e4:82:1f:4e:d9:45:8f:3f:2a:42:26:a4:5e:46:ed:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:73:AF:47:8A:B8:EE:46:D6:AC:11:EF:C3:4B:E4:BB:DA:5D:98:6F
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5d:cc:0a:53:df:66:51:b7:19:5d:3c:bc:fd:56:be:f8:db:
29:7f:0d:1c:cc:f2:78:6c:e7:ce:d4:95:57:a4:a0:e4:47:7f:
05:1e:f1:21:40:23:d1:97:bf:3d:e4:e1:f5:ed:85:2d:a8:7f:
7f:bc:d6:ef:84:ed:27:0a:96:f6:b9:05:1b:c2:83:0b:0a:a1:
f6:19:86:bb:ab:e9:ac:e2:ea:ec:37:ad:20:04:49:98:5b:34:
8c:13:3d:8f:8e:65:a2:72:b4:03:b7:27:04:5e:3d:74:69:72:
ae:ba:0e:97:71:b5:68:08:e2:48:cc:5d:9e:23:27:c2:3b:8a:
c0:49:28:67:20:43:0e:0b:bc:48:a6:72:7a:45:d8:e6:a0:d9:
4f:05:2e:c1:b6:a4:f1:82:27:77:7c:99:c6:89:a1:53:a4:e6:
2e:0e:d5:2a:c5:85:fa:e3:c7:94:0d:3b:ac:67:60:d7:92:20:
9a:94:e0:59:ca:00:32:dc:35:51:91:f4:ce:3c:08:8d:7c:bc:
98:61:43:b7:18:af:4b:d2:a9:1f:5b:fe:81:9f:49:4c:0e:0a:
67:18:2e:5d:dc:74:28:5a:5d:17:c5:3b:1c:c1:94:7d:a5:07:
60:e4:c8:e9:ad:7c:90:40:6b:55:34:f2:4c:0c:37:fa:6d:5c:
d5:ed:d8:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQtl5rx1N87ZuPKuutprplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTUwMjQwYWY0MGViMmFkNjBmYzMwNzhhYzMzZmM1MzU1
ZDQ0MTYwHhcNMjYwOTI0MDAwMDA3WhcNMjYwOTI1MDAwMDA3WjAzMTEwLwYDVQQD
EyhkMjczYWY0NzhhYjhlZTQ2ZDZhYzExZWZjMzRiZTRiYmRhNWQ5ODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM4Yd3wGuAejoYVOPm/2vwdkf0qe
PNnaqQzxpMgstCWTpM6GmZRGQUQwtQ1jHvAQp5shvtDeZ7nE6qUdZQzQc246IHJm
Ygmxmp86qLW6ZZ9d/gLMICCcyPoPdjU4oAymjbVwoNQuedVuj7DLmvhBwCm8v2cP
73IiGnlSb5AFBPCTiKYFUZzlELTSqQW9WMPDMcagX2L/Vpk/8VODmo/QFFkVQ/Io
4dHgk89SWPnQ69Qu/gwWnvkgTqHDZIefD8yUoflRurWym5aIvO31yFGZggJbAzr0
252tHvEDgDTRgQmpG46ZKTxV5lOsQlXM7q3kgh9O2UWPPypCJqReRu3FwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJzr0eKuO5G1qwR78NL5LvaXZhvMB8GA1UdIwQY
MBaAFATlAkCvQOsq1g/DB4rDP8U1XUQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAt
MzNhOWE2ZjQyZjBjLzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAtMzNhOWE2ZjQyZjBj
LzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd13MClPf
ZlG3GV08vP1WvvjbKX8NHMzyeGznztSVV6Sg5Ed/BR7xIUAj0Ze/PeTh9e2FLah/
f7zW74TtJwqW9rkFG8KDCwqh9hmGu6vprOLq7DetIARJmFs0jBM9j45lonK0A7cn
BF49dGlyrroOl3G1aAjiSMxdniMnwjuKwEkoZyBDDgu8SKZyekXY5qDZTwUuwbak
8YInd3yZxomhU6TmLg7VKsWF+uPHlA07rGdg15IgmpTgWcoAMtw1UZH0zjwIjXy8
mGFDtxivS9KpH1v+gZ9JTA4KZxguXdx0KFpdF8U7HMGUfaUHYOTI6a18kEBrVTTy
TAw3+m1c1e3YsQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:49:54 2026 by rpki-client