Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: XBsRXW9Td1QXuQuomt0eZrdC5G3yWiZaoqANplufVcs=
Subject key identifier: AF:AF:1D:35:57:BC:A9:56:3C:A2:C4:4C:D5:EF:88:8D:E4:11:1B:83
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 01A1DD26EC2B7C039ACDA5FC038141B48CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 03:01:17 +0000
Manifest this update: Sun 15 Nov 2026 03:01:17 +0000
Manifest next update: Mon 16 Nov 2026 03:01:17 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: z0OwbybEpf4VmLBhleDaBpQBdW46YfX3uoR3riZnMWE=)
2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:ec:2b:7c:03:9a:cd:a5:fc:03:81:41:b4:8c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Nov 15 03:01:17 2026 GMT
Not After : Nov 16 03:01:17 2026 GMT
Subject: CN=afaf1d3557bca9563ca2c44cd5ef888de4111b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:77:c1:c2:4b:8b:18:b1:3d:3a:90:c3:34:
fa:d6:4f:cd:91:0b:08:84:b6:a3:63:54:47:94:49:
a5:c6:8b:a1:c8:31:6f:bb:87:d0:08:1f:9e:c9:85:
95:11:05:d5:6e:e8:c8:ef:30:4d:1f:10:2d:3b:83:
e5:5a:de:68:36:24:69:dc:a9:92:38:3e:5d:e6:8a:
06:58:3f:c4:49:e9:63:97:d5:ba:41:33:fb:6e:62:
49:af:50:4e:ac:f4:3e:8a:8a:d2:fa:a4:d6:c3:dc:
d7:b9:3e:f9:69:95:e7:2d:08:90:e9:0e:7b:84:53:
48:f8:15:16:c4:86:4d:6b:96:8c:70:96:7a:50:04:
21:e9:a5:81:c5:81:e8:14:9a:36:f9:bc:a6:85:bd:
75:fc:b5:c5:48:b1:68:03:3c:43:31:1f:cb:80:bc:
6f:6b:33:0a:6a:2a:d7:00:ad:ce:f9:66:78:d0:a6:
87:c4:68:82:10:8d:be:91:50:25:96:a5:7b:19:ee:
0f:04:57:e0:4b:4c:5b:63:4f:06:2d:08:b8:ce:c0:
52:7c:42:15:2a:ba:c8:5b:fa:7f:a1:81:eb:c3:6e:
b0:9f:2d:a6:11:0c:a6:5d:70:2d:9f:15:e0:df:bb:
86:36:45:02:74:e5:21:39:ee:7d:9d:04:06:cc:9b:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AF:1D:35:57:BC:A9:56:3C:A2:C4:4C:D5:EF:88:8D:E4:11:1B:83
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fb:20:bb:2c:07:d3:54:bf:fb:75:01:35:38:c6:98:80:b9:
f4:9a:00:45:b8:e5:4d:b0:52:0e:df:00:ac:e3:4a:bd:59:0c:
82:f8:76:ef:c9:2c:32:3d:ec:34:8c:37:45:66:19:ab:15:77:
cc:2b:7b:cf:52:4e:14:d5:7e:8b:b3:50:5c:80:ff:60:d6:f9:
c9:7a:c2:56:dc:87:ea:19:33:ca:d6:27:b4:18:bc:1f:92:31:
c9:d2:07:02:b3:7a:1b:ba:7c:98:2b:b8:dd:5c:fa:e6:6a:3b:
d5:0c:d2:d6:1b:d3:64:cc:0c:81:e4:6f:25:4a:43:cd:52:cf:
0e:07:d2:eb:b7:4f:6b:72:79:a5:8a:7f:e5:12:9c:d7:46:52:
51:de:ca:e5:a6:3e:06:91:81:b0:59:fe:8c:24:a5:8b:51:6c:
31:01:e3:fe:3a:6c:09:3f:a7:37:a7:10:23:b4:f5:ff:e5:e9:
10:65:56:c6:4e:3a:46:89:25:9a:c2:6a:8c:33:1a:a9:02:f8:
f3:b9:67:c3:a5:75:b2:61:1b:b5:4b:e6:a8:b4:50:9c:fd:45:
70:a9:13:bb:ab:4b:d7:f7:0f:bc:27:46:ae:68:15:7f:26:d8:
79:ca:33:86:69:be:da:37:a3:dc:91:d2:fb:a1:86:fe:35:78:
7b:5d:b5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:04:37 2026 by rpki-client