Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: MAbS8N2j9UBtsv/On27PN7ixo1jCHmR+PG0AKWBadfo=
Subject key identifier: BD:88:2A:F8:15:FD:D9:EE:E0:46:49:DC:DC:79:39:91:21:54:4F:AB
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 019F9211372EEDDFB659EFB47D5F11459D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 03:00:29 +0000
Manifest this update: Fri 24 Jul 2026 03:00:29 +0000
Manifest next update: Sat 25 Jul 2026 03:00:29 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: rhB8ewvt452GcuK7b54R709curTdouUOL5iDpt15SG8=)
2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:37:2e:ed:df:b6:59:ef:b4:7d:5f:11:45:9d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Jul 24 03:00:29 2026 GMT
Not After : Jul 25 03:00:29 2026 GMT
Subject: CN=bd882af815fdd9eee04649dcdc79399121544fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:d6:51:08:ac:05:df:c5:44:f3:e3:bf:11:
ce:29:2f:be:d5:0f:4d:08:0f:d9:34:4e:af:c7:90:
eb:5c:a0:c3:99:99:cc:db:31:aa:c2:ea:5e:23:2a:
18:55:1a:f8:07:62:a5:47:66:44:0f:89:88:c0:74:
ff:0e:45:72:30:00:cb:82:fd:0a:f9:6a:af:41:9d:
eb:c0:47:ed:a3:e8:bb:82:d0:b3:72:04:89:f0:90:
43:f2:09:58:a8:a6:61:15:55:39:18:77:60:a7:6a:
6e:d3:3f:39:97:c8:c7:39:85:5d:05:7f:67:b5:7e:
a0:a4:34:2c:c6:d9:51:ed:7b:8c:b9:a4:ff:cf:c0:
2d:4e:ed:fb:23:7d:44:e7:09:79:68:12:61:54:5a:
b3:60:07:a8:c3:79:a9:ed:76:5b:e5:fa:21:2c:d5:
b4:b3:d6:f7:64:f7:c3:79:e3:af:67:e9:8e:32:da:
08:88:9c:d0:99:f7:05:47:96:3a:10:1d:1a:8e:0c:
33:97:e9:14:45:60:de:1c:08:72:51:61:37:64:4f:
5c:f7:15:76:aa:c4:33:b5:b5:82:a2:4f:ff:18:f9:
30:08:00:20:8e:4f:ff:5f:ab:42:1a:1d:ce:13:0e:
06:6c:a4:98:1e:8e:b0:53:c8:9a:56:d2:98:8c:30:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:88:2A:F8:15:FD:D9:EE:E0:46:49:DC:DC:79:39:91:21:54:4F:AB
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5d:11:e0:fb:7a:1f:52:22:a3:71:73:57:2d:43:4c:e5:a6:
15:98:c5:f9:9f:4f:ce:1e:fc:fc:17:55:95:a3:58:d7:83:94:
78:27:2a:a9:d6:dd:32:78:fa:47:47:fb:4c:95:08:fe:c6:f1:
17:7e:4a:82:a0:c2:32:19:be:50:33:ea:f0:a8:d9:9a:d2:06:
24:01:b3:a1:b3:8f:94:4c:f4:67:e9:8a:29:28:5c:05:df:3d:
9e:9e:a3:f9:4f:5b:cb:1d:5f:a1:10:76:6b:90:fb:52:be:77:
f0:df:e9:9e:ae:5a:8b:8c:3d:ff:36:14:5c:9e:9a:20:1e:2f:
42:5f:be:2d:be:98:5d:66:12:1f:56:b8:4f:65:46:d3:ba:35:
e6:fa:7f:a1:77:dd:86:d6:0e:3b:39:18:1b:9f:f8:fc:3d:a4:
f4:88:2d:7c:5d:67:b0:09:71:6a:47:1e:d0:55:28:c7:f3:f7:
e9:0c:c0:89:ce:de:59:02:1e:d1:c3:08:6b:47:c3:3b:c1:74:
4a:5f:71:43:ae:4d:35:48:85:d1:88:bc:ba:fe:c2:23:7d:7f:
e5:25:d8:34:7c:f0:99:93:05:28:27:92:db:85:9c:f9:f8:cd:
b4:a0:3a:42:fb:d3:fe:8c:6e:48:47:b3:80:51:66:fa:b4:43:
ad:30:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:32 2026 by rpki-client