Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: wJ2WUB8xeM4jMXWugoR2Q6Z6seXK8x1cEj0xdSQDEAk=
Subject key identifier: 67:5E:CF:60:AB:8B:FC:34:80:BC:D3:FE:BA:01:AA:88:93:02:DF:E1
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 019D2816F7A781D5F4AB53FDB287AD3EF3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: o4+wcrvQwKfqG8AvC9ezHwQpD+fNbr4rng/37/8HOto=)
2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f7:a7:81:d5:f4:ab:53:fd:b2:87:ad:3e:f3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=675ecf60ab8bfc3480bcd3feba01aa889302dfe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:ef:5e:74:3b:3c:0d:65:55:bf:f1:55:77:
7e:59:ee:33:a3:2e:2f:2b:1b:a7:7b:5e:fb:11:b5:
8c:68:b6:7e:bb:ff:c5:87:f3:85:63:8f:c5:84:66:
eb:23:d8:12:f3:db:f5:51:10:5b:73:97:84:ac:38:
53:19:56:69:67:99:a2:91:23:11:7e:87:ba:ae:b2:
4a:31:87:75:f6:02:07:0f:29:58:1c:fb:13:54:bb:
2e:90:dc:b5:24:36:1f:da:48:be:e8:66:0a:ef:3b:
29:b5:9d:c7:c1:52:bb:bf:01:49:6c:de:f9:1a:b2:
d4:de:3c:77:7b:be:5a:b4:a8:01:c5:bc:3d:0c:ba:
02:ea:19:7c:31:49:82:1c:0e:f1:f0:e1:13:a8:d5:
42:86:3f:74:4f:e1:53:2c:d3:6e:0e:dd:51:80:05:
f1:22:ee:93:84:88:e5:c6:d9:46:05:55:b4:ae:a4:
48:82:b4:51:20:6b:81:7b:6a:43:0c:2b:38:91:ba:
db:0e:e7:2d:59:67:e4:e9:17:63:08:4f:cf:5a:eb:
bc:33:de:85:52:5e:a4:f0:e8:a5:a6:90:e0:e5:06:
f6:bd:06:ea:2e:2d:02:d9:c3:f1:88:d9:c0:40:ff:
a6:32:84:ab:1b:d1:8f:e8:85:09:4e:56:fb:d0:d5:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5E:CF:60:AB:8B:FC:34:80:BC:D3:FE:BA:01:AA:88:93:02:DF:E1
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:80:91:e3:10:d7:cf:42:9b:cd:c7:ab:ac:e9:1c:87:22:d6:
13:db:bb:2e:af:e4:b8:12:e9:6d:92:1e:bb:a5:bf:1d:47:72:
4c:83:40:ba:3e:1b:38:67:cf:b1:f6:95:93:4e:1e:a7:78:df:
92:e7:47:37:3b:b4:b8:ae:91:9f:1a:dc:85:1f:b5:b4:0b:17:
f1:5f:9b:7e:36:e1:9a:40:9e:71:2d:c8:32:73:27:0e:0f:98:
fe:9c:85:70:aa:f5:6c:61:f9:db:09:15:70:77:34:e4:68:45:
13:db:23:6f:97:b0:14:3e:3e:76:1c:13:b8:4a:3c:8d:3b:73:
71:bc:c7:50:0d:0e:99:e5:8c:9c:21:a9:bf:f5:60:3a:39:20:
87:ed:44:23:68:ec:b8:ce:9f:1a:ab:75:61:5e:c6:ad:60:26:
e6:55:6b:10:ab:1c:94:4c:38:2d:e7:a4:a7:10:33:bd:6f:27:
39:b3:06:68:89:dc:36:67:bf:74:f9:81:d2:47:7a:a1:b9:c4:
c5:c3:fc:64:8a:c8:c1:ba:3a:bb:31:e8:92:42:8c:32:6c:f2:
82:6d:fc:56:c8:8f:64:14:3b:5f:52:6d:f2:98:9e:ee:db:33:
5e:69:e5:98:96:c6:cd:6b:ec:c1:b5:45:a8:a2:41:1e:1a:e3:
ab:61:f7:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvengdX0q1P9soetPvP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTUwMjQwYWY0MGViMmFkNjBmYzMwNzhhYzMzZmM1MzU1
ZDQ0MTYwHhcNMjYwMzI2MDMwMTI2WhcNMjYwMzI3MDMwMTI2WjAzMTEwLwYDVQQD
Eyg2NzVlY2Y2MGFiOGJmYzM0ODBiY2QzZmViYTAxYWE4ODkzMDJkZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0HvXnQ7PA1lVb/xVXd+We4zoy4v
Kxune177EbWMaLZ+u//Fh/OFY4/FhGbrI9gS89v1URBbc5eErDhTGVZpZ5mikSMR
foe6rrJKMYd19gIHDylYHPsTVLsukNy1JDYf2ki+6GYK7zsptZ3HwVK7vwFJbN75
GrLU3jx3e75atKgBxbw9DLoC6hl8MUmCHA7x8OETqNVChj90T+FTLNNuDt1RgAXx
Iu6ThIjlxtlGBVW0rqRIgrRRIGuBe2pDDCs4kbrbDuctWWfk6RdjCE/PWuu8M96F
Ul6k8OilppDg5Qb2vQbqLi0C2cPxiNnAQP+mMoSrG9GP6IUJTlb70NXD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdez2Cri/w0gLzT/roBqoiTAt/hMB8GA1UdIwQY
MBaAFATlAkCvQOsq1g/DB4rDP8U1XUQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAt
MzNhOWE2ZjQyZjBjLzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAtMzNhOWE2ZjQyZjBj
LzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOICR4xDX
z0KbzcerrOkchyLWE9u7Lq/kuBLpbZIeu6W/HUdyTINAuj4bOGfPsfaVk04ep3jf
kudHNzu0uK6RnxrchR+1tAsX8V+bfjbhmkCecS3IMnMnDg+Y/pyFcKr1bGH52wkV
cHc05GhFE9sjb5ewFD4+dhwTuEo8jTtzcbzHUA0OmeWMnCGpv/VgOjkgh+1EI2js
uM6fGqt1YV7GrWAm5lVrEKsclEw4LeekpxAzvW8nObMGaIncNme/dPmB0kd6obnE
xcP8ZIrIwbo6uzHokkKMMmzygm38VsiPZBQ7X1Jt8pie7tszXmnlmJbGzWvswbVF
qKJBHhrjq2H3KQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:29 2026 by rpki-client