Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: zROSUa/WrodnThskHkmwOYDFSRkLBRIslvu3fONSU20=
Subject key identifier: DE:90:E2:72:E2:43:35:95:25:61:61:42:E8:B4:D7:09:0F:7C:A5:FC
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 01A1DEA76BEF4A66EE469A671D437F92C1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 0CB1
Signing time: Sun 15 Nov 2026 10:01:16 +0000
Manifest this update: Sun 15 Nov 2026 10:01:16 +0000
Manifest next update: Mon 16 Nov 2026 10:01:16 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: eriRZbuiIHu3WM68GHupDPlmzWfuMnQgsZl/2T39lx0=)
2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:6b:ef:4a:66:ee:46:9a:67:1d:43:7f:92:c1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Nov 15 10:01:16 2026 GMT
Not After : Nov 16 10:01:16 2026 GMT
Subject: CN=de90e272e243359525616142e8b4d7090f7ca5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:d7:4f:d5:0f:3b:2f:c3:0c:35:09:6a:7c:
a2:64:3b:cd:8f:fa:79:8e:e7:06:93:24:16:02:b9:
8b:b5:9d:5e:8b:e0:50:7c:9f:76:2f:76:3c:f6:a2:
c0:48:3c:cb:06:a3:15:99:df:b2:db:e9:63:85:87:
cb:81:10:5e:f2:51:6d:32:b6:76:24:33:5f:47:76:
88:ca:0f:54:65:34:f7:c8:ac:c0:14:4e:8c:dd:c4:
b0:dc:54:73:fb:78:44:b4:69:5e:ef:c7:49:a7:36:
c5:ba:db:7f:a4:7f:64:e7:e0:0e:a9:f8:f7:5c:c8:
5e:61:11:12:c2:86:a2:0c:8a:00:34:6a:81:09:1d:
7e:cb:70:4e:b0:d0:4c:40:1c:ad:bc:6f:40:54:f9:
2e:a5:a3:be:83:1f:80:29:9c:e4:ff:06:e6:42:86:
b9:d6:0b:cc:c9:02:62:6f:05:d0:92:25:ee:e9:19:
b5:98:21:4f:16:98:6e:ed:4a:18:f8:7c:4d:7e:30:
03:69:e9:c8:54:99:2f:aa:17:d3:71:5e:8d:6d:0d:
88:30:a2:aa:80:15:20:54:42:7c:59:dc:35:ea:43:
73:ab:5e:ae:b0:16:ef:58:88:c9:95:09:dd:92:8b:
45:2c:e9:69:c0:d7:2a:eb:6f:8c:5a:b5:3f:15:2f:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:90:E2:72:E2:43:35:95:25:61:61:42:E8:B4:D7:09:0F:7C:A5:FC
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a9:36:81:a4:e9:1b:71:c2:e3:d3:9c:6b:de:aa:f3:3b:9c:
b0:3f:c7:6f:47:5f:c2:d8:ed:4f:58:9c:ff:cb:80:02:a2:38:
ea:b7:6f:30:7f:fd:01:01:5a:0c:05:9f:c3:b4:6a:74:8d:91:
87:df:65:8a:6b:9d:0b:e8:57:bb:c6:e0:2c:2b:c2:e4:4a:ca:
2c:7a:59:8b:51:62:37:0c:6f:3c:88:ca:8e:03:80:fa:4a:41:
38:c8:c1:06:0e:fe:be:9a:75:ea:96:75:d4:0d:45:99:0b:d7:
42:06:74:63:b2:b2:b3:c4:1f:92:be:7e:7e:6b:d2:61:d7:ae:
93:7d:13:92:54:1e:49:a6:74:16:36:c0:95:a0:5a:71:92:d9:
18:68:1f:c8:32:14:e8:f7:08:fd:3b:18:0b:67:56:b1:14:1e:
f2:f3:a4:ca:ba:53:75:69:8b:61:d4:72:9f:d1:54:ae:65:28:
6e:4f:b7:c7:7c:8a:48:7b:80:02:49:b0:9f:92:fd:4d:4a:8b:
5f:cf:22:ff:ec:97:03:5a:1f:ef:75:27:b9:9b:6e:fa:ce:83:
ee:9f:ba:0f:45:d4:9c:81:fb:ac:35:22:95:bf:66:8e:c5:be:
23:1b:a1:17:17:dd:9b:3c:6c:5c:d1:e5:fc:82:39:82:5a:9b:
94:08:eb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:20:09 2026 by rpki-client