Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: G+VYbiHcMVtz7lgiA+6+nmtqhNyyg1rp+mX1OjmVvx0=
Subject key identifier: 0D:72:11:C1:DF:E6:07:1C:A4:38:2F:32:44:F4:EF:2F:0A:C2:AD:44
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 01A0CC6C5595AED0AFC323CDE40E67DC2917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 0C23
Signing time: Wed 23 Sep 2026 04:00:46 +0000
Manifest this update: Wed 23 Sep 2026 04:00:46 +0000
Manifest next update: Thu 24 Sep 2026 04:00:46 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: hsnsw4fNjIqAFvmoXUgj0zSyWtcKW4wMpEIZztpXZRo=)
2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:55:95:ae:d0:af:c3:23:cd:e4:0e:67:dc:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Sep 23 04:00:46 2026 GMT
Not After : Sep 24 04:00:46 2026 GMT
Subject: CN=0d7211c1dfe6071ca4382f3244f4ef2f0ac2ad44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:87:29:cf:f7:ac:f2:3f:3e:eb:f9:d1:c7:
bb:83:7a:01:d3:35:31:68:dd:6d:a6:51:b9:6d:1a:
f1:d6:6c:52:1c:71:8d:26:a7:5f:cf:8a:79:0d:f3:
0e:e7:7e:ed:ac:65:24:2c:20:6c:18:f3:bd:62:b8:
5d:68:da:9e:11:4f:44:18:0b:1d:f1:52:e0:ca:30:
e4:9b:19:2b:90:da:af:d4:77:33:cf:33:2b:90:23:
14:ca:e5:ee:80:15:02:98:1c:27:cd:c1:2d:4f:51:
5b:53:38:af:d3:37:f7:41:3d:c6:bf:80:1f:80:7e:
67:e7:ec:46:c4:c5:c2:21:7b:c9:4d:97:3d:07:ff:
a4:f3:16:83:cc:47:1e:af:59:6c:de:ed:94:68:53:
36:d0:84:a3:01:83:31:92:8c:91:cc:ab:79:39:7f:
f1:f1:cc:11:c0:21:b4:67:de:ab:82:b6:90:23:f6:
49:32:38:98:63:ca:0b:52:7d:78:6e:96:04:44:e3:
4f:62:78:02:9b:55:ed:be:78:df:bc:08:2e:fb:8c:
71:5b:5a:d4:0a:10:aa:bb:a5:e7:2c:b9:5e:21:f0:
14:e8:16:58:e4:bf:02:db:2b:f8:45:39:e2:65:17:
c2:a2:37:46:43:a3:a0:0b:99:cb:18:3f:54:5f:a5:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:11:C1:DF:E6:07:1C:A4:38:2F:32:44:F4:EF:2F:0A:C2:AD:44
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b7:6e:85:69:a8:7a:bd:4a:3c:4b:ed:05:65:42:90:ae:25:
ca:bb:38:ef:1b:9e:c0:f9:a2:6e:41:c3:99:d5:e6:04:32:25:
37:8f:c5:d1:0a:34:57:95:55:8c:60:a0:ff:7f:4e:d1:84:35:
3b:61:a1:9d:86:0f:ce:80:e7:9c:5c:e9:2c:37:95:0f:84:4b:
2b:0d:15:23:c2:2b:db:f7:bb:6a:52:bb:41:ec:ba:2f:42:e1:
bd:40:2b:bd:f2:b3:a5:d6:85:05:cb:ab:0b:9a:f5:f4:33:3e:
d9:7a:43:1b:a7:aa:0b:af:26:92:fe:21:86:6f:1b:5f:b8:87:
c9:45:dc:2a:79:a2:10:e5:1b:09:b3:72:5f:33:f8:00:74:b5:
d4:9d:9b:01:08:30:b4:9b:c2:cb:5f:f0:a5:cd:06:53:c8:c5:
40:48:2b:e5:3e:e5:15:6d:44:b7:82:27:71:58:09:89:fa:45:
64:fc:5e:ad:82:bf:d1:35:94:7b:11:2f:a4:1e:ae:de:f4:df:
6c:a9:67:cb:b3:82:f7:a0:25:12:c2:c1:2f:91:83:9c:cc:ee:
fa:f2:4c:11:08:b9:75:18:12:5b:42:72:35:af:f6:e1:a2:d2:
63:a8:85:55:42:76:bd:cb:87:ca:e1:97:8d:39:ca:7c:d6:60:
f5:e5:f0:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMbFWVrtCvwyPN5A5n3CkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ODdhNGFjYTU4MWQ4ZWJjZGZlMjRiNjVmMWU3MGExMmYy
ODlhNzgwHhcNMjYwOTIzMDQwMDQ2WhcNMjYwOTI0MDQwMDQ2WjAzMTEwLwYDVQQD
EygwZDcyMTFjMWRmZTYwNzFjYTQzODJmMzI0NGY0ZWYyZjBhYzJhZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3GHKc/3rPI/Puv50ce7g3oB0zUx
aN1tplG5bRrx1mxSHHGNJqdfz4p5DfMO537trGUkLCBsGPO9YrhdaNqeEU9EGAsd
8VLgyjDkmxkrkNqv1HczzzMrkCMUyuXugBUCmBwnzcEtT1FbUziv0zf3QT3Gv4Af
gH5n5+xGxMXCIXvJTZc9B/+k8xaDzEcer1ls3u2UaFM20ISjAYMxkoyRzKt5OX/x
8cwRwCG0Z96rgraQI/ZJMjiYY8oLUn14bpYERONPYngCm1XtvnjfvAgu+4xxW1rU
ChCqu6XnLLleIfAU6BZY5L8C2yv4RTniZRfCojdGQ6OgC5nLGD9UX6Wd9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1yEcHf5gccpDgvMkT07y8Kwq1EMB8GA1UdIwQY
MBaAFAaHpKylgdjrzf4ktl8ecKEvKJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEt
MmQyOGExOTEzNWZkLzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEtMmQyOGExOTEzNWZk
LzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrduhWmo
er1KPEvtBWVCkK4lyrs47xuewPmibkHDmdXmBDIlN4/F0Qo0V5VVjGCg/39O0YQ1
O2GhnYYPzoDnnFzpLDeVD4RLKw0VI8Ir2/e7alK7Qey6L0LhvUArvfKzpdaFBcur
C5r19DM+2XpDG6eqC68mkv4hhm8bX7iHyUXcKnmiEOUbCbNyXzP4AHS11J2bAQgw
tJvCy1/wpc0GU8jFQEgr5T7lFW1Et4IncVgJifpFZPxerYK/0TWUexEvpB6u3vTf
bKlny7OC96AlEsLBL5GDnMzu+vJMEQi5dRgSW0JyNa/24aLSY6iFVUJ2vcuHyuGX
jTnKfNZg9eXw5Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:26:14 2026 by rpki-client