Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: N/70Sd24iOx45A6iLvR9q1UlwksaJI1WLUwiS6SQXmI=
Subject key identifier: 3C:A4:4B:30:30:9C:E0:0E:0F:61:AC:34:82:5A:69:76:13:21:12:00
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019F8FB5593F434AF51A60288F589D066BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 0B7F
Signing time: Thu 23 Jul 2026 16:00:54 +0000
Manifest this update: Thu 23 Jul 2026 16:00:54 +0000
Manifest next update: Fri 24 Jul 2026 16:00:54 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: Nzg0wCGqMbq9PCvQLPjGpLHU6gpQkGDt1noShd/SWI0=)
2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:59:3f:43:4a:f5:1a:60:28:8f:58:9d:06:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Jul 23 16:00:54 2026 GMT
Not After : Jul 24 16:00:54 2026 GMT
Subject: CN=3ca44b30309ce00e0f61ac34825a697613211200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:fd:97:b9:8b:c5:9b:da:72:20:c9:93:aa:
de:2a:60:12:08:3a:30:08:9b:39:a5:80:79:da:2c:
34:a9:95:59:82:8f:87:83:6a:a0:f7:dd:ae:46:e6:
ee:9f:59:50:55:22:92:26:ce:55:ad:00:84:76:16:
86:b0:9d:63:34:c6:28:51:04:07:7a:3d:88:d2:c2:
74:44:51:9f:82:53:46:2a:17:6c:e3:d7:8f:09:82:
90:d9:9d:75:ec:e0:48:0d:8d:1f:1d:09:83:72:98:
f1:44:ea:82:69:7a:34:41:04:b7:8a:b7:d2:8e:5f:
24:63:dd:c1:1d:c8:2b:9f:a2:a6:5d:a5:ef:65:0c:
a3:8f:39:df:a0:04:55:19:8f:e0:2b:87:04:10:4b:
6b:9e:db:00:e9:e9:1f:a3:39:ce:1d:4e:18:a7:bd:
0c:b7:dc:c6:15:03:3e:48:a6:22:c6:01:4b:f4:ee:
18:18:ec:49:d8:a7:1f:27:4c:86:f5:93:a3:d4:de:
e8:08:86:fc:7b:80:90:26:9b:9a:5d:71:4a:04:94:
25:0b:8b:92:48:d4:e3:dd:9a:0c:8d:7d:75:cb:72:
ca:45:92:02:ed:79:40:1f:5f:d8:24:62:e2:0d:cd:
e7:ef:88:2d:60:bd:2f:c8:b5:26:63:92:1a:57:cc:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A4:4B:30:30:9C:E0:0E:0F:61:AC:34:82:5A:69:76:13:21:12:00
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:98:f6:01:d9:a2:50:a0:d4:be:4c:58:e3:55:3c:d9:f9:17:
b0:c6:0c:ac:05:0c:6d:dc:73:89:5a:ba:d9:a7:5d:3d:ad:7a:
26:3b:a4:ba:de:45:70:ec:3d:5f:18:0d:3e:6a:aa:a2:15:55:
58:01:fc:f9:ff:d7:62:7a:16:9c:fa:8e:cb:a2:0b:0a:32:67:
5e:06:ed:4b:ec:6b:46:bc:af:12:2a:4d:6f:9f:47:d9:12:5f:
cf:67:67:09:91:b5:4f:46:2b:02:4f:99:a5:95:5a:96:63:ab:
5b:2a:a1:97:7d:2e:36:1d:22:99:8b:a8:1b:68:5b:d5:2d:e5:
66:ea:de:f3:26:26:87:03:0b:f7:be:8a:82:ca:87:1d:93:fd:
d9:a8:d2:ed:99:0c:85:ef:9d:bc:63:60:a1:78:09:65:61:0c:
e7:1b:7d:8c:9e:30:4f:1e:e7:ca:c1:75:5c:5f:dd:44:1a:36:
20:c3:58:8a:33:2d:d5:5f:0a:2b:eb:a0:71:8d:fb:39:d7:24:
fe:ac:4e:a2:72:a0:ca:9a:63:93:de:70:1a:b8:92:3e:f3:cc:
4d:0b:89:b9:10:af:85:2a:da:b7:b5:77:2c:b8:e2:f0:70:c5:
2c:c6:7d:05:03:aa:d4:59:03:3c:e2:29:36:c3:64:d4:67:b6:
c5:d5:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:36 2026 by rpki-client