Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft
File: bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft (raw, json)
Hash identifier: j9CI5UytK3UknQfVCMFR19/QwSpz7+pS29N5J35PMaI=
Subject key identifier: 53:1A:07:AF:F9:4F:10:8C:80:54:60:ED:1A:E1:37:61:FF:2A:E2:2C
Authority key identifier: 6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC
Certificate issuer: /CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc
Certificate serial: 019D28849A6AB92E20693B6383DA3413F2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft
Manifest number: 0164
Signing time: Thu 26 Mar 2026 05:01:12 +0000
Manifest this update: Thu 26 Mar 2026 05:01:12 +0000
Manifest next update: Fri 27 Mar 2026 05:01:12 +0000
Files and hashes: 1: Iuspe14G5QMlx5dSWpRrg05Ny9A.roa (hash: 7VI2D5eUznCeqx3Pi1ABWFNpA0b/azhPfenbDmlUGG4=)
2: bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl (hash: XZB1WRMWOLUrKUG40FUgrHNV/OeHrwIG2Q5y+u2D4dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9a:6a:b9:2e:20:69:3b:63:83:da:34:13:f2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc
Validity
Not Before: Mar 26 05:01:12 2026 GMT
Not After : Mar 27 05:01:12 2026 GMT
Subject: CN=531a07aff94f108c805460ed1ae13761ff2ae22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:af:87:c1:56:d9:a0:d1:c3:59:e5:7e:7d:
ed:e1:4d:6d:5e:1c:73:07:65:4d:64:28:46:88:a8:
40:34:94:37:54:aa:c4:a2:0f:70:8f:89:01:76:bc:
17:ce:ca:a1:e5:1e:4b:d4:91:98:84:2a:8a:48:10:
f1:fa:66:41:01:87:b4:9f:a6:2e:b5:e1:8c:3d:fc:
0c:8c:1f:9c:c9:ef:33:f9:e7:d4:45:4a:66:8d:be:
04:e8:4a:ed:65:90:51:7e:0c:a5:47:cc:9c:f4:0e:
08:ff:ef:6b:b8:1c:4a:3b:5a:44:ac:3f:c7:71:04:
00:df:87:19:fa:60:5d:1d:c5:5e:94:26:a6:0f:57:
cf:a9:3d:52:49:8e:e5:2f:72:85:ea:12:f4:02:14:
e5:63:0d:ea:ae:4b:94:3f:4c:70:e8:48:5d:3e:8f:
a2:51:05:d7:eb:56:b2:62:9f:bf:b9:06:aa:76:56:
5f:13:f0:e1:3b:08:d2:93:e5:cd:07:15:24:d2:9d:
44:bb:08:75:7b:41:70:9b:ef:b5:a4:7e:e7:a9:d1:
21:2c:e2:11:7e:90:02:5f:3d:46:f1:9a:1b:1f:aa:
18:f0:2f:7f:45:05:47:2d:95:a2:c9:4e:25:02:ee:
3d:0b:35:4d:2f:83:7f:9c:50:b1:3a:28:2d:96:75:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:07:AF:F9:4F:10:8C:80:54:60:ED:1A:E1:37:61:FF:2A:E2:2C
X509v3 Authority Key Identifier:
keyid:6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:12:bb:9a:95:1a:e7:1d:7e:39:41:8f:16:89:1d:6b:43:30:
61:d6:b9:bd:68:a1:53:d2:db:e1:c0:b1:13:a7:94:18:53:aa:
7b:3d:3a:51:03:ec:fc:e3:85:78:56:9e:7b:11:18:a0:da:b7:
dc:f3:6c:8f:3a:46:6d:64:ec:c5:67:7d:d6:1c:67:e1:d1:7f:
99:38:5f:54:7e:3c:f2:85:71:3a:91:eb:5e:f6:bc:79:b5:e6:
2e:3f:e1:6b:48:59:05:5c:bb:a8:20:d8:06:d6:0a:40:8e:84:
90:bd:8f:18:6b:f0:01:5d:75:7c:83:87:87:ce:d1:98:4b:55:
81:22:95:3e:f0:f4:b2:e0:ac:81:c3:04:e1:e4:87:6f:5b:56:
4d:d7:c2:23:98:de:59:26:e0:5b:cb:fc:29:7d:d7:ba:e6:69:
0c:9b:ae:a1:3b:06:a8:75:63:51:35:37:6a:62:f0:ba:ef:6a:
ec:1f:f0:1e:ce:a2:94:0d:ed:e0:98:11:c5:e0:d1:21:7d:05:
92:65:b8:87:3c:f8:df:2c:60:2c:b2:20:8f:27:c1:f3:1b:72:
91:e2:89:7f:27:b7:cf:06:a0:e7:a3:ba:d4:d2:26:6d:15:e7:
23:a0:41:f0:9c:12:05:26:f1:db:e5:63:17:79:8d:ba:c3:fd:
9a:28:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:15 2026 by rpki-client