Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
File: BOlxI0nYWcXmno45CKeE-LRErx8.mft (raw, json)
Hash identifier: Fc6ds3jOD6yWLkKj7jLjZQLkBPLd7LCG1fRRYqTo/JU=
Subject key identifier: FC:81:F1:AD:35:8C:38:DB:B8:2B:55:92:CD:9F:14:19:DF:C2:71:9B
Authority key identifier: 04:E9:71:23:49:D8:59:C5:E6:9E:8E:39:08:A7:84:F8:B4:44:AF:1F
Certificate issuer: /CN=04e9712349d859c5e69e8e3908a784f8b444af1f
Certificate serial: 019E1DFE0DEFADD44355863E7C64FB868EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOlxI0nYWcXmno45CKeE-LRErx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
Manifest number: 4B
Signing time: Tue 12 May 2026 21:00:49 +0000
Manifest this update: Tue 12 May 2026 21:00:49 +0000
Manifest next update: Wed 13 May 2026 21:00:49 +0000
Files and hashes: 1: BOlxI0nYWcXmno45CKeE-LRErx8.crl (hash: MMg673K0MWHvQ8WimdHklakiNGCjhzXmBl/33JsgrcU=)
2: adpBP4jM1W4t4AVnML6vQBZ_yh4.roa (hash: LvDq1gWnjhUnCFVJ+3Mcx5kpSzUPOxKKyLQHkkuIht4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOlxI0nYWcXmno45CKeE-LRErx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:0d:ef:ad:d4:43:55:86:3e:7c:64:fb:86:8e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e9712349d859c5e69e8e3908a784f8b444af1f
Validity
Not Before: May 12 21:00:49 2026 GMT
Not After : May 13 21:00:49 2026 GMT
Subject: CN=fc81f1ad358c38dbb82b5592cd9f1419dfc2719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8a:c2:26:5e:ee:7f:11:f7:83:d1:4b:cc:64:
10:3c:59:d1:58:13:b7:e7:e2:41:9e:f7:0f:37:5b:
34:d8:02:f2:e6:b0:d1:cb:53:67:bb:86:23:be:e4:
23:08:74:4e:f8:6c:35:be:e8:30:dd:8b:c0:bc:b1:
ff:63:58:2d:8d:d9:75:9c:a3:db:43:91:83:6d:b9:
e4:b3:6d:86:8e:ba:c6:04:77:30:11:03:53:62:cb:
ee:d8:64:1f:97:64:19:28:e2:14:9a:06:87:b6:f3:
8d:63:91:3b:fe:1b:6b:3d:43:09:f8:23:42:a8:00:
87:0d:8f:bd:d0:22:d9:d9:14:26:f2:da:56:e6:6b:
2a:4e:10:d7:eb:dc:53:cf:9a:07:db:52:80:6c:49:
ba:30:e0:b9:b0:e8:ac:30:62:5f:74:6b:e7:fc:68:
b8:9f:d1:19:34:88:6e:57:aa:f3:d5:65:75:be:51:
f9:28:94:ac:73:38:0e:79:11:1c:9a:6c:42:36:fb:
b6:5f:d6:f3:2f:d5:ee:3f:74:b9:db:11:86:28:c2:
94:6d:13:7c:5e:1d:ed:75:50:ed:64:4f:71:99:cc:
5c:f1:62:7f:a0:7a:51:be:18:3a:8d:d6:4b:cf:1f:
12:c6:68:7f:84:00:a2:16:ce:ec:23:22:13:e7:c4:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:81:F1:AD:35:8C:38:DB:B8:2B:55:92:CD:9F:14:19:DF:C2:71:9B
X509v3 Authority Key Identifier:
keyid:04:E9:71:23:49:D8:59:C5:E6:9E:8E:39:08:A7:84:F8:B4:44:AF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOlxI0nYWcXmno45CKeE-LRErx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ea:44:1b:62:90:e3:19:20:0e:ec:97:96:a8:a7:bc:9d:bf:
85:ef:13:4c:d2:81:40:ff:f9:f7:3c:90:51:81:1e:4b:eb:e8:
99:af:9d:f3:b9:1b:8a:69:a8:6f:a7:4c:f4:51:54:a1:ea:0f:
1b:f5:75:84:32:81:00:71:92:9b:00:79:dc:13:82:5e:6d:e7:
74:9d:ab:92:01:86:de:79:31:a9:4f:c2:e7:14:98:13:10:65:
13:16:1a:83:cc:7e:4b:fb:45:9f:b9:04:9e:6b:aa:a4:0e:85:
fa:d6:0f:e9:08:85:6f:ec:f8:b2:43:31:da:84:f1:12:24:b3:
2a:aa:2d:44:de:64:5a:8a:c6:5e:9a:04:b5:f0:3e:38:11:f3:
80:43:31:f8:35:ef:76:f4:72:8a:50:86:e7:e6:28:ab:59:8f:
91:fb:1a:b6:1c:bf:cd:c7:c3:9f:c8:5e:36:6c:90:b6:79:8f:
90:97:d1:ca:93:ae:43:42:7a:4f:c2:e9:b0:4c:1f:93:73:c2:
a8:7f:dc:c3:97:d1:0e:aa:fe:4d:4b:57:d9:f6:75:b3:0a:6e:
57:4c:7d:db:6f:07:d0:db:06:ec:a9:39:d8:07:4f:30:dc:93:
69:30:1b:dc:a1:c5:c4:59:b1:0c:d7:f8:bc:8e:1c:86:ce:a1:
13:0f:9e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:24 2026 by rpki-client