Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier: n5Q0JpojYVgrUSzRz1/op7cE/zA50O90MMNNZa9trag=
Subject key identifier: 33:7A:EA:42:DC:22:DD:BB:F8:A7:39:DA:7E:FF:D2:F2:DD:1D:98:DE
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial: 019D28F2CCD833E15A440E307BC7CF3856BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number: 1582
Signing time: Thu 26 Mar 2026 07:01:33 +0000
Manifest this update: Thu 26 Mar 2026 07:01:33 +0000
Manifest next update: Fri 27 Mar 2026 07:01:33 +0000
Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: KNVughYqKl76NQ/mJ4xa4yv8RCg49QuOTLeyB/3kIr8=)
2: WooYK0ZFDaGgHVC8DJ-VYW0Dmbw.roa (hash: lZyCoxT1QmpmA3Qk/5sG1h73ylWFJ3LJg+hw5CFIWuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:cc:d8:33:e1:5a:44:0e:30:7b:c7:cf:38:56:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Validity
Not Before: Mar 26 07:01:33 2026 GMT
Not After : Mar 27 07:01:33 2026 GMT
Subject: CN=337aea42dc22ddbbf8a739da7effd2f2dd1d98de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:c1:ec:84:c2:aa:30:5c:5d:63:6d:e3:53:
41:e8:e3:d0:a1:17:9f:b3:b4:8d:ce:ef:d9:5a:93:
e1:f1:3c:81:68:2b:95:3f:77:b9:5b:fb:b7:be:f8:
8f:27:00:a2:21:40:ec:d9:34:34:5e:dd:66:92:f7:
3d:8a:71:07:29:6e:5f:b6:a0:82:dc:42:d8:fe:b2:
c8:8b:a0:ae:d0:d4:4f:19:b0:ca:9b:b4:75:30:26:
e7:35:d3:f2:d9:e8:5e:45:c9:ff:c4:95:ac:16:72:
fe:5e:64:90:47:32:f8:a1:60:45:56:67:d8:4e:af:
c2:95:84:a3:50:bc:0e:ad:13:7c:87:ce:fd:48:12:
81:18:a4:39:af:1c:78:ac:bd:7d:0d:2f:81:ce:1b:
65:38:5e:ba:f7:84:5e:04:a2:1a:88:d3:91:76:de:
ca:7f:0d:60:64:73:10:1d:9a:65:7c:e7:ff:a0:b7:
ea:c5:c6:60:09:41:50:d9:49:16:1d:3f:e3:90:c1:
ec:bc:b0:60:0d:b0:47:94:ee:c8:6d:9e:56:ab:aa:
e2:f1:96:41:b6:f8:9d:1c:f9:15:d6:36:61:89:73:
0f:f3:7f:5e:6f:cd:17:f4:90:30:30:a1:51:eb:45:
ae:8c:72:03:64:8d:ce:2b:42:d3:83:30:98:a2:ad:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7A:EA:42:DC:22:DD:BB:F8:A7:39:DA:7E:FF:D2:F2:DD:1D:98:DE
X509v3 Authority Key Identifier:
keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f8:2f:93:9a:5c:a1:c3:62:47:21:7b:bb:3c:91:c9:db:70:
ec:31:5f:21:b4:e9:be:e4:c7:5f:d8:42:76:34:59:20:b1:2b:
d4:6e:64:a2:7d:b5:5e:4f:05:83:d0:6c:d4:6b:8a:61:04:af:
ad:02:b2:5e:0d:b1:ed:4e:3d:e3:07:79:01:15:e0:9d:0c:9c:
09:9f:84:2d:6a:d0:5f:78:22:29:e4:ec:2f:f6:cb:f9:a7:a1:
84:73:7b:23:e0:a6:8c:b7:c3:09:4f:a8:b3:03:99:ff:7f:17:
d2:64:96:c3:f4:9c:ad:58:74:34:0d:14:b9:d4:45:ef:e2:20:
1f:4e:bf:76:b9:54:8a:b9:28:5b:bc:3d:9b:0a:3e:7b:43:68:
c4:fd:bf:bf:fe:d4:c7:00:a1:75:e6:85:61:fc:d2:1a:96:be:
11:2c:7b:f9:b7:98:34:7c:98:88:9b:79:74:05:18:ab:ad:e7:
67:0e:14:4a:40:4f:53:94:e2:cd:7e:b6:98:f1:91:ac:ca:8c:
b0:0e:e8:22:cb:2a:6f:e1:9f:4c:a3:30:2d:36:f2:12:ca:5b:
49:f3:1d:6b:b3:8b:72:4b:7b:92:cd:bc:86:43:d2:3e:fc:19:
7b:bb:dc:4b:d4:2b:03:0b:86:82:51:a2:3e:d9:5f:ef:f9:52:
99:2d:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:56 2026 by rpki-client