Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: Ha3+qlI/Fa0qsl9J44cbdzew17/jAtu7BqiFCY5cvs8=
Subject key identifier: E2:44:ED:99:9F:05:9E:8E:F3:35:0A:37:17:FD:39:63:31:19:A8:C8
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 019D386691A51503AD5FB9733126ADCD0452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:19 +0000
Manifest this update: Sun 29 Mar 2026 07:02:19 +0000
Manifest next update: Mon 30 Mar 2026 07:02:19 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: X39txQdTCngWaIZEj/nf8dL5s4rrswZZsAb+Vi59jkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:91:a5:15:03:ad:5f:b9:73:31:26:ad:cd:04:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Mar 29 07:02:19 2026 GMT
Not After : Mar 30 07:02:19 2026 GMT
Subject: CN=e244ed999f059e8ef3350a3717fd39633119a8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:20:6b:ca:fd:fd:b5:72:52:c4:19:16:26:
b6:be:22:11:0b:44:2a:13:7b:01:d1:b7:10:35:e0:
aa:b5:31:4a:9e:cb:93:40:b6:51:1d:b0:4e:d4:87:
48:7c:4f:a0:30:91:0f:24:e4:8d:31:d3:2f:3d:aa:
99:e5:24:92:7c:3c:9e:78:a6:fb:24:9e:02:6d:c9:
9b:f0:e6:f7:e0:c0:f1:c9:65:6c:67:29:23:34:a7:
fc:1b:15:d9:67:fd:f5:51:91:25:bb:ae:e8:61:b0:
eb:5f:c2:c6:02:0d:9c:30:bc:59:eb:6e:97:cc:5a:
ff:e1:2e:91:f1:ef:b8:66:66:5c:e4:0b:17:8f:18:
5d:c8:c0:14:57:7a:ff:46:48:cb:43:12:1a:04:81:
72:4e:a6:f3:46:ff:ed:9d:a0:89:28:66:67:1a:d4:
3d:12:96:ba:c6:20:7a:76:8f:26:7b:74:e2:02:3c:
34:d4:c7:71:c4:fb:e9:b1:48:72:41:e5:2e:25:ec:
5a:69:d0:9c:f9:0b:09:99:fc:51:84:67:c7:df:d5:
d1:d2:39:12:75:ee:9e:02:26:8a:de:ff:2f:dc:40:
39:c2:d6:4e:1f:fc:8d:5f:36:97:8a:0b:a4:10:7e:
9b:d4:7d:90:ea:0b:11:2d:38:5f:8b:f6:16:e3:f5:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:44:ED:99:9F:05:9E:8E:F3:35:0A:37:17:FD:39:63:31:19:A8:C8
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8d:3c:86:fa:89:88:3f:81:61:f7:0c:bc:44:3c:a7:90:f1:
10:18:ff:12:b1:a5:f0:69:ee:a9:14:5e:ef:0b:3b:32:a2:53:
50:2c:00:50:e1:6e:25:ea:35:46:96:40:ea:8c:48:18:7f:b7:
05:c7:7c:f3:00:78:10:d0:9d:35:9d:8b:ac:04:3b:e4:75:17:
c7:4c:81:6a:43:d9:b5:49:1a:a5:ca:bb:56:c5:cd:7c:52:b4:
2d:93:bc:07:df:74:f5:9c:1e:76:6f:bb:d1:43:6a:d3:91:9a:
85:e7:1a:77:c1:43:b9:c1:f2:a4:9d:5b:59:0c:e5:dc:30:fb:
23:01:d5:3e:91:72:c2:19:87:cb:8c:e3:9c:f3:4f:dc:71:c0:
09:f7:c1:a9:c2:4f:52:ed:d7:ab:f0:90:80:0f:4a:2b:e1:86:
d6:d1:f6:f2:5c:d7:26:29:89:ff:85:c8:28:ba:39:52:86:14:
42:47:56:fc:e4:01:42:c1:6e:2e:5e:59:74:00:50:ff:1a:1a:
11:59:3d:6d:36:6f:75:21:fa:f3:ba:23:97:68:ab:42:d0:59:
10:27:48:22:52:41:34:a2:d9:f6:8e:67:3e:ee:d9:7a:e0:00:
33:90:39:e9:4a:1d:0e:d7:2b:26:35:f1:ca:e7:53:06:b3:b8:
71:14:42:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:52 2026 by rpki-client