Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: zmhd0qiGxr2WPk9YOcMBXmjYRen/pGRyz7ijBPn/6UU=
Subject key identifier: B2:1C:46:F3:24:6F:00:5E:F9:A9:9C:19:B2:E4:C5:BB:47:27:F9:9C
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 01A151089295AB45B98F43ABEFB3B41C4C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 1AAA
Signing time: Sun 18 Oct 2026 22:01:18 +0000
Manifest this update: Sun 18 Oct 2026 22:01:18 +0000
Manifest next update: Mon 19 Oct 2026 22:01:18 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: dI0LG+J/juw5Ka8/U0VLbDYP+aIlIGdA6uOZlq1ws5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:08:92:95:ab:45:b9:8f:43:ab:ef:b3:b4:1c:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Oct 18 22:01:18 2026 GMT
Not After : Oct 19 22:01:18 2026 GMT
Subject: CN=b21c46f3246f005ef9a99c19b2e4c5bb4727f99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:89:7d:16:74:7a:6f:ae:89:f3:8b:f8:c2:
94:ef:0d:90:0c:07:87:ba:95:21:63:76:31:e9:02:
c3:21:cf:bf:f7:42:66:f5:d5:d4:08:8a:9c:49:01:
66:61:7b:fe:c4:4a:6a:cb:bc:a0:3a:a6:c5:c6:39:
1c:27:11:14:1d:2a:21:b8:c2:82:19:f0:a9:fe:b1:
c1:37:5b:5e:b2:7a:2f:b9:29:5d:80:82:b0:83:88:
32:19:8e:bf:28:40:93:4e:36:7e:01:26:03:19:ac:
5e:8e:e2:a5:34:d5:4f:63:e3:c3:b6:ca:a2:ed:52:
85:65:3a:54:d4:d1:29:a0:ee:39:e8:98:f8:23:01:
b6:6e:8a:07:41:8d:b3:e0:24:2a:42:4a:b0:af:1e:
5d:09:56:c6:5b:06:eb:75:c8:86:a0:1d:53:b2:c1:
8f:37:1b:70:3f:b2:e3:0f:2e:aa:01:48:a5:c3:2a:
1d:03:f8:fd:a8:cb:aa:f0:1b:3f:0c:4a:a7:a7:c0:
8a:a2:fa:09:ef:b6:bc:18:12:69:58:dd:01:f7:5d:
42:07:3e:e1:3f:df:98:ca:e6:31:c8:ac:79:97:58:
61:b7:47:fb:e1:90:52:b1:8d:4c:28:f8:2b:74:f9:
9a:3d:94:0c:1a:73:68:83:70:be:fc:97:49:62:95:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1C:46:F3:24:6F:00:5E:F9:A9:9C:19:B2:E4:C5:BB:47:27:F9:9C
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bb:30:ed:38:e4:c0:cf:63:31:5d:3c:b8:01:82:54:8a:fc:
95:77:f0:13:52:f4:82:78:62:61:78:38:38:4a:02:65:fb:25:
34:c5:fc:94:51:bc:09:f7:48:a5:8d:48:21:d1:49:8d:a5:09:
cb:8e:94:ae:7c:b5:1d:c5:f7:ec:8a:f3:05:fe:8d:6b:5f:bd:
c7:ce:87:c0:6a:7f:89:18:8a:9c:69:28:0a:1f:d9:87:43:f4:
ea:bd:19:b9:47:15:28:0f:6a:61:c7:05:55:a6:f1:8d:dd:48:
27:96:32:39:a7:a4:3c:49:f9:98:05:39:ca:74:fb:3b:ab:e3:
22:4f:d5:56:8e:05:4c:8f:75:11:39:3a:fb:35:9c:7c:2c:eb:
42:ea:65:80:31:be:b7:57:ba:e1:2d:63:d2:54:5f:99:55:0c:
2d:4c:95:2e:46:47:3e:be:6c:1f:eb:6c:23:76:dd:ed:75:3d:
fb:52:3c:b0:0c:88:12:c7:0d:16:4e:93:ff:18:2e:da:d7:a3:
53:6e:c9:84:5a:16:ab:76:c9:72:ef:8a:1c:94:c2:7b:14:8c:
a8:e8:9a:23:ff:5d:d4:f9:a3:e3:bd:7e:e0:66:81:8b:9a:87:
73:ba:56:4e:f7:b5:81:0d:8a:de:f9:5c:c3:2c:fc:b8:b9:38:
4d:b3:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:06:48 2026 by rpki-client