Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File: boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier: 3ZeymPZEAUqu41pHm/bbH9y9E5CmcCw6fjkCqZWvR5Y=
Subject key identifier: 52:A6:FE:02:82:A9:C8:FD:06:FF:88:F7:3B:78:7C:9E:13:54:8B:A0
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial: 01A17C28E5A2B464FB551744103D7D0023A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 07:00:17 +0000
Manifest this update: Tue 27 Oct 2026 07:00:17 +0000
Manifest next update: Wed 28 Oct 2026 07:00:17 +0000
Files and hashes: 1: Jb2gO1BQcML39rnxFGep61phXGU.roa (hash: 8e9M6TIpgOCh+hUbFPaNx/cdQqfZysi89tk+qyctjYM=)
2: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: hv+F52v5B2QqBQqiH43y7qkxxxRuD1oDL3gaWS41el0=)
3: mNpdXKWJkISb2lRdTODfubt1kNs.roa (hash: ySSUuCm7wtMq5dX67A2of7qfSBu2XTsgfJ1fOTuaKd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:e5:a2:b4:64:fb:55:17:44:10:3d:7d:00:23:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Validity
Not Before: Oct 27 07:00:17 2026 GMT
Not After : Oct 28 07:00:17 2026 GMT
Subject: CN=52a6fe0282a9c8fd06ff88f73b787c9e13548ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:3a:c8:f6:c9:97:98:c4:85:64:26:65:06:
03:d5:42:12:00:11:9e:21:87:1d:81:17:59:25:2c:
42:0f:b4:e8:21:80:c6:ef:da:59:bd:c0:4a:3e:88:
5a:49:04:78:57:cb:a8:6f:c3:4f:db:02:bd:43:0d:
23:92:5e:7d:c7:fc:fa:a3:56:8e:06:1b:7e:af:92:
b6:72:dd:a9:0a:2b:7b:81:b0:40:06:19:62:85:1f:
4d:0b:03:3d:99:0c:51:f0:e0:ec:16:a3:ca:7e:25:
37:9d:a1:d9:66:a7:91:fa:1b:b8:42:de:5b:db:8c:
db:a3:5c:a3:e0:cd:61:a1:1f:ab:0e:18:f9:35:77:
d7:19:55:17:07:06:5e:0f:2e:b2:ad:26:14:78:b0:
7b:bf:62:08:68:1b:6e:1c:64:f3:a7:73:59:c6:a3:
78:43:0f:cd:dd:ac:c9:48:60:e3:79:21:62:01:d4:
59:3d:de:ec:00:52:83:8f:91:ad:4c:02:cb:54:f7:
97:37:3b:54:8b:a2:75:3b:33:3e:9e:bb:16:d2:dd:
5d:ed:32:a9:bc:ac:d6:d0:03:2f:ed:a8:50:d4:21:
df:29:f6:09:ec:21:71:3f:9e:15:da:f3:ae:8a:d9:
b9:e5:1e:cc:8b:dd:28:be:7e:e7:2f:dc:35:a2:dc:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A6:FE:02:82:A9:C8:FD:06:FF:88:F7:3B:78:7C:9E:13:54:8B:A0
X509v3 Authority Key Identifier:
keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:eb:89:94:68:37:59:9c:87:3b:fb:56:16:65:0c:ce:58:be:
ce:76:62:75:84:9e:63:20:c8:0e:72:dc:d3:13:ea:36:93:cd:
42:94:c4:46:b5:0d:8b:65:0b:5a:a9:61:aa:3e:51:a9:d0:dd:
9e:9a:be:af:66:89:5d:bc:3d:58:2c:0b:04:96:86:fe:fa:47:
87:b8:d9:20:d1:05:35:c3:70:3f:29:5f:fb:c5:ea:8a:4b:7f:
b0:76:75:a0:58:7d:28:5f:71:21:0d:ae:7c:11:5d:0d:c9:70:
9b:b2:40:b8:eb:83:11:04:e4:26:5b:a8:22:ad:b0:f4:bd:1b:
7e:1d:97:13:04:cc:01:35:eb:7d:22:bb:a5:15:1c:f9:62:c0:
b4:2b:d1:9e:46:5e:35:57:e3:57:db:61:97:1e:8a:72:37:d7:
5f:03:6f:ae:ba:c1:d0:c1:ec:34:f9:87:03:4b:57:0e:08:dc:
2e:13:5c:8f:b2:da:b5:11:17:ff:47:1e:6d:16:58:74:d9:a1:
c8:07:a2:32:8f:b7:fd:77:d7:01:d4:fa:06:a3:c3:c5:70:e9:
53:af:40:5e:e0:41:ee:23:d9:a3:d6:9a:8e:5b:e3:1f:8d:21:
56:25:1f:7a:5f:31:57:a8:75:1d:ba:33:d3:b9:cd:f5:4c:71:
7b:1b:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:29:09 2026 by rpki-client