
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File: boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier: Jlf0ahFOqMGZ42poc/hocSMSqgK8tgd8N2hoUzJvDEE=
Subject key identifier: 2D:CB:C7:93:57:D4:3C:9E:51:FF:82:23:20:91:44:1A:FA:2C:A0:5D
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial: 01A088D52D9A2912ADB76E3FF3D12FE013B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 01:01:07 +0000
Manifest this update: Thu 10 Sep 2026 01:01:07 +0000
Manifest next update: Fri 11 Sep 2026 01:01:07 +0000
Files and hashes: 1: Jb2gO1BQcML39rnxFGep61phXGU.roa (hash: 8e9M6TIpgOCh+hUbFPaNx/cdQqfZysi89tk+qyctjYM=)
2: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: Pg6GuQEWHIaDGpjGaeb9TpCZ1N01aEaqaLd7N3mYgnQ=)
3: mNpdXKWJkISb2lRdTODfubt1kNs.roa (hash: ySSUuCm7wtMq5dX67A2of7qfSBu2XTsgfJ1fOTuaKd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:2d:9a:29:12:ad:b7:6e:3f:f3:d1:2f:e0:13:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Validity
Not Before: Sep 10 01:01:07 2026 GMT
Not After : Sep 11 01:01:07 2026 GMT
Subject: CN=2dcbc79357d43c9e51ff82232091441afa2ca05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:f5:9c:24:87:ea:47:d0:3a:49:c8:ea:2f:
5d:aa:c2:d3:1d:36:5e:3a:ab:2f:59:af:40:df:48:
7d:25:91:55:11:19:71:96:32:d4:ea:ba:1d:b5:a2:
a9:5b:05:e3:78:a2:19:1a:77:22:d8:ac:56:16:57:
5d:23:fc:1e:26:9f:dc:a8:6d:47:d7:1f:85:e5:8a:
56:86:2c:e7:b2:16:16:37:6f:59:5b:04:7e:0e:d0:
d6:2d:34:f7:d6:4e:1a:e5:be:79:fb:a4:ab:f6:e7:
f6:46:37:2e:59:e5:28:ea:60:c6:f2:0d:3d:3f:66:
03:66:10:c0:43:ba:35:9f:18:c2:56:ef:ba:eb:a7:
73:4a:9e:5d:36:10:fb:4c:3c:b5:f8:66:14:5b:80:
67:10:86:7b:45:5a:c5:b9:e9:54:03:00:be:4a:37:
9e:d5:66:fd:39:11:a9:fd:5d:9e:a9:71:72:6e:0b:
b1:47:ef:09:85:2e:0f:1d:29:32:2c:38:95:bc:2f:
1b:ec:67:71:f1:4d:ae:95:03:3f:c1:73:63:b6:14:
47:95:4c:02:f2:02:6a:9c:b2:6f:d7:3a:de:27:2c:
cb:f1:c2:a3:47:24:e0:c1:7e:1b:35:d0:d6:68:f7:
61:79:09:05:d3:d1:b8:98:9e:c1:4a:23:ab:41:74:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CB:C7:93:57:D4:3C:9E:51:FF:82:23:20:91:44:1A:FA:2C:A0:5D
X509v3 Authority Key Identifier:
keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:9c:bb:e5:c1:4b:9f:e3:95:a9:97:46:83:79:0c:67:70:db:
24:04:ec:97:38:5d:79:97:47:08:22:ca:2d:ba:54:b7:37:3c:
40:94:51:a0:da:b6:26:5b:3a:d3:af:10:44:c7:d5:61:da:e7:
09:b4:e7:01:97:9d:74:61:cf:ca:84:a3:a4:7a:31:c2:5d:f4:
86:76:ef:39:54:6f:7e:73:b7:68:bd:f6:09:07:72:52:9d:e9:
4b:d4:55:1d:68:6e:dd:44:2e:c4:b6:b3:f8:75:a6:e3:32:dd:
8f:28:3c:e4:64:3e:55:f1:16:bb:84:59:f8:38:dc:e8:a4:86:
29:3d:00:22:e9:4c:09:e9:93:df:ac:6a:a3:59:d4:80:d0:9f:
d1:88:5d:4a:5b:1e:83:6a:3c:99:75:ad:d0:7e:c3:a6:9a:4a:
15:f0:fb:00:43:6d:d6:81:0f:44:d9:d5:45:37:65:fc:2f:31:
d6:69:11:00:19:7a:00:76:bb:bb:e6:31:02:cd:89:49:89:f8:
f8:24:28:c9:67:a0:d5:f9:8c:97:88:4f:75:99:da:1c:19:3b:
a1:e9:9c:5c:9e:ff:47:11:42:3f:0c:3c:57:68:9e:f4:0c:d7:
08:27:58:82:fd:85:07:8e:73:14:93:d1:65:80:fc:ff:81:91:
e6:c8:9e:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCI1S2aKRKtt24/89Ev4BOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODNmNjg1ZWI3YjZhMmY4NDY0Yjk5NzEyOTMzOGQ2M2Y3
ZWVkNmEwHhcNMjYwOTEwMDEwMTA3WhcNMjYwOTExMDEwMTA3WjAzMTEwLwYDVQQD
EygyZGNiYzc5MzU3ZDQzYzllNTFmZjgyMjMyMDkxNDQxYWZhMmNhMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/D1nCSH6kfQOknI6i9dqsLTHTZe
OqsvWa9A30h9JZFVERlxljLU6rodtaKpWwXjeKIZGnci2KxWFlddI/weJp/cqG1H
1x+F5YpWhiznshYWN29ZWwR+DtDWLTT31k4a5b55+6Sr9uf2RjcuWeUo6mDG8g09
P2YDZhDAQ7o1nxjCVu+666dzSp5dNhD7TDy1+GYUW4BnEIZ7RVrFuelUAwC+Sjee
1Wb9ORGp/V2eqXFybguxR+8JhS4PHSkyLDiVvC8b7Gdx8U2ulQM/wXNjthRHlUwC
8gJqnLJv1zreJyzL8cKjRyTgwX4bNdDWaPdheQkF09G4mJ7BSiOrQXTgTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3Lx5NX1DyeUf+CIyCRRBr6LKBdMB8GA1UdIwQY
MBaAFG6D9oXre2ovhGS5lxKTONY/fu1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUt
ZWFiZTM0ZTgwMmI0LzEvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUtZWFiZTM0ZTgwMmI0
LzEvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Zy75cFL
n+OVqZdGg3kMZ3DbJATslzhdeZdHCCLKLbpUtzc8QJRRoNq2Jls6068QRMfVYdrn
CbTnAZeddGHPyoSjpHoxwl30hnbvOVRvfnO3aL32CQdyUp3pS9RVHWhu3UQuxLaz
+HWm4zLdjyg85GQ+VfEWu4RZ+Djc6KSGKT0AIulMCemT36xqo1nUgNCf0YhdSlse
g2o8mXWt0H7DpppKFfD7AENt1oEPRNnVRTdl/C8x1mkRABl6AHa7u+YxAs2JSYn4
+CQoyWeg1fmMl4hPdZnaHBk7oemcXJ7/RxFCPww8V2ie9AzXCCdYgv2FB45zFJPR
ZYD8/4GR5siedQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:08:23 2026 by rpki-client