Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File: boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier: NN2/7ACMNkiibchxLD+QzwhMFAKV6zrg3rjcvYpe9fE=
Subject key identifier: 7E:2C:8E:8A:08:A1:2D:4F:9D:A8:5D:DA:38:36:F3:11:4D:23:0D:16
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial: 019EB80F7B3164AF67673DC8B344DB2CB1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 19:01:22 +0000
Manifest this update: Thu 11 Jun 2026 19:01:22 +0000
Manifest next update: Fri 12 Jun 2026 19:01:22 +0000
Files and hashes: 1: 0GIAyoNkRGBvIj0Pu7OBeKqwlY4.roa (hash: EgINy64Inm6Cenl3DNOs60YuoYcAzP39W57E9wAyI3Y=)
2: Jb2gO1BQcML39rnxFGep61phXGU.roa (hash: 8e9M6TIpgOCh+hUbFPaNx/cdQqfZysi89tk+qyctjYM=)
3: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: G/FfWoYdY/sGNU2F0AXqGSiHCq+GWFKwXUl8bpZmUvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:7b:31:64:af:67:67:3d:c8:b3:44:db:2c:b1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Validity
Not Before: Jun 11 19:01:22 2026 GMT
Not After : Jun 12 19:01:22 2026 GMT
Subject: CN=7e2c8e8a08a12d4f9da85dda3836f3114d230d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:58:e7:f2:92:86:15:af:70:1e:ed:72:6b:
87:9b:b8:65:8e:a5:0c:f2:00:c5:37:2b:cc:5c:5c:
0e:b5:1f:d0:22:cd:4a:34:6e:6d:d8:2f:c2:e5:63:
70:1e:f9:7b:77:f5:ad:16:c0:b7:ca:e5:10:37:26:
fa:38:75:3b:26:0f:5a:b9:f9:68:87:7d:4a:84:ed:
62:58:e2:cb:3f:20:2b:61:15:02:86:a0:4c:eb:ee:
d5:80:c3:3b:0b:4d:37:ff:df:ec:0e:85:d9:23:f2:
b3:69:87:2e:82:29:ee:ff:93:85:ae:25:d2:6c:5b:
ce:32:5d:af:6d:31:82:6b:6d:5a:9e:39:aa:d0:44:
da:63:94:ee:5a:ae:64:04:93:0a:e0:b6:2b:11:5b:
84:8e:f8:d7:d5:bc:68:4d:71:d8:d6:79:e4:f9:47:
fe:8b:39:91:fe:42:23:91:21:1f:70:aa:a8:68:3e:
2a:b2:9c:6a:de:9a:32:16:ce:1b:60:a7:34:08:03:
03:cc:f2:20:1b:7a:ba:ee:2e:c6:d8:cf:48:93:1e:
7f:23:f5:0e:c6:c2:2f:29:be:43:4f:2e:91:96:8c:
27:2e:0f:b9:44:5c:af:10:dc:97:b4:2f:fc:87:32:
ab:49:b5:46:32:6d:5b:fb:d9:1c:d7:a6:99:69:be:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:8E:8A:08:A1:2D:4F:9D:A8:5D:DA:38:36:F3:11:4D:23:0D:16
X509v3 Authority Key Identifier:
keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:04:bb:8c:ec:e3:e0:30:2f:18:82:94:ce:5c:6c:48:88:00:
a2:ac:d4:a8:a7:7c:47:68:6b:25:61:2e:0b:59:47:74:fc:00:
15:ef:24:35:76:54:00:dd:81:f3:53:0d:e8:a2:82:84:3f:8d:
f0:35:7d:2f:f8:9a:d0:9e:00:11:c1:47:99:5b:31:7c:69:e9:
c9:e6:e8:39:31:84:0e:26:ac:e6:22:ca:5e:b3:40:3c:b7:7e:
be:3d:1a:fa:2c:c7:b0:cb:74:dd:b4:0d:b6:ae:61:95:ed:a8:
83:ee:00:ff:fb:89:18:71:37:86:0f:17:ba:5d:b2:03:35:b5:
bd:92:c9:47:03:62:17:9b:f0:b5:50:4c:8b:3b:91:fb:c8:5d:
a1:ab:13:c6:9c:4e:9a:ee:91:0b:38:fd:fa:5d:30:c2:78:4e:
d6:d5:67:a8:85:4c:45:0e:9f:03:4c:f2:26:2c:6b:f3:f4:3d:
95:46:58:a0:3e:38:e4:f3:d3:aa:1a:c9:7b:a6:e2:ed:b0:53:
0c:87:c5:7a:0c:3a:0f:16:3a:53:19:55:a3:62:08:89:55:11:
9a:90:3e:1d:76:c9:fe:b8:d4:fb:40:a7:a4:10:a0:bb:01:55:
01:e8:b0:ab:b1:d0:3b:8e:72:96:36:3f:e8:d5:51:4f:d5:68:
28:7a:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:36:44 2026 by rpki-client