Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File: boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier: lwoeToe3D3yRJ2xSWRf8nWXSToNXtr0vd9J3wMmEuuw=
Subject key identifier: DA:DB:C6:F3:4C:14:F8:B7:C1:E4:E5:9D:C3:90:A4:D0:68:F7:DF:EE
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial: 01A17E4F7959EFCF5AF8CA4011D560A17FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number: 1ACB
Signing time: Tue 27 Oct 2026 17:01:39 +0000
Manifest this update: Tue 27 Oct 2026 17:01:39 +0000
Manifest next update: Wed 28 Oct 2026 17:01:39 +0000
Files and hashes: 1: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: uFfl/9grQqtkO9WaXM4DHWfC2nOrBechc8YihmGXDGY=)
2: xmUoPe_uoUefJbAVDkhT4XlknC8.roa (hash: 8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:79:59:ef:cf:5a:f8:ca:40:11:d5:60:a1:7f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Validity
Not Before: Oct 27 17:01:39 2026 GMT
Not After : Oct 28 17:01:39 2026 GMT
Subject: CN=dadbc6f34c14f8b7c1e4e59dc390a4d068f7dfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:bf:9f:4e:6e:0e:70:d5:27:e5:22:61:a0:
3f:af:dc:39:2f:44:13:9f:5b:a5:18:94:af:4f:e0:
73:77:ee:4d:48:21:da:19:35:ab:d4:a2:88:a7:a5:
75:10:ab:72:f8:3b:25:18:36:c1:d0:85:6d:bc:b2:
e6:d7:5b:50:b6:b5:39:e0:96:18:d2:d2:9e:32:16:
4f:1b:f6:28:81:cd:61:c4:4f:a8:12:2d:9e:48:6d:
6a:4d:7c:d4:8d:41:aa:da:b3:8c:59:7c:bb:b5:d4:
5a:66:e2:b2:73:1d:f2:41:49:03:ef:60:0b:1a:8b:
32:be:50:8e:dc:34:89:2b:25:26:82:7d:ad:f4:38:
d2:bd:34:07:73:83:24:5a:4b:eb:f6:31:78:c8:f9:
ee:b1:d8:a7:50:2c:82:5f:a0:67:c6:2f:6f:84:0f:
65:69:e8:48:e6:9d:68:6a:69:35:ee:af:c7:ee:54:
04:a4:6c:c9:1a:ce:b6:47:2a:a8:e2:8e:3b:de:39:
e7:f9:49:39:07:90:54:dc:4d:66:e6:a4:dd:ab:b5:
b6:fc:7f:75:1e:3c:1d:c3:42:87:9c:3c:2a:99:26:
42:2a:80:35:23:5b:ce:ee:2d:e7:36:15:4c:ec:b1:
29:94:ec:b7:5c:53:51:31:97:af:5f:87:da:1f:6b:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:C6:F3:4C:14:F8:B7:C1:E4:E5:9D:C3:90:A4:D0:68:F7:DF:EE
X509v3 Authority Key Identifier:
keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b7:e6:86:03:7e:cb:3c:5a:57:f2:86:90:1e:bd:b4:08:67:
38:c0:fa:d5:47:cb:e9:02:ce:3f:bd:04:75:65:4f:d2:be:2f:
e0:58:c9:cd:10:ba:ef:b6:89:25:5a:79:5e:f7:4c:11:67:26:
4b:4f:c4:60:e7:21:9d:5c:16:0c:8e:be:08:f9:dc:3b:ed:7b:
1d:8d:92:fc:98:22:c4:fc:b1:85:60:4a:5f:10:05:99:cf:14:
85:55:99:bb:e5:e6:e0:d6:54:ed:8f:33:ad:69:b4:8c:df:6f:
f4:13:a3:be:31:2d:12:11:dc:d3:ab:00:9f:f6:18:65:d8:a9:
21:24:52:81:7b:04:63:5f:b9:0b:89:74:00:79:b3:5a:83:10:
ab:3a:86:2a:75:66:93:9a:a7:af:66:26:cd:89:f2:53:33:0f:
fe:1e:47:dc:10:70:6e:a5:73:0b:3b:c9:34:50:f1:7d:76:3b:
a6:b9:da:2b:e2:4d:9f:cf:3d:9c:42:69:87:f6:5d:31:85:b7:
f0:f6:72:b5:fe:ab:2c:46:fd:94:d4:21:76:d5:04:0b:99:54:
b7:f6:61:35:ea:73:f4:6a:39:0d:e7:43:19:0b:63:c0:5e:9a:
f4:fa:46:d7:0f:bb:9d:05:b2:04:e0:8c:9b:e6:9c:78:54:62:
90:17:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:36:53 2026 by rpki-client