Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File: boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier: zwPnIi6bxp28tKnguIfsLGzAidZss6tNYvbhg5ltbiY=
Subject key identifier: B1:3D:6F:E9:CB:CB:D7:01:A3:9C:25:84:A6:55:1E:95:FA:B0:3C:2C
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial: 01A08AFA3ECA3A85B7925F52D1172CAE728D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 11:00:50 +0000
Manifest this update: Thu 10 Sep 2026 11:00:50 +0000
Manifest next update: Fri 11 Sep 2026 11:00:50 +0000
Files and hashes: 1: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: MQ4rQJqx6ojBufI/+8LT9BOFyzZqQkCcF+v+IdLe63s=)
2: xmUoPe_uoUefJbAVDkhT4XlknC8.roa (hash: 8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:3e:ca:3a:85:b7:92:5f:52:d1:17:2c:ae:72:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Validity
Not Before: Sep 10 11:00:50 2026 GMT
Not After : Sep 11 11:00:50 2026 GMT
Subject: CN=b13d6fe9cbcbd701a39c2584a6551e95fab03c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:1f:7c:c0:3e:a3:26:17:c7:5a:3d:f6:6e:
26:55:52:5e:c3:09:50:9a:7b:3a:68:f7:3e:7d:a6:
3f:23:c7:49:f6:d1:4a:1c:97:42:a1:af:c3:13:aa:
7c:c1:be:97:18:ab:b3:de:d5:ac:fb:71:5b:b9:ae:
8f:1d:ac:02:fd:84:91:18:f7:b1:d6:2c:aa:3c:8d:
77:3c:c3:95:4e:a1:5e:e0:0d:8c:f9:4e:ee:60:22:
e1:8a:d9:4a:25:e0:48:b3:21:cb:5f:46:38:fb:98:
26:40:12:82:d3:74:e9:9c:4f:2e:d4:d0:c8:4c:37:
5a:34:96:46:a3:24:df:77:2b:39:53:f5:01:b0:c2:
19:e2:50:ca:92:8b:9e:90:21:5b:4b:55:3a:d7:6b:
f2:e6:5f:cd:a8:2c:e4:02:d9:98:76:09:55:53:d5:
85:db:03:7b:ed:75:5e:6a:6e:6c:08:0b:fa:b0:ce:
74:0d:d4:19:6d:d1:f6:1b:f3:0a:a0:be:52:51:ec:
75:eb:e4:67:48:0d:31:27:05:2f:d6:22:09:f6:6c:
4d:43:87:c5:0a:3f:fe:85:37:5a:d6:06:06:63:9f:
70:58:72:4f:cc:d1:7d:9b:2d:e0:93:52:59:f2:64:
7b:6a:6c:be:ce:6b:4f:e1:c0:8d:2f:93:00:99:ce:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:6F:E9:CB:CB:D7:01:A3:9C:25:84:A6:55:1E:95:FA:B0:3C:2C
X509v3 Authority Key Identifier:
keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6b:e7:02:03:46:a1:7c:04:17:75:f9:8f:90:c7:42:8b:c3:
cd:9d:40:90:7d:6c:3b:91:2e:81:35:23:db:00:1e:74:95:08:
36:51:e3:b2:fe:57:9d:70:67:fe:75:06:a7:f1:6b:37:3d:3f:
94:8f:3e:33:0b:ee:7d:23:b7:ef:69:cb:8d:3b:7d:1f:b1:0f:
ea:a5:21:e8:29:49:4f:34:af:05:da:50:0b:8c:a4:dd:c6:fa:
49:1b:08:f0:4f:13:14:ad:5c:bb:20:51:d7:25:15:57:00:fc:
b3:de:f6:19:4a:58:58:d1:f7:eb:22:36:7a:25:c4:3f:c8:49:
e6:52:07:ba:bd:6e:ce:f0:1a:83:58:b1:bf:88:8f:44:1a:3a:
4a:d5:5e:38:d9:1f:7a:f3:86:a6:86:76:75:7b:0b:20:1c:4e:
45:55:32:f1:8c:5f:26:18:74:cc:df:0f:9c:25:c2:72:12:d0:
ab:c0:02:8a:ca:56:60:d5:fd:f6:37:37:f8:cb:80:23:a9:b2:
a0:05:ba:40:11:0a:41:9b:59:b2:a8:9f:d0:d7:f0:66:c6:7b:
37:cf:4c:57:73:b0:89:e8:3e:4a:c2:4c:60:7d:ff:ac:34:95:
d9:fa:15:15:41:19:ef:d0:61:4c:89:f4:94:b5:97:66:fa:6a:
b1:c9:41:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:24 2026 by rpki-client