Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File: BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier: OG6DFEQ6riKEdDa345vw8RcKVDGRVhOKVDbpOusaKA0=
Subject key identifier: 8F:12:33:BA:C2:45:17:0F:CA:6C:1B:B2:C8:5E:B2:02:D9:5C:3C:1E
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer: /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial: 019F17F94EE000CA2A682408173F317E2036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number: 18A6
Signing time: Tue 30 Jun 2026 10:00:42 +0000
Manifest this update: Tue 30 Jun 2026 10:00:42 +0000
Manifest next update: Wed 01 Jul 2026 10:00:42 +0000
Files and hashes: 1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: rfb8auZgEcsg6yCDYniEReQqTwelFXZh+ju6FHls31w=)
2: qh-sD6kOkExAEQOZYjnoqxx9DpY.roa (hash: 5t8eLCXvC3atBWqULd/nurDvBUxx1v91TFam4vLNrJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:4e:e0:00:ca:2a:68:24:08:17:3f:31:7e:20:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
Validity
Not Before: Jun 30 10:00:42 2026 GMT
Not After : Jul 1 10:00:42 2026 GMT
Subject: CN=8f1233bac245170fca6c1bb2c85eb202d95c3c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:8c:6d:8f:01:0c:c3:6b:10:26:b1:e6:51:
41:4c:42:7e:a9:b2:f0:09:b0:29:69:3b:e2:ab:2f:
c7:a7:56:ea:52:9f:ba:c5:4b:f4:24:3f:b0:a0:b3:
70:a7:7c:91:d1:d8:63:20:3e:e9:db:77:04:09:e1:
5c:0a:80:61:04:e6:fd:47:cc:17:d7:5f:a1:3b:dc:
f4:16:51:43:3a:b7:26:e0:ab:f2:33:d3:b7:19:0c:
c9:b4:a7:33:fc:63:61:3f:5b:92:0a:5e:41:63:47:
1a:30:03:47:ea:35:29:bd:11:fa:6e:75:85:24:d7:
60:22:58:76:16:58:54:e7:5c:06:74:04:33:64:f2:
53:e0:1d:e1:ef:e7:4c:e3:22:09:5e:0b:dc:af:3d:
89:75:8e:24:ed:cf:91:9e:1d:30:30:a1:0d:2b:63:
23:d3:f5:37:e6:2f:2f:87:d1:85:e3:31:0c:ef:8c:
ba:18:29:4b:e1:27:f4:02:b3:ff:d2:80:1b:7a:08:
10:cd:7b:80:0d:d7:9c:67:07:34:d4:f0:f3:b9:35:
42:c7:c7:d0:96:62:0a:fe:18:e6:d7:20:6e:42:95:
e6:f5:85:6b:15:f0:3d:d8:b0:3a:1d:a8:b7:5e:67:
76:3e:b7:cc:67:97:eb:a4:d8:33:30:e4:ad:35:cf:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:12:33:BA:C2:45:17:0F:CA:6C:1B:B2:C8:5E:B2:02:D9:5C:3C:1E
X509v3 Authority Key Identifier:
keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3a:a0:9e:13:81:0b:d1:31:5b:51:15:d7:3c:8b:20:d0:3b:
81:61:0c:d3:e8:18:61:68:f6:e2:66:c3:45:88:b5:5e:67:02:
88:1a:df:62:4a:c1:84:2f:82:77:c3:27:65:75:b8:a3:6c:42:
29:cf:e5:5b:68:34:6a:54:99:1f:26:73:9c:12:b8:62:86:d6:
59:bd:f9:2a:6e:1b:da:a4:de:76:8b:ac:e0:86:b8:00:86:46:
af:b3:2e:3a:64:f9:39:2d:5c:01:af:03:1a:92:58:2a:3d:42:
16:9b:cb:b5:21:6e:2c:b2:9b:98:11:47:6b:bb:01:0f:22:63:
00:89:55:92:e7:b5:1a:68:97:99:7d:7b:4f:c4:62:db:af:6b:
97:ac:eb:dd:29:df:3f:7c:e3:d8:40:8d:90:21:5e:a1:b1:4c:
89:e2:76:51:d8:b3:26:5a:27:32:af:be:cd:fd:ec:34:f2:48:
78:c6:19:1d:96:a7:4f:0f:4a:bc:1f:a1:30:3f:c0:f8:fa:ef:
82:a3:84:9a:f9:a8:2b:f9:10:f5:31:36:32:9b:cd:27:ce:48:
e3:c2:62:ea:41:3f:d4:4f:9e:51:fe:4f:1b:02:8e:1a:b1:51:
74:e7:b2:31:7e:d6:d8:af:6e:51:79:fe:a0:6e:5b:7e:02:e9:
68:17:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:03 2026 by rpki-client