Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File: BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier: DCsi5T+zIzt2d+riaO19rTLXHYjtlJ1Q+q5FO5oLUAA=
Subject key identifier: 29:B1:65:17:2D:D8:C4:C4:AB:59:C9:03:36:10:8B:35:AE:B2:61:8A
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer: /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial: 019D390A30FAAB6E2BEC6D8A6904C022B17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number: 17AE
Signing time: Sun 29 Mar 2026 10:01:02 +0000
Manifest this update: Sun 29 Mar 2026 10:01:02 +0000
Manifest next update: Mon 30 Mar 2026 10:01:02 +0000
Files and hashes: 1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: HAlPGEB/rD4R9cGnjU0YuANiCaJJZPOjD+PBh1lB2kI=)
2: qh-sD6kOkExAEQOZYjnoqxx9DpY.roa (hash: 5t8eLCXvC3atBWqULd/nurDvBUxx1v91TFam4vLNrJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:30:fa:ab:6e:2b:ec:6d:8a:69:04:c0:22:b1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
Validity
Not Before: Mar 29 10:01:02 2026 GMT
Not After : Mar 30 10:01:02 2026 GMT
Subject: CN=29b165172dd8c4c4ab59c90336108b35aeb2618a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:32:f4:b0:d8:dd:7d:81:97:7c:f8:c6:6b:
cf:fa:66:80:97:8f:72:58:ea:a3:85:85:5c:d5:e1:
9a:47:36:3a:cd:04:17:29:92:88:5f:3e:6a:6d:9e:
f9:db:dc:ad:8a:3b:ec:9f:39:9a:f8:b5:15:62:b3:
f3:40:0d:24:37:2c:b2:0c:49:1c:39:97:38:c2:b3:
4c:6e:27:74:10:42:5d:f3:28:f0:5b:d7:6f:20:f8:
2a:2e:a1:d2:15:3a:f1:2a:31:12:94:9b:f1:2e:a3:
e8:46:33:b6:6f:09:30:06:17:e5:f2:4e:74:5b:97:
a9:e3:8e:bc:2a:8e:d1:23:59:e7:cc:2c:98:e4:e1:
21:95:0b:44:c3:7b:b4:f5:aa:48:ae:29:d9:fe:08:
49:fd:55:e3:c9:fd:d5:39:e2:b1:3f:27:ad:4f:23:
53:2f:07:93:04:0d:22:a6:b2:41:5b:2e:04:43:d8:
97:eb:f4:7b:46:15:e4:81:c3:f9:60:63:a9:ed:94:
f6:7b:50:cb:5e:15:16:11:49:ad:2b:3d:23:a3:fc:
9b:95:1f:a3:de:3f:a2:8e:62:b5:66:30:0a:d3:73:
13:9e:a1:ff:f3:da:59:22:f1:5f:ac:c8:31:b9:63:
48:c4:2d:d6:79:97:e7:89:2e:7b:2f:a5:27:30:2b:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B1:65:17:2D:D8:C4:C4:AB:59:C9:03:36:10:8B:35:AE:B2:61:8A
X509v3 Authority Key Identifier:
keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d4:da:0d:de:b4:f2:4a:ea:4a:75:b6:fe:07:1d:39:59:21:
90:02:50:b8:58:52:59:4a:9b:e1:5f:93:de:f1:03:f4:c9:b4:
a6:43:fe:db:e3:ca:a9:39:1c:25:ed:b8:36:da:a5:4d:f3:a8:
4c:60:e4:65:6e:5a:f8:67:2f:03:de:90:98:c9:cb:da:b0:c4:
0d:89:63:63:67:95:0b:75:7e:20:79:8f:8a:b8:4e:e3:74:5c:
08:1f:6f:e9:be:05:4c:83:4b:7a:15:a6:7b:1b:a8:50:5b:b3:
11:f9:bc:b4:fe:c9:2a:63:a1:bd:d5:6a:8b:85:90:f5:8f:0e:
0a:92:44:ed:4f:5b:72:ee:d0:2c:a0:ff:ac:29:1c:86:61:c5:
71:b3:39:f3:05:b0:0b:2d:41:d5:47:cb:3e:4f:fc:1c:56:ad:
5e:93:51:f3:5b:0a:c0:22:59:1e:53:72:78:c3:f1:a1:a1:73:
d8:c9:18:7d:4b:b2:db:7b:31:b2:72:07:30:28:4c:51:93:0f:
d1:4d:ee:ae:b0:f6:3e:ab:35:10:5a:75:cd:94:33:4f:19:30:
69:e5:42:6d:8b:de:59:2e:05:54:d2:23:9f:16:6a:9c:d1:80:
5b:50:a3:96:79:92:41:20:76:6a:9f:33:29:4c:ce:6d:6b:1f:
ef:b3:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:25 2026 by rpki-client