Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: tOi4z9f+bI0z7N5lrArSX64GO3xTiTbxNzGVqEH3QEQ=
Subject key identifier: 22:63:5A:A0:6E:22:30:22:56:82:D0:E5:B0:8C:D2:9F:0B:F2:EC:7F
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 019D38D29487286E495D67A61DE8D8AEF85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:17 +0000
Manifest this update: Sun 29 Mar 2026 09:00:17 +0000
Manifest next update: Mon 30 Mar 2026 09:00:17 +0000
Files and hashes: 1: KmFH08iC5J-95oBTnRmMORdBhYQ.roa (hash: jxzbdMpWjw66b8Fw1Ba2LpATegGadHxvfHdlKL67I8A=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: v55H5j5ciV/xUMr4EvVBKOG6zmghAcXlnyrTVuealFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:94:87:28:6e:49:5d:67:a6:1d:e8:d8:ae:f8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Mar 29 09:00:17 2026 GMT
Not After : Mar 30 09:00:17 2026 GMT
Subject: CN=22635aa06e2230225682d0e5b08cd29f0bf2ec7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:82:c3:21:f6:be:87:15:6c:32:60:8c:26:
8b:8c:fe:91:f6:1d:5a:4d:e2:8c:17:51:3e:47:eb:
4d:8e:0e:28:8d:aa:0b:13:30:83:4a:a9:75:e8:e7:
b8:f6:d9:fa:aa:69:1f:5e:99:1e:b8:ec:df:97:6b:
16:a7:38:37:80:87:b3:a8:87:9e:42:d7:2f:60:1e:
71:be:39:ea:23:e4:df:f2:b3:3b:61:72:3e:0e:d3:
bc:47:72:27:f3:e0:40:28:d9:fe:73:f8:6f:30:9e:
e8:3c:11:c2:43:39:68:b5:34:e5:93:e6:3e:c4:db:
95:55:2f:3d:ac:c0:3e:a5:e2:a2:cc:b6:7d:9d:9b:
62:22:79:08:fa:44:94:2a:c6:3f:31:8e:70:1b:bc:
2d:87:8c:75:b3:8a:86:7b:a2:ba:2b:89:7d:c4:ae:
c4:47:91:9b:82:7d:c9:34:ee:14:c1:99:8a:76:26:
c9:0f:8b:da:2e:10:56:42:52:41:e1:4d:4e:c9:11:
8f:5b:05:c9:35:63:07:9a:42:b5:32:7a:bf:d1:71:
76:b6:ce:26:77:90:fa:7c:ab:bd:ea:8c:16:8e:8c:
13:14:5f:3d:c8:89:1e:16:6c:3d:f0:02:28:4e:c5:
cd:6b:75:84:38:a8:78:bb:e1:23:e9:41:b5:37:3b:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:63:5A:A0:6E:22:30:22:56:82:D0:E5:B0:8C:D2:9F:0B:F2:EC:7F
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3f:fd:d4:b0:c4:cc:bd:59:9f:1b:d7:b9:99:a1:03:1b:8a:
05:e4:0d:d5:81:9e:d6:59:cf:31:a8:ab:5e:63:16:59:91:ee:
2b:5f:dc:9c:24:31:bd:ab:a6:3e:ce:6d:41:04:d9:af:18:30:
e0:4d:18:53:ce:61:93:fd:4a:47:b9:72:28:7e:c1:04:29:20:
ad:f8:5b:c3:21:ce:4a:32:ea:75:cd:13:e3:01:fd:58:6b:48:
00:f2:c2:c1:8f:38:03:c9:b7:e8:21:9c:0b:7c:8d:b9:31:58:
c6:d6:a3:ca:5d:30:e7:20:ba:33:34:67:9e:cb:10:0c:5e:be:
57:7a:83:c9:4a:d3:ce:ad:76:41:87:ae:ba:6e:93:90:06:52:
9c:ed:cf:02:a0:89:7d:32:f0:9b:17:d7:eb:69:fc:81:dd:cc:
1e:99:9c:0e:d4:db:ad:31:16:31:b1:f1:ef:e6:27:f8:dd:23:
05:35:75:bd:38:0e:44:54:2f:bc:92:ad:56:06:a6:0e:ed:d8:
60:96:49:d1:58:53:ce:bc:7e:1a:01:c4:ee:08:f8:56:4d:68:
51:eb:d0:2a:a3:f0:af:b2:39:81:90:23:9f:ec:a0:13:31:cd:
a4:59:4a:da:94:3a:4d:bc:ec:24:5f:04:14:aa:08:ca:1f:f5:
68:41:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:22 2026 by rpki-client