Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
File: BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft (raw, json)
Hash identifier: IWZkgo120tQk2NPbrKJb49uw4GbXrUeawk+RLjBMcl8=
Subject key identifier: 25:DC:4A:D7:4E:B3:0F:2E:F8:48:01:4F:1D:88:5C:DA:FD:1F:4F:A9
Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
Certificate issuer: /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Certificate serial: 01A13E946C62AF42E4F4426AFDC3976A9EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
Manifest number: 0C4F
Signing time: Thu 15 Oct 2026 08:01:16 +0000
Manifest this update: Thu 15 Oct 2026 08:01:16 +0000
Manifest next update: Fri 16 Oct 2026 08:01:16 +0000
Files and hashes: 1: BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl (hash: rPpCKnBYGY/wPIFmg3eLSnpwtalmPLzrdu1+gkW1sJ4=)
2: Uo9-W2ZV65vRiK7JyaEHx54nLwM.roa (hash: UJ7a0gKDZTd9yEENvLgRe2acSSS/hxOdpooHg+CZtds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:6c:62:af:42:e4:f4:42:6a:fd:c3:97:6a:9e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Validity
Not Before: Oct 15 08:01:16 2026 GMT
Not After : Oct 16 08:01:16 2026 GMT
Subject: CN=25dc4ad74eb30f2ef848014f1d885cdafd1f4fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:62:a4:73:c8:df:5d:9b:36:fd:45:1d:cb:
0a:03:f2:c0:3f:e5:b5:a6:60:06:45:2a:df:4b:67:
59:62:7e:cb:52:25:b9:c1:ae:86:52:2c:2e:45:44:
7f:76:fd:b3:d5:84:a1:9f:50:96:44:32:f7:fc:a0:
a3:e7:a1:cb:98:10:a9:40:a3:d7:66:5f:46:ec:1a:
90:5d:e4:8f:84:5d:90:d7:58:c8:35:1d:ba:4d:95:
f5:bf:dc:01:47:62:03:38:e7:c2:5b:6f:7c:86:53:
bb:08:23:9c:27:79:33:50:e6:e8:02:f8:bd:4d:12:
e6:e2:02:21:bd:e9:71:e5:5a:93:6c:5e:3e:a4:01:
3d:bd:c7:19:fa:2a:a0:72:e9:02:5c:22:ae:b2:16:
16:6d:5d:92:80:17:36:d8:5c:db:d9:89:90:f3:10:
99:d9:b9:ea:36:24:69:f3:e9:d8:f9:f5:f6:fc:dd:
07:5c:02:fa:d1:cf:e7:19:3b:3e:73:aa:32:0d:59:
db:e7:dd:28:f2:19:f0:36:18:61:95:6a:d4:91:79:
cd:78:77:99:48:de:94:1d:86:89:d3:b8:2d:b4:4c:
30:7d:6e:e2:a5:c7:e8:47:60:36:20:5e:ea:fb:79:
0c:27:1a:6b:53:02:f0:c3:8d:3c:ab:b3:b8:04:90:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DC:4A:D7:4E:B3:0F:2E:F8:48:01:4F:1D:88:5C:DA:FD:1F:4F:A9
X509v3 Authority Key Identifier:
keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:28:f7:26:d6:96:e1:43:ca:c4:12:b9:75:9a:80:83:86:13:
22:fd:87:bd:4a:40:77:53:91:c0:a9:62:f9:6f:f5:35:28:db:
1a:e6:12:3d:b8:e8:80:e5:b1:a2:22:ba:ec:e3:ae:9e:55:cc:
6e:9e:e6:68:ea:fe:ea:d5:19:af:a4:fe:4e:30:28:39:e5:30:
2c:d6:39:31:23:3a:b5:d0:3d:62:42:df:0d:56:ea:01:bd:0a:
0a:c5:ef:3e:19:b2:f9:66:8b:57:1d:cb:42:67:78:96:68:4c:
7b:51:25:0c:bd:2a:07:4b:29:8f:3b:87:1a:29:5b:d1:7d:c5:
a0:0a:1e:da:9a:88:0c:e7:ee:dd:50:a5:8d:a6:48:f1:b2:14:
84:fc:6d:c8:db:bc:9e:df:1a:8c:4b:7c:eb:ca:22:cd:7e:61:
40:9b:68:79:3a:1e:92:61:ab:d9:67:41:7d:a4:7b:b5:5e:53:
30:75:06:1f:d0:0e:46:6d:16:5c:ca:ec:34:52:a3:7c:3c:e9:
bc:a2:20:b2:60:b2:58:40:ca:84:35:be:ab:66:ad:7c:f2:8c:
f7:52:34:fc:b2:ee:9a:f8:02:8b:8c:93:26:dc:f3:7a:aa:23:
e5:f3:36:07:77:0c:56:83:1f:89:20:cf:62:dd:53:83:63:70:
72:03:f2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:49 2026 by rpki-client