Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier: yinbjwssbNJNcxAodKpbJwQgnynInZPmi1/QFtY8feQ=
Subject key identifier: 17:04:1A:50:3A:74:97:A6:D5:2F:E8:14:78:FD:02:AF:91:A2:A1:5B
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial: 01A13E2632739C157CFCF7F5DEDCF4A18B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 06:00:53 +0000
Manifest this update: Thu 15 Oct 2026 06:00:53 +0000
Manifest next update: Fri 16 Oct 2026 06:00:53 +0000
Files and hashes: 1: 0k6yeX0L5XdNUvHFP70s6xMMn5M.roa (hash: WcJmVDT/EJf9CPgLP7/H/uUbqnwpeSXGEJKY3KaRY/o=)
2: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: 1iDvzp+mqNnJIqihdcbwD1ud43zYqHuNmvQHuCzuW/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:32:73:9c:15:7c:fc:f7:f5:de:dc:f4:a1:8b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Validity
Not Before: Oct 15 06:00:53 2026 GMT
Not After : Oct 16 06:00:53 2026 GMT
Subject: CN=17041a503a7497a6d52fe81478fd02af91a2a15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:35:a3:71:c8:b7:07:ae:a5:8f:eb:35:1a:
d3:4f:ad:e7:c0:a3:01:b3:bc:96:22:20:33:33:4e:
dd:e0:8b:b1:f5:68:c4:34:91:5a:5d:64:a7:3d:a3:
94:a3:9d:23:b4:9f:e6:cd:28:04:a5:6f:2c:15:29:
75:a1:d6:95:b4:1e:3c:9d:3f:a3:65:10:10:14:d7:
74:c2:05:bc:cf:6e:72:69:7b:6f:c4:d0:3b:07:7f:
6c:62:9d:6f:42:5a:f0:cc:a3:41:4d:2d:0d:6f:75:
a7:54:6c:04:36:97:5b:21:7f:2d:14:a1:dd:0f:b5:
85:73:9a:df:45:aa:89:40:6a:77:bf:a7:66:06:2b:
b4:ec:6c:23:e6:dc:87:40:87:ca:06:74:71:29:cc:
c3:0a:47:80:82:80:a0:22:26:1e:35:b4:1f:3b:ac:
95:d7:bd:71:63:0c:b5:81:71:34:c5:2b:fa:be:4a:
60:7c:76:68:94:6f:46:7d:f1:d3:89:d5:57:9c:fe:
23:f3:1b:40:3c:96:55:ce:78:38:a1:5a:16:65:69:
aa:35:8f:a6:f6:d5:93:b1:b1:f9:8a:9a:19:7b:19:
53:e9:ce:7f:eb:37:69:8f:0c:c8:57:b5:f7:50:ae:
a1:85:aa:6d:9a:04:41:f7:14:d1:97:fd:77:49:77:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:04:1A:50:3A:74:97:A6:D5:2F:E8:14:78:FD:02:AF:91:A2:A1:5B
X509v3 Authority Key Identifier:
keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:eb:2c:d0:90:aa:86:b2:f9:e2:4a:6d:93:96:2c:6c:9f:01:
d1:53:09:4d:8e:b6:69:91:1a:8b:dd:57:f8:a8:a6:20:d1:b2:
54:2c:b9:76:ea:e8:30:c9:b5:ea:de:da:c1:17:48:51:18:a6:
cb:30:42:45:75:df:f6:78:1e:e4:b7:ee:e1:66:bb:f1:9d:a2:
24:ab:17:d6:a6:76:89:3b:d3:e7:75:c6:ad:e8:f2:de:d1:1d:
06:79:d0:37:37:e8:1b:0b:61:03:4e:5e:41:2d:20:bb:3e:f1:
8e:c9:3a:7c:c4:cc:2c:dd:a7:e8:a6:82:a3:02:41:c6:ee:c7:
24:4d:47:d9:ca:66:52:2f:2c:a5:c4:a4:db:44:f3:77:d9:56:
64:09:4a:a4:15:e8:02:26:cf:60:d9:06:01:6a:58:34:f4:d2:
9d:af:bf:9a:19:fb:2b:1c:51:70:93:9c:54:cc:39:38:4a:85:
b6:8e:26:dd:40:17:82:8d:2e:30:1a:46:b3:9f:e5:a2:af:01:
2b:a7:35:23:a8:86:89:cd:0c:b2:d3:e9:1f:c2:4e:4e:79:06:
9b:5f:c9:81:26:40:3d:6b:e2:3d:13:c3:9e:74:4e:2f:cf:59:
93:12:e7:c1:95:d9:9c:76:67:2e:75:d0:cb:7d:dc:0d:f1:1f:
47:d9:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:31 2026 by rpki-client