Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: ZgNhgQpuX5pdE0ucwJ9VKKXgBot7TIhYDETBuog0QTA=
Subject key identifier: B1:8B:4F:CA:64:3B:53:6C:E3:29:38:1B:FD:4B:87:F6:E8:1D:06:64
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 01A002138F0D87F4AEAC2D430292D21C11BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 21:00:31 +0000
Manifest this update: Fri 14 Aug 2026 21:00:31 +0000
Manifest next update: Sat 15 Aug 2026 21:00:31 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: M0eYtG76KIbIL7vWEEw3+nEkCxgo8pWJF+dHG4znylw=)
2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:8f:0d:87:f4:ae:ac:2d:43:02:92:d2:1c:11:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Aug 14 21:00:31 2026 GMT
Not After : Aug 15 21:00:31 2026 GMT
Subject: CN=b18b4fca643b536ce329381bfd4b87f6e81d0664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8b:a2:a4:f3:ad:fd:ae:35:16:c0:57:3f:62:
80:a1:1e:fb:86:d7:a2:f5:aa:be:cd:96:e6:3c:73:
5e:1f:77:bc:43:92:78:cd:1f:d4:f9:cf:e8:29:e1:
11:5c:b1:53:8e:b5:46:ae:a1:64:b3:06:be:c7:10:
4b:92:bf:0a:2f:79:ac:41:93:9f:78:ea:aa:18:0e:
e5:ae:59:ea:67:42:ae:1f:66:ea:c6:89:21:ee:86:
88:53:af:25:a6:0c:c6:d3:8c:62:23:7b:f6:c6:4f:
0d:47:83:b1:fa:2d:41:0b:ba:cf:6f:8d:29:67:84:
c7:c5:d3:de:d0:13:1c:6e:73:b1:ee:6c:a1:5f:08:
7e:7c:d9:2d:cf:cd:4a:07:fd:49:c2:e5:3d:5f:05:
96:a8:f2:12:36:6f:c0:8d:49:cb:ea:bd:be:bf:6d:
9e:e9:cd:cf:63:17:4c:09:21:33:95:09:db:b9:e6:
a8:d6:94:50:b5:f8:7b:ca:31:99:fb:58:5b:18:86:
5c:24:9d:de:a9:0e:b6:1f:cd:2d:7d:0d:14:de:1e:
0c:bd:cf:75:34:c8:ed:a6:22:21:7a:fd:5a:f3:ae:
7a:61:68:e4:65:2e:5c:b2:c0:c1:3a:f7:0a:81:a4:
a5:c3:a2:6b:2c:7e:70:22:cc:89:a7:fa:54:86:05:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8B:4F:CA:64:3B:53:6C:E3:29:38:1B:FD:4B:87:F6:E8:1D:06:64
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a2:7f:ba:4c:12:d0:1d:8b:a9:ee:c6:1d:59:9d:77:ad:5e:
33:39:4e:f9:cc:17:91:b2:7e:27:6e:6d:63:7e:83:83:e3:87:
60:55:99:45:8a:ec:be:af:e8:cf:ce:63:02:d4:55:b6:9e:cd:
6f:94:98:e4:9e:71:94:84:f6:cf:69:d1:42:ea:04:6a:0d:ea:
82:4b:81:5f:14:8b:e3:8e:d5:73:70:a5:63:ad:c3:76:5a:0d:
69:0c:f5:9f:0a:b3:eb:87:e3:d2:91:6e:90:bb:96:4c:96:4a:
3c:ed:10:e0:f6:79:05:86:f3:17:f3:1c:99:6b:be:7a:93:9e:
d5:c2:6b:5d:39:41:51:0a:64:72:cf:15:4c:e8:1d:71:a7:43:
3f:32:88:ea:99:a2:6e:fa:ad:cb:4d:82:d0:76:6e:fc:67:66:
ac:cb:1e:d9:03:cb:99:00:ff:6a:39:58:59:34:cc:63:c0:01:
24:17:51:65:02:a9:cb:28:af:ce:e6:52:b0:cc:01:5d:b3:2a:
12:88:aa:ac:70:f1:b8:a6:82:b0:01:51:c5:ed:80:f5:4e:96:
4d:e6:0b:cf:e3:d1:2f:c2:fd:44:f5:a3:9f:11:bf:f8:b4:8b:
89:91:58:47:18:08:41:00:02:db:b3:46:7b:df:9b:e8:b3:ac:
ae:ff:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:08 2026 by rpki-client