Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: CH2Z0vYhi9BbNxDMqk3PnzGlkPM5+zpKrsomGyF+F1I=
Subject key identifier: DE:AF:48:5F:01:07:07:FE:C4:0F:33:05:A5:67:9D:80:08:1B:D2:51
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 019E30A90F7B52F0DBB7F996C79BB786D2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 12:00:46 +0000
Manifest this update: Sat 16 May 2026 12:00:46 +0000
Manifest next update: Sun 17 May 2026 12:00:46 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: /TBw40LH5/KK/i8J8d4mSXQ5twJQ9p1YqXgteBKA8iw=)
2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:0f:7b:52:f0:db:b7:f9:96:c7:9b:b7:86:d2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: May 16 12:00:46 2026 GMT
Not After : May 17 12:00:46 2026 GMT
Subject: CN=deaf485f010707fec40f3305a5679d80081bd251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:3b:07:97:23:2d:94:e0:c5:48:03:17:e6:
66:06:72:15:13:42:83:d9:28:6d:f3:7b:ee:db:85:
f7:e7:ec:d9:1d:a8:5f:42:c6:73:0b:e6:ed:50:f8:
0d:06:84:e7:43:26:71:0e:a8:62:16:e3:12:77:c7:
ed:b0:88:d1:e0:70:a2:11:a6:59:dc:fe:48:26:44:
4f:d5:8e:e9:fc:00:ad:c8:c9:7e:c8:75:2b:32:8f:
1d:7e:68:3e:64:d7:d2:af:dd:f9:ab:bf:30:64:28:
ff:ed:be:64:41:3e:1b:21:b8:46:eb:03:43:ab:cf:
61:2b:4f:1a:b9:bf:cc:38:6b:69:47:f9:ea:a7:3a:
ca:5c:cc:fd:12:4d:2a:dc:4c:c0:9a:b9:a9:31:1e:
cb:71:ea:a8:e2:68:95:c0:fd:07:be:ec:9c:01:dd:
ba:f1:88:e5:3c:66:52:bd:ee:d9:94:4a:76:4c:f5:
c3:b1:4a:d0:8d:b9:e1:4b:cc:c4:c2:2d:96:d0:37:
46:02:2c:87:24:b4:68:91:32:46:08:a1:78:c3:9a:
53:1f:df:bb:c2:0d:16:e6:c4:b7:2d:e5:db:60:07:
49:70:1b:15:ac:d5:91:9e:f1:72:7e:8d:df:50:0c:
e2:b8:1e:35:8d:ba:4b:6e:54:32:0c:24:68:aa:b5:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AF:48:5F:01:07:07:FE:C4:0F:33:05:A5:67:9D:80:08:1B:D2:51
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:dc:55:5e:3e:d7:e9:1c:a2:5e:b0:a9:48:0d:cb:93:71:2c:
83:bd:45:4b:eb:78:ae:72:e4:7a:40:6a:fc:59:dc:15:1f:ac:
b4:35:ee:4b:03:ee:93:b6:95:8b:89:f8:9e:fe:00:68:45:6f:
22:6b:17:1c:60:fa:d1:02:6f:d7:c5:f0:cf:ae:37:74:cb:92:
44:9e:1d:80:b1:d4:27:0e:8d:ec:c2:b0:93:a6:42:ce:23:cf:
61:e2:4d:1d:2e:f0:12:c2:d5:f0:ad:13:d8:7d:e3:63:da:d7:
77:4d:c7:a1:53:7d:9a:d9:46:b2:d8:14:c9:3b:24:19:af:58:
e3:81:bb:bf:31:e9:f5:d3:15:24:28:7d:92:f0:4d:db:cb:4a:
2e:d9:9e:97:0a:51:2d:4d:22:33:9e:a2:f7:c1:9c:a1:79:90:
5f:9a:1e:a8:e8:ee:46:d1:87:41:b4:79:1a:d4:50:2e:5e:00:
d0:04:b9:97:0b:63:3f:61:c2:d7:24:9f:8b:3f:65:f1:62:b6:
2b:f3:10:1d:d1:e8:aa:51:03:79:06:d8:19:3f:e1:a3:a1:58:
f0:63:6e:d0:be:c4:3a:e4:06:0d:1c:60:5f:70:30:a8:74:5e:
95:e5:64:4b:53:4d:c4:2d:e4:c6:3d:32:c8:0d:3f:af:15:e8:
e8:e9:9e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:39 2026 by rpki-client