Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: y/PyE6PBj1hYGIrx5OjCJzT3aDtz9O7YxF21UQUAWQk=
Subject key identifier: C6:33:02:89:13:20:C5:9D:EF:26:D7:F1:61:DB:3A:8F:88:64:1D:71
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 01A13CDCDB8DD00744691C78CD04C40744D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 00:01:09 +0000
Manifest this update: Thu 15 Oct 2026 00:01:09 +0000
Manifest next update: Fri 16 Oct 2026 00:01:09 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: XX4yrAKNb8ht29eMxFaL4/lWqTjsLs89UiymAImkdt4=)
2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:db:8d:d0:07:44:69:1c:78:cd:04:c4:07:44:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Oct 15 00:01:09 2026 GMT
Not After : Oct 16 00:01:09 2026 GMT
Subject: CN=c63302891320c59def26d7f161db3a8f88641d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:2c:c8:0e:39:9d:22:cd:03:ec:20:af:1a:
36:b9:2e:61:f7:5e:c1:5b:45:db:2a:f1:dc:b4:7e:
0d:29:18:49:96:b2:71:fc:c1:f1:cd:a9:d0:46:72:
89:ec:c2:2c:a4:4a:b0:6f:01:ae:df:26:e7:45:d6:
21:1a:05:f6:9c:4e:4b:a3:c2:05:99:8f:7c:7e:9d:
f5:a5:39:5d:14:50:2c:4c:d2:c6:61:fd:f1:98:29:
96:0f:3f:64:71:e2:df:38:8b:14:59:b9:3b:43:a1:
53:83:4a:e0:e5:a0:e5:12:39:3f:5f:16:2c:4e:c0:
1f:da:46:4e:71:f0:5b:f4:36:82:3e:ba:ad:b6:0c:
8d:7b:04:7f:19:0d:43:74:be:72:9c:f7:74:c5:53:
e1:ae:55:b2:b7:ab:5c:90:6d:9a:50:32:de:c4:3d:
ca:a2:5c:3a:e4:a1:81:c1:7d:cf:35:c5:88:11:a6:
d3:4b:84:19:9d:23:c5:64:fb:c6:72:96:93:8f:f0:
f4:be:db:6b:5d:a2:e8:4e:2d:83:ac:9b:ce:43:81:
79:81:20:d2:52:d4:e9:b9:3c:3c:f5:67:75:15:44:
76:89:55:fe:0a:7f:6e:53:1b:2d:55:df:76:8d:6e:
80:a1:6f:62:e3:80:1e:ca:e7:c2:1e:a0:f7:b4:fc:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:02:89:13:20:C5:9D:EF:26:D7:F1:61:DB:3A:8F:88:64:1D:71
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e5:18:4e:23:34:c9:bf:4a:1f:24:98:0d:03:10:58:06:00:
6d:7a:90:16:2a:d1:0a:7a:c7:53:d1:d2:07:04:82:84:8e:92:
e1:22:a3:ef:11:74:16:93:f2:36:64:e1:e1:91:cf:24:49:1b:
4b:d2:98:8f:03:a3:a1:f0:2a:83:71:9c:49:04:23:32:7a:c6:
50:e4:6a:46:ad:19:97:aa:c4:92:3f:3b:af:45:78:39:3d:f8:
54:24:87:3a:8c:18:8c:07:35:9c:8e:25:1a:17:72:73:7c:bf:
fe:c9:e2:91:48:32:88:0c:ea:fc:b5:f6:52:48:ac:e5:57:57:
de:0a:59:b7:3b:42:4d:24:06:49:08:39:6d:fa:ab:da:6d:11:
9c:fb:bf:60:e6:04:15:e5:7d:00:9f:c5:6e:df:be:54:21:c7:
5e:03:48:ff:c4:a5:00:94:b5:11:ac:31:7e:87:37:06:25:48:
b1:68:25:69:fb:61:8a:f7:d9:2f:82:b8:93:ec:c2:c8:43:5d:
1f:2b:8e:ee:ca:76:e9:1a:26:e4:31:ce:b9:23:75:37:7e:6a:
3d:45:8c:fe:23:e6:08:4c:6a:49:a8:2c:61:4b:4c:8c:ce:75:
27:e3:03:51:08:99:a6:2d:20:77:e9:2a:4a:7f:8e:31:20:cd:
76:05:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:17 2026 by rpki-client