Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: qiGAr9bykYUK5B6W4JB8AL6uRATNNZsOA3U9a5EMGnw=
Subject key identifier: 38:D1:13:A2:46:6D:AE:C3:87:05:B5:DA:D1:57:D4:F6:D7:01:F0:EA
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 019D3977EAAE7643625339E39726670E3CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 12:00:53 +0000
Manifest this update: Sun 29 Mar 2026 12:00:53 +0000
Manifest next update: Mon 30 Mar 2026 12:00:53 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: cC6Ob2nFaPGqWbCUmdqI5Lb8Oy9dvuff4fDO9XDTfHw=)
2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ea:ae:76:43:62:53:39:e3:97:26:67:0e:3c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Mar 29 12:00:53 2026 GMT
Not After : Mar 30 12:00:53 2026 GMT
Subject: CN=38d113a2466daec38705b5dad157d4f6d701f0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:35:2f:d9:b5:5b:4e:61:bf:8d:20:eb:17:
72:e7:c4:7d:b6:4a:8e:a1:c0:b2:ab:eb:1e:c9:7b:
2f:5f:65:5f:cf:24:70:b1:4b:a1:26:27:8b:db:3e:
50:96:b7:40:9d:39:ba:1a:62:ee:53:97:38:7a:79:
7c:00:14:13:67:5b:80:5c:d7:71:4d:4f:58:69:ed:
a7:4b:61:3b:34:73:fd:76:d0:43:87:18:45:ee:33:
57:bc:16:48:6b:23:33:db:f2:b7:cb:ec:99:56:5d:
49:9e:85:82:8a:01:0b:fb:26:9b:d7:c2:d8:d8:92:
76:bd:a3:e8:91:9b:fb:89:5e:05:77:46:ba:d0:61:
e0:4a:96:6b:be:dc:5e:e2:dc:ed:d8:94:6c:5d:7e:
e5:98:1a:b2:65:9a:27:fb:1a:a5:21:20:31:4b:d1:
d2:f2:73:d7:f6:d8:2e:82:78:0a:5b:c4:4a:b5:86:
23:cd:54:dc:e7:01:35:cf:5c:63:a2:2f:a3:5e:d2:
3b:e0:72:5e:89:45:20:34:db:94:e3:ad:03:0d:8a:
e7:b8:ee:f6:b5:c7:2e:0e:a7:15:3e:09:e2:0b:41:
84:76:4e:7a:28:e5:19:12:96:e2:9a:a9:7b:84:e5:
02:92:2a:f9:70:59:77:0f:37:46:cf:5a:db:b3:5f:
89:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D1:13:A2:46:6D:AE:C3:87:05:B5:DA:D1:57:D4:F6:D7:01:F0:EA
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:83:33:79:ea:4d:dc:15:76:a7:7a:50:60:19:66:82:f6:d2:
6a:cc:f1:46:18:28:fa:83:72:f9:db:13:22:bd:87:a7:9e:4a:
51:24:a9:de:ed:e5:6f:b4:bb:aa:fd:c3:2d:d7:83:a8:29:25:
13:5b:2a:11:84:ca:e4:da:50:b2:85:08:ff:ef:bf:d8:98:18:
b2:03:d2:75:47:c7:db:8a:df:88:11:7c:d3:96:db:6f:0f:be:
43:6c:65:6f:c8:ef:a0:00:a3:17:32:03:ba:f5:aa:f5:15:76:
cb:b0:a5:20:d6:1d:d5:5d:50:67:85:de:95:6e:99:05:8f:d5:
aa:7e:c8:db:aa:1a:4a:bf:71:e9:00:fb:7d:c7:df:cf:d8:e4:
a9:c2:4e:12:48:af:7c:30:7f:f6:49:c2:6b:7d:af:53:71:eb:
44:c9:2c:a2:c0:32:0c:03:19:19:16:7e:68:49:d4:a1:57:bc:
46:d9:bb:d2:b1:30:02:5f:9a:b3:07:f6:c2:98:a3:aa:dd:ef:
28:83:2c:70:e3:a3:a2:23:86:47:cd:91:57:3e:28:53:17:d0:
52:b1:87:6a:78:2a:1c:1d:f2:79:a9:f1:5c:c5:93:ca:6f:17:
c8:e7:e1:e1:71:7f:3b:52:00:9b:5d:50:ea:c0:c6:36:45:6b:
36:f0:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:17 2026 by rpki-client