Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier: E5kQQ9oZGTyYTKF+EXIY426EbeKuuAuHqbBGmJA1bA0=
Subject key identifier: 32:87:CD:35:3C:6C:F8:E6:6D:6E:94:4D:A9:BE:E8:86:C0:51:73:8B
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial: 019D378903124635A6EA0EF4566F98787507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number: 156A
Signing time: Sun 29 Mar 2026 03:00:19 +0000
Manifest this update: Sun 29 Mar 2026 03:00:19 +0000
Manifest next update: Mon 30 Mar 2026 03:00:19 +0000
Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: WWKuhELh+48Hb+UYq0T+CMjKinvetk/LoirKTDcb/Ig=)
2: TM2u3nE4U4gt579zKk1egxcYwGw.roa (hash: XOA83pwjmnyrd8JcXEc6+qU+kfl85cy7kc2/rS23hZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:03:12:46:35:a6:ea:0e:f4:56:6f:98:78:75:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Validity
Not Before: Mar 29 03:00:19 2026 GMT
Not After : Mar 30 03:00:19 2026 GMT
Subject: CN=3287cd353c6cf8e66d6e944da9bee886c051738b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:ba:36:fe:01:ac:5d:99:df:66:4e:5b:f8:
c2:ed:32:23:17:a2:62:9f:69:57:ca:27:e2:91:d2:
01:c4:50:c5:4e:38:c1:4d:8c:0d:21:fd:c2:20:7b:
57:1c:98:2a:0b:da:69:ee:31:a1:2f:41:f4:5c:8b:
55:29:d2:69:4f:4e:5d:5b:f6:3a:32:80:c6:2b:4d:
d6:f6:9d:f9:c4:51:d5:1b:e3:15:19:b4:c8:18:ca:
da:5b:e0:11:7c:e3:cd:74:eb:1f:0e:5d:e4:bc:61:
ee:58:5d:52:ce:8a:97:f6:d3:79:21:5e:43:55:f9:
11:cd:4b:ac:2d:6e:33:c2:83:f6:e9:13:91:82:c2:
6d:69:0d:d7:c7:56:db:81:c5:e1:47:54:e7:da:71:
ff:4b:27:83:04:07:4a:c9:8a:32:bf:65:60:ef:04:
cb:76:60:f1:96:4e:94:64:3b:f6:b0:c5:dc:f6:dd:
d2:29:fd:bd:13:d6:f9:8f:e3:c0:17:43:6a:53:cb:
7f:3f:60:d0:f3:4d:a1:eb:c5:d7:23:a6:1c:c7:6c:
fd:8d:83:99:6c:61:47:cc:e5:09:41:bf:43:a6:9b:
71:f4:f5:95:73:ae:5c:1b:25:15:54:fb:6a:30:81:
55:d5:84:b8:5b:dd:6b:97:87:04:57:44:4c:a6:eb:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:87:CD:35:3C:6C:F8:E6:6D:6E:94:4D:A9:BE:E8:86:C0:51:73:8B
X509v3 Authority Key Identifier:
keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ca:54:d4:f4:a0:fa:95:51:3c:ec:d7:e8:a7:5b:d1:ea:76:
3f:8d:db:ef:69:e2:eb:c9:fd:c2:f5:ac:8c:3f:22:18:0d:aa:
b2:05:e5:60:41:df:7b:c4:77:f1:a3:fb:d3:fa:72:7b:65:9e:
f6:64:2b:36:27:3e:42:f0:31:4f:48:92:3e:7d:4f:26:5e:13:
f6:4c:62:3e:43:aa:57:6e:98:6e:f3:b7:e9:be:18:f3:95:e6:
47:f1:e9:5b:d8:b6:cc:d0:a9:d7:cd:77:02:3d:e5:e5:46:4e:
bb:4c:32:79:60:74:6b:7e:db:3d:74:cf:86:6c:e9:62:73:3d:
38:a9:49:ba:d8:78:8d:4a:22:3b:43:20:53:2b:ed:db:e3:4e:
49:f3:4e:1d:e3:91:ea:71:00:c7:64:d5:31:70:29:70:02:dd:
2a:f1:ee:87:4d:43:74:f1:8d:1e:d4:8e:ae:9e:d6:c6:3e:40:
4e:e1:09:d0:f8:b6:9f:ac:df:9c:96:b2:d2:b8:f1:3a:5e:3c:
83:05:cd:b9:fb:87:0d:7f:08:40:5d:1c:68:b5:23:5c:15:f0:
da:01:59:40:0c:d5:2b:0b:41:1f:15:24:6d:86:92:ef:54:1e:
b3:a9:ec:a5:ab:68:a9:39:16:a1:d5:34:09:59:4b:09:8a:12:
08:b8:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:25 2026 by rpki-client