Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: BxJ9U0LAfYtNeYNQjeGFBIot5DNonO70Ej6z5DDn0JY=
Subject key identifier: 2D:90:29:02:26:DC:A7:A6:2C:96:DC:07:9E:88:3B:68:FE:45:8D:88
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019D3909E074CD44F27841B706EAA8551830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 0A49
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: 1DWvHYz9jestUcw97Q8/qOjHF1gFkoWDdeEjD/7WTJw=)
2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e0:74:cd:44:f2:78:41:b7:06:ea:a8:55:18:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=2d90290226dca7a62c96dc079e883b68fe458d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:80:d2:fd:e8:c0:a3:bd:79:fa:7d:7c:c3:
3d:9c:99:04:ce:fe:5e:fc:3b:1c:ec:9d:15:c0:81:
a4:27:34:8b:ee:cf:f0:7a:45:f9:aa:3d:50:fa:45:
e6:41:af:e9:49:0a:e1:a1:c2:b3:62:af:f1:04:d1:
86:c1:7a:87:60:43:3e:62:cd:6e:8e:39:1a:56:f4:
39:90:da:1a:98:8c:89:c3:25:e6:8f:88:71:74:37:
55:32:f1:9f:b5:a3:24:d5:22:5e:67:54:e1:36:1e:
51:07:68:97:db:ab:ae:93:54:42:8f:7d:81:a2:78:
6c:7c:b2:01:44:21:58:0d:ff:82:df:44:95:56:c5:
6e:28:36:98:d9:e7:8c:97:24:f5:3c:c3:b2:93:b4:
af:dc:8a:35:94:5a:97:9a:b9:ee:a3:9f:b2:e1:a6:
09:69:d0:a3:f0:81:e9:3c:42:80:91:c3:b2:ca:95:
53:11:79:6e:ab:50:62:69:9f:3d:b3:08:d7:21:85:
4b:6c:e7:80:f3:47:89:90:65:b5:2c:89:a2:0e:be:
a8:2a:43:b0:27:02:a4:91:23:37:96:2f:e0:2d:50:
9a:ea:7b:13:fb:f7:1b:af:e6:3a:a3:97:2b:4b:a7:
05:23:00:12:d4:1c:2b:90:03:6d:15:1b:6f:8c:ca:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:90:29:02:26:DC:A7:A6:2C:96:DC:07:9E:88:3B:68:FE:45:8D:88
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8c:fe:09:4f:0b:53:bc:87:1b:0f:aa:27:91:f3:ab:5c:dc:
5c:75:8d:9f:e3:83:de:85:dc:99:71:1d:29:99:26:a8:31:8c:
93:63:42:0e:bc:4b:e5:90:0c:29:71:20:26:81:43:29:1c:f3:
a2:71:e4:a8:5c:63:38:cb:12:e0:1c:4b:ac:09:47:21:bd:23:
f5:c5:15:d7:bf:c0:d7:ac:6f:91:5a:3a:61:d5:53:c6:9a:b9:
94:c2:dc:7a:7d:88:15:c4:2f:0f:fe:16:14:fc:20:2d:5f:3d:
7c:94:eb:6c:36:7c:59:7c:8c:b2:25:0f:11:c5:2d:62:51:82:
5c:30:f5:43:0a:d0:5d:5a:8f:b5:8c:b1:8b:8b:51:c0:2a:30:
3d:ce:24:d3:4c:03:b4:a7:45:79:11:3f:22:05:67:c1:ea:94:
85:0c:46:55:97:24:27:77:35:71:94:f6:fc:19:52:b8:37:7e:
da:82:93:12:65:1b:9f:df:d0:87:d4:98:24:27:45:52:df:e1:
c6:b2:55:4d:c5:c1:38:8b:63:7f:6c:21:80:89:50:68:d1:2a:
0f:31:95:1b:35:71:88:d7:87:07:b4:ba:a1:46:35:20:5e:ff:
7a:84:6c:71:b1:8e:67:24:30:af:6b:6b:5b:f6:65:24:f6:34:
71:9b:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:42 2026 by rpki-client