Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: JvnyAvdx/BpVDZNFEmp2z7gsxy5F2wfQwP3v84gDzbk=
Subject key identifier: 33:EF:9F:36:3F:52:3E:76:75:45:B2:0B:12:3B:B7:7A:82:54:48:7F
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019E303B1C4C9AEB68BE50EF38F692D632CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 0AC9
Signing time: Sat 16 May 2026 10:00:40 +0000
Manifest this update: Sat 16 May 2026 10:00:40 +0000
Manifest next update: Sun 17 May 2026 10:00:40 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: 4PWNu+0b/VFSq4rrAlLJmyJtya1it1TdOUEHfzos5E8=)
2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:1c:4c:9a:eb:68:be:50:ef:38:f6:92:d6:32:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: May 16 10:00:40 2026 GMT
Not After : May 17 10:00:40 2026 GMT
Subject: CN=33ef9f363f523e767545b20b123bb77a8254487f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:e0:43:8f:24:5c:72:73:5c:26:83:db:dc:
cf:5d:fd:05:fd:c1:48:3d:17:2a:f1:9f:a4:c0:29:
45:17:62:8c:a7:96:14:48:34:cc:87:b7:93:81:36:
65:4e:41:20:e1:4f:39:4c:ad:61:b2:b5:5a:71:03:
2c:68:a8:92:3c:39:66:5f:eb:6d:bc:7b:2d:32:a5:
9f:c1:b9:f9:43:59:f9:62:46:e5:b9:2f:f2:90:26:
ff:91:aa:10:ea:27:3e:21:ba:f1:f7:72:58:64:35:
54:06:ad:26:e3:2a:12:f5:2f:30:8b:5f:4b:c9:c8:
97:9f:2a:18:ec:c8:3c:41:03:12:0c:70:50:a6:1b:
f7:f3:5c:19:87:4b:eb:50:28:b8:e5:2f:ab:f4:c2:
b4:36:e1:46:c9:44:17:76:3e:1b:eb:f2:e6:07:89:
eb:1d:61:9c:a9:9c:e5:7a:ae:08:df:a3:0f:9e:50:
45:b0:f8:b2:22:52:fa:d4:0e:47:51:1f:ab:9a:6a:
21:50:dc:0a:0e:1e:d8:c2:2d:f7:0f:a7:dc:5b:56:
7d:8e:e5:b5:fb:55:e2:a1:b7:56:03:69:0f:50:1b:
95:1e:99:9e:97:66:8e:a9:03:e0:ad:ea:96:b2:c8:
00:9e:30:ce:f8:7d:7a:d5:94:2f:0b:58:71:2d:16:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:9F:36:3F:52:3E:76:75:45:B2:0B:12:3B:B7:7A:82:54:48:7F
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8b:5d:b1:c2:c4:32:a7:49:b6:1c:66:66:3e:b6:8d:d9:89:
60:cf:af:9a:5a:92:2a:75:4c:3f:d9:74:fc:b6:b0:cf:67:99:
25:dc:06:4a:97:8c:0a:55:d9:7b:3f:c0:2e:2c:64:93:ee:06:
8a:16:17:78:b6:b7:60:b0:1e:9c:ff:4a:47:ae:89:fe:ab:3b:
f2:e2:5d:4d:4f:78:05:7b:71:50:16:a1:58:32:87:d2:08:52:
e2:11:b2:d2:08:b9:4c:ff:fd:70:f9:b1:0c:2b:4a:44:a4:7f:
b1:9d:40:22:16:c7:40:3b:ff:42:cd:92:1f:db:76:6d:b2:37:
14:19:e8:80:3f:aa:71:83:75:e1:a8:8d:e5:59:8a:ea:3d:72:
a6:95:6b:9c:b2:07:26:45:1c:8f:1f:9a:bd:d0:54:e9:7e:7c:
b9:01:90:fd:e9:61:9a:6e:36:89:b2:93:46:5d:35:52:cf:0c:
63:fc:1e:12:f2:05:04:6c:17:cb:83:a1:24:eb:45:85:4d:92:
18:72:c6:d1:7d:a8:13:22:4b:8d:1e:a2:29:1f:46:41:77:b4:
99:dc:2e:4c:66:04:ae:ba:96:03:69:94:4c:8a:f3:e1:c9:b5:
20:4e:a0:06:ac:32:42:06:b3:2f:f2:78:8e:34:a8:e3:82:5b:
b1:57:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:15 2026 by rpki-client