Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: bgz4wq9pvhRUsb+OfyYc/DZnCop28AA7zuDowLmblIQ=
Subject key identifier: 2B:85:52:F4:F2:54:6F:B2:D0:12:15:84:5F:6A:2F:BD:8F:A5:AF:24
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019F17F9B631E58664740236DBB386DA2019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 0B41
Signing time: Tue 30 Jun 2026 10:01:08 +0000
Manifest this update: Tue 30 Jun 2026 10:01:08 +0000
Manifest next update: Wed 01 Jul 2026 10:01:08 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: NDYNMF/noh/nJtbp2rhDl4Mw0LCxmnaO+o5BsLiZINA=)
2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:b6:31:e5:86:64:74:02:36:db:b3:86:da:20:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Jun 30 10:01:08 2026 GMT
Not After : Jul 1 10:01:08 2026 GMT
Subject: CN=2b8552f4f2546fb2d01215845f6a2fbd8fa5af24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:90:fe:36:76:c4:8c:26:c8:0c:55:ac:73:
38:3b:30:25:bd:3c:1f:86:88:ab:dc:2f:45:05:24:
02:75:64:38:31:40:98:83:5c:9f:04:11:39:ca:a6:
91:6d:b1:10:8c:ab:93:10:22:f1:35:0c:5d:7c:34:
d2:b8:c5:28:16:03:38:2f:9d:f9:1e:02:e4:92:3e:
53:0e:ea:95:f3:4c:46:6f:e0:fa:1a:6f:f5:a0:2c:
31:78:2f:83:2e:af:db:81:4a:9a:a8:a9:2e:a2:96:
5c:fd:6b:3f:19:19:46:d4:d2:ba:28:1f:67:55:4d:
26:28:97:eb:fe:49:3a:3d:61:8d:47:96:09:48:8a:
c0:32:2f:16:b9:66:ae:b6:a0:e7:95:8c:60:40:e7:
77:b4:fc:26:54:1f:03:df:1c:a8:45:9d:13:d6:60:
37:cc:37:46:ef:d1:6d:02:e7:cf:0b:ed:0f:6e:9c:
e6:01:c1:42:50:6e:06:4f:e5:9f:58:14:bb:27:d9:
79:7d:e5:03:9d:4e:84:ca:ce:ac:ca:e3:40:a2:fb:
e1:47:a9:f4:94:ac:90:ae:a3:c8:81:d0:76:02:b5:
2f:b2:76:da:4c:8f:b2:c4:4d:38:81:3a:d4:a8:b1:
71:bc:53:2d:b6:4d:e3:4d:bb:98:b2:8c:29:37:8b:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:52:F4:F2:54:6F:B2:D0:12:15:84:5F:6A:2F:BD:8F:A5:AF:24
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4b:f1:36:36:fb:8d:13:c6:cf:3d:26:01:f5:36:68:bd:59:
d9:8b:d0:1e:65:75:7d:dc:83:bf:43:71:cc:ec:fe:e4:e1:e5:
09:70:4a:76:b9:94:ea:d6:e8:69:3a:73:77:22:d2:de:bc:2c:
dd:db:95:42:3c:55:ed:0c:c6:3f:bb:ec:9e:f9:dd:4c:be:ee:
81:1f:3f:c0:24:1c:56:2c:3c:d7:51:f7:90:39:d8:bb:cf:6c:
62:11:f2:af:45:7b:85:1f:39:fa:e1:73:a1:96:52:65:49:05:
fa:89:08:3e:28:a2:45:11:cd:20:9a:2e:60:61:5c:a5:b9:44:
5c:d1:0a:fd:ac:85:4b:68:a1:20:45:cc:90:60:f1:87:6d:84:
0d:8f:31:2f:d1:53:71:43:85:3c:4f:59:ca:ee:5f:3a:df:aa:
dc:93:11:04:6e:22:f4:75:b3:86:a4:69:e7:b1:06:e9:30:34:
6a:0f:2c:b2:1f:0a:d0:39:b7:fd:b1:3c:bb:d4:f9:ab:a2:cd:
aa:19:7e:b4:d8:59:83:24:15:17:60:a3:b9:02:64:7e:9d:55:
a0:a9:d6:09:94:ec:33:b2:31:d5:e2:58:36:46:f3:fc:5f:aa:
67:12:43:39:75:24:e4:ea:29:eb:c0:2f:f5:91:d3:08:dc:b9:
c8:07:1d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+bYx5YZkdAI227OG2iAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ODdhNGFjYTU4MWQ4ZWJjZGZlMjRiNjVmMWU3MGExMmYy
ODlhNzgwHhcNMjYwNjMwMTAwMTA4WhcNMjYwNzAxMTAwMTA4WjAzMTEwLwYDVQQD
EygyYjg1NTJmNGYyNTQ2ZmIyZDAxMjE1ODQ1ZjZhMmZiZDhmYTVhZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIuQ/jZ2xIwmyAxVrHM4OzAlvTwf
hoir3C9FBSQCdWQ4MUCYg1yfBBE5yqaRbbEQjKuTECLxNQxdfDTSuMUoFgM4L535
HgLkkj5TDuqV80xGb+D6Gm/1oCwxeC+DLq/bgUqaqKkuopZc/Ws/GRlG1NK6KB9n
VU0mKJfr/kk6PWGNR5YJSIrAMi8WuWautqDnlYxgQOd3tPwmVB8D3xyoRZ0T1mA3
zDdG79FtAufPC+0PbpzmAcFCUG4GT+WfWBS7J9l5feUDnU6Eys6syuNAovvhR6n0
lKyQrqPIgdB2ArUvsnbaTI+yxE04gTrUqLFxvFMttk3jTbuYsowpN4tB7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuFUvTyVG+y0BIVhF9qL72Ppa8kMB8GA1UdIwQY
MBaAFAaHpKylgdjrzf4ktl8ecKEvKJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEt
MmQyOGExOTEzNWZkLzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEtMmQyOGExOTEzNWZk
LzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0vxNjb7
jRPGzz0mAfU2aL1Z2YvQHmV1fdyDv0NxzOz+5OHlCXBKdrmU6tboaTpzdyLS3rws
3duVQjxV7QzGP7vsnvndTL7ugR8/wCQcViw811H3kDnYu89sYhHyr0V7hR85+uFz
oZZSZUkF+okIPiiiRRHNIJouYGFcpblEXNEK/ayFS2ihIEXMkGDxh22EDY8xL9FT
cUOFPE9Zyu5fOt+q3JMRBG4i9HWzhqRp57EG6TA0ag8ssh8K0Dm3/bE8u9T5q6LN
qhl+tNhZgyQVF2CjuQJkfp1VoKnWCZTsM7Ix1eJYNkbz/F+qZxJDOXUk5Oop68Av
9ZHTCNy5yAcd5g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:04 2026 by rpki-client