Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: Haq5OfCIfz4LPB/KllG6j6DvuoOd5YWUYdvVe2KOv6U=
Subject key identifier: F1:3A:A3:B5:D6:A4:61:F3:29:D6:76:17:7A:DB:D0:20:BC:DD:96:88
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 019D37F721ECD463D88DF5F044C876F3ADA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 0FAC
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: jZLqkSdsA4fu83rzTj1MeyXlpci0n1UiLUPsppsuOZE=)
2: GjbkJ49m1ylK_4cEmIWXPszPEDM.roa (hash: gxfEhCbhLA8o8by+I0tdbjJ2UvnCGKEhH4gj7vfErb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:21:ec:d4:63:d8:8d:f5:f0:44:c8:76:f3:ad:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=f13aa3b5d6a461f329d676177adbd020bcdd9688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:e1:1c:91:64:35:ae:f9:9a:1f:04:0f:e7:
3a:bc:54:7f:97:a7:bf:0b:a3:f2:02:0d:eb:4c:8f:
20:e6:1d:97:55:09:ee:72:cc:5a:40:13:a7:59:6e:
37:f6:6d:a1:7f:f7:b2:c2:3f:25:80:f9:25:39:b1:
19:c4:b5:17:33:22:b4:f6:20:1d:a4:5c:9b:61:a5:
ab:ae:2e:fc:57:83:50:cf:f3:f4:a4:e8:bf:88:36:
db:ea:26:8c:e1:be:21:0c:8d:76:b2:a2:97:15:56:
4a:e2:da:a2:47:1f:e7:2c:a3:2a:ca:34:d6:3e:f5:
3f:6f:c7:dd:61:78:86:53:06:e7:b1:42:43:06:21:
ff:b3:bd:4d:f0:9c:59:3f:4b:f9:1a:f3:16:11:3b:
09:27:15:e4:2e:30:9b:cc:e6:8b:4f:b5:a0:58:87:
aa:5d:0d:8b:56:c2:4f:cb:3a:30:cf:c1:78:49:a1:
c1:39:70:e2:90:24:47:7f:a2:63:f1:51:4d:a3:85:
55:17:d0:89:62:56:0c:58:41:02:15:c7:09:52:d6:
31:61:fc:af:e8:75:83:b7:c8:01:49:6c:cb:fb:e7:
18:d8:49:8a:79:76:a8:6d:80:6b:1b:6f:22:ab:f9:
40:cb:de:58:e2:82:a2:11:21:97:01:09:d7:3e:9b:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:A3:B5:D6:A4:61:F3:29:D6:76:17:7A:DB:D0:20:BC:DD:96:88
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a0:b4:a2:bd:ae:ff:ef:df:b6:56:79:f4:6a:be:04:f7:1f:
a8:28:c2:ad:66:23:cd:b8:c7:2e:be:31:59:4c:97:b1:3f:ce:
49:73:99:ce:65:67:87:d3:b3:10:49:90:ac:70:9a:eb:b8:78:
5c:5a:a4:05:7a:a8:b8:a3:d6:8f:8e:d8:7d:e4:e9:f0:72:ba:
59:60:41:93:91:d5:02:6d:22:a3:39:6d:1d:bc:0f:9f:e2:1a:
cc:65:5e:d8:11:8e:ee:1c:2f:76:90:08:ca:f4:f8:3a:75:a5:
d7:32:a0:06:3d:f9:75:1a:72:1e:1f:79:b7:85:34:88:35:69:
5e:82:f6:0a:ac:ed:ee:6f:ce:28:6c:f6:9b:3a:cd:f8:5a:79:
41:d1:df:bb:40:d6:42:22:9c:04:42:e4:9d:dc:47:e2:78:f2:
ae:e9:a0:49:f6:0f:8a:b5:ef:52:94:a6:fe:25:27:a9:1f:f4:
68:de:7b:6b:f6:f4:cf:75:c0:71:db:c7:c4:5a:f6:75:f7:ec:
42:c3:2e:a8:a4:1f:af:57:01:b0:df:91:12:02:4e:17:bc:01:
fe:11:30:4f:1e:15:88:f6:f5:e1:af:f9:5b:a0:0f:61:e6:75:
84:fa:98:5f:6e:05:b9:54:ed:82:20:04:8c:c7:ae:4f:ba:eb:
e4:b4:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:47 2026 by rpki-client