Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: Nbw+lNNqeTGuy70lmfwgyGEv7x606DwUZXtHJHPSedY=
Subject key identifier: D7:EC:BC:C1:1E:51:BA:A8:DB:AC:4E:CA:3B:40:80:C9:B9:36:88:5F
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 01A00093C28C4601C6F2843355C4518269D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 111D
Signing time: Fri 14 Aug 2026 14:01:18 +0000
Manifest this update: Fri 14 Aug 2026 14:01:18 +0000
Manifest next update: Sat 15 Aug 2026 14:01:18 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: 60z8SILotdmpIbktx59EuxEwcRstNBimatsVOpSOluM=)
2: GjbkJ49m1ylK_4cEmIWXPszPEDM.roa (hash: gxfEhCbhLA8o8by+I0tdbjJ2UvnCGKEhH4gj7vfErb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:c2:8c:46:01:c6:f2:84:33:55:c4:51:82:69:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Aug 14 14:01:18 2026 GMT
Not After : Aug 15 14:01:18 2026 GMT
Subject: CN=d7ecbcc11e51baa8dbac4eca3b4080c9b936885f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:32:41:36:dd:39:85:05:7c:41:c3:15:40:
f6:0c:75:9a:1e:cc:7b:00:eb:43:be:b9:2d:b7:e8:
ab:61:8d:36:52:73:f9:ec:01:79:83:3f:9d:db:40:
4b:7a:92:23:cc:1c:60:e6:bb:d9:df:1a:2b:9b:44:
04:8d:e5:8b:fd:f1:b6:0d:10:f0:2b:8a:e0:1b:cb:
25:3e:ec:3a:57:9b:8e:ce:60:de:21:ec:ec:db:c0:
5f:35:dc:a8:a4:77:69:7b:86:7c:cb:5e:bb:0b:b7:
91:91:d8:37:a0:70:0c:0f:49:6b:8f:5e:d7:62:13:
d4:d5:34:1c:8e:75:c1:b9:10:c6:53:55:41:29:04:
eb:54:dc:2d:d8:a7:47:15:a0:a2:65:67:00:58:e9:
d8:63:f8:b1:52:6f:90:2e:3c:83:89:a4:37:4f:f3:
4b:d0:c5:73:ca:ad:91:2b:3e:f3:62:14:85:e6:88:
87:62:27:fd:a4:01:c8:63:73:3c:2e:23:fd:e8:d1:
1c:52:70:6e:6f:72:5c:84:af:67:e9:6f:b4:02:a5:
05:7b:de:48:8f:d6:db:75:60:3a:0d:4c:d5:3c:a7:
f3:b1:81:17:cb:23:74:8a:f5:0e:3b:6b:a2:96:b4:
fe:73:73:f6:ba:fe:b2:f4:67:67:52:2d:1a:01:05:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:BC:C1:1E:51:BA:A8:DB:AC:4E:CA:3B:40:80:C9:B9:36:88:5F
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e8:f5:b5:62:e2:5d:a5:f1:76:ad:d7:4f:b7:75:ee:b7:bc:
55:02:b2:e8:f0:12:3b:cd:ff:79:c4:84:86:d2:b4:b7:8a:97:
35:98:18:0b:70:73:21:c3:71:59:02:fc:8b:41:98:8a:d6:60:
59:cc:2e:88:6e:1b:f5:2a:fb:06:d5:c8:5e:c1:6a:cd:0e:c6:
a1:4c:43:84:22:5e:60:55:a1:00:02:1f:7a:21:4e:30:76:12:
c1:07:af:8b:13:83:ae:df:27:14:76:72:64:85:1b:db:b5:a3:
eb:0d:ac:a1:7b:3e:89:dc:8f:1d:9a:85:52:6a:a3:18:f0:ea:
4e:d3:10:2b:34:c9:85:82:5e:36:d0:fe:6a:63:e2:cc:72:60:
a1:48:8e:24:b5:cb:16:8c:e6:c5:6e:c3:14:be:2e:06:b1:5b:
18:fb:04:da:7b:0f:c1:4a:6e:07:11:10:2b:f7:b5:0e:00:85:
92:28:8d:95:5a:91:ab:b3:30:f5:e3:02:94:47:e2:c3:1e:f5:
77:96:9f:48:24:e5:97:2b:a0:66:a5:46:44:1f:ba:ff:68:0b:
0b:ae:16:f2:b5:b7:cb:f6:35:18:f7:f5:25:2f:3a:a1:6e:e8:
c9:6b:1c:a5:f7:3f:89:0b:e5:d1:2b:d3:69:27:db:8e:38:c4:
4d:b4:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:27:41 2026 by rpki-client