Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: KqSHJ9TdvOHaGeMb/YaO+SsfeEZhcNWwFGfYnzNtPkY=
Subject key identifier: 12:29:B8:B5:6A:58:80:D6:08:FA:71:55:3A:60:68:5C:46:36:40:94
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 01A13F3983824513461DD46FE836ACE2046F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 11C2
Signing time: Thu 15 Oct 2026 11:01:36 +0000
Manifest this update: Thu 15 Oct 2026 11:01:36 +0000
Manifest next update: Fri 16 Oct 2026 11:01:36 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: uh6eHF/JQ7mVaQybPiq8iHU3nRceW4aqmSboBRaUx+A=)
2: GjbkJ49m1ylK_4cEmIWXPszPEDM.roa (hash: gxfEhCbhLA8o8by+I0tdbjJ2UvnCGKEhH4gj7vfErb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:83:82:45:13:46:1d:d4:6f:e8:36:ac:e2:04:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Oct 15 11:01:36 2026 GMT
Not After : Oct 16 11:01:36 2026 GMT
Subject: CN=1229b8b56a5880d608fa71553a60685c46364094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:d5:7f:b3:96:c0:85:3b:69:21:68:a1:d6:
22:9d:6d:b1:35:7d:72:d8:d2:18:1c:06:15:3d:1d:
66:33:57:ea:1e:ca:12:c0:54:08:81:4f:e5:e2:be:
14:de:62:cb:69:cd:90:40:9a:49:98:f9:f6:d8:a3:
5b:e6:82:08:17:3a:a0:7c:70:e0:a2:af:7d:1e:4a:
73:9e:8c:26:3a:cd:fb:03:62:67:bd:ea:63:73:3d:
b4:8f:0b:b6:3e:22:ee:05:91:1e:fe:a7:83:0d:eb:
da:bb:40:c8:31:40:4a:fd:93:c7:40:d7:05:a5:83:
29:7c:60:62:ba:48:77:40:97:9e:84:fa:80:fe:a2:
e0:a0:9d:27:6f:03:4a:02:16:68:a7:c6:20:56:04:
cc:f1:c0:70:4f:f9:35:7c:16:18:9b:c0:55:27:aa:
85:b8:38:9d:54:13:be:b8:c6:3e:3e:61:33:2c:2f:
06:e1:8e:70:cd:c3:97:cd:b0:a7:f9:46:6a:7c:61:
55:85:93:37:91:78:5f:64:ed:33:46:c8:b0:0c:e4:
5e:66:b6:04:0b:82:72:bf:e2:ff:8e:83:a9:1b:77:
fb:d3:4d:a3:43:08:f0:0e:6c:c1:91:6e:33:cd:ad:
27:e6:0b:c1:21:33:ac:9c:d2:e4:7a:20:1a:34:53:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:B8:B5:6A:58:80:D6:08:FA:71:55:3A:60:68:5C:46:36:40:94
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a4:f6:59:66:8d:46:22:17:61:08:05:8f:e0:e3:08:22:80:
0b:0c:0d:71:ee:11:8c:c1:92:7e:42:78:b6:7d:64:d2:98:80:
5f:f2:83:d5:33:33:8a:26:b6:8b:90:33:a8:7c:00:70:b6:7e:
16:2d:d2:2d:96:e3:31:1f:bd:bd:c2:ad:08:dd:62:22:a8:e9:
d6:75:8f:99:a4:19:b5:85:4f:35:93:9f:42:d3:30:3c:74:d4:
7f:26:92:6e:85:44:e7:27:94:66:15:b0:36:ae:fd:b6:61:9e:
a8:60:8e:37:01:22:b3:29:36:15:96:7e:44:9a:f7:af:4c:7b:
01:c1:bf:0f:9e:94:cb:6c:b1:f2:88:08:69:4e:4d:c7:4b:73:
20:4b:23:f8:8c:49:d2:8f:3e:2a:2c:11:8b:2f:d0:25:3a:20:
94:41:96:c5:b2:35:57:66:bd:66:77:4b:85:21:b5:04:74:c0:
24:bd:e7:74:21:51:5b:c5:a7:f5:36:de:b1:53:6e:36:81:d2:
a3:8f:84:7e:31:28:07:b2:e9:38:7f:73:52:5e:0e:36:b2:4c:
2f:c8:e2:70:5d:3a:dd:f1:d5:e6:43:65:96:68:c1:6a:7f:95:
72:5e:1e:5d:e0:83:98:ed:bf:02:e8:14:5e:a0:69:3a:a7:2a:
0d:7b:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:24:52 2026 by rpki-client