Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier: 2EKmRF91lIsXOvsj0V/Fj1kmgEnKhG4cuwvlPlEv9/4=
Subject key identifier: FE:91:F9:0C:80:72:F7:0D:D6:B0:05:57:11:56:91:72:18:BF:7B:BA
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 01A17E4F8FE04BB9B7282CFC696E42E173A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number: 1A1F
Signing time: Tue 27 Oct 2026 17:01:45 +0000
Manifest this update: Tue 27 Oct 2026 17:01:45 +0000
Manifest next update: Wed 28 Oct 2026 17:01:45 +0000
Files and hashes: 1: 06gNA3LV7YBXuhA1rKiMTeDxRoA.roa (hash: d9wHD1t/r/V+XScUKTAXojVgXFDnOgiwl/ANGl0ElHU=)
2: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: LP7y/2VU0nZLNkDOlsmPjgYmHdZR8QG/HmIB/7VkNw8=)
3: p_w8TFQKrPjZFeqKHXZkgHKF9Tc.roa (hash: tr6X6XVYM4REThJ5QdRO15I8HLm0u1bXqwDznTVnWXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:8f:e0:4b:b9:b7:28:2c:fc:69:6e:42:e1:73:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Oct 27 17:01:45 2026 GMT
Not After : Oct 28 17:01:45 2026 GMT
Subject: CN=fe91f90c8072f70dd6b005571156917218bf7bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:9d:fc:1d:f3:c4:61:1d:d6:0d:b6:d9:42:
e6:92:32:68:f3:4a:33:c0:ec:24:a6:64:77:0b:57:
86:10:2c:d0:71:23:8b:84:c5:07:85:ba:b8:17:14:
fd:fa:f6:3c:c2:43:46:2e:d3:7d:10:32:87:31:97:
f2:13:1f:02:43:31:4c:8c:08:19:e5:70:c1:2d:03:
55:09:06:e3:38:f6:00:11:88:4e:7f:9e:a6:d8:c3:
89:5d:96:14:45:51:8f:4f:d2:fb:8d:52:a6:12:b8:
8c:f3:6c:c3:6f:0b:68:f1:39:12:16:32:9e:7c:2f:
6c:b8:54:38:1b:44:19:91:d5:3c:4d:9c:6b:a4:3d:
c8:49:42:a2:a9:bd:c8:2f:42:e8:24:73:66:8c:90:
5b:69:11:ed:d1:71:eb:90:95:fd:0f:2e:a0:4c:e7:
02:f6:19:24:d7:fd:2a:3d:2d:d4:32:65:6a:ea:20:
17:f5:b2:ce:ab:02:8d:79:a3:94:2b:0b:9a:89:ca:
b0:42:ed:bb:8d:0b:48:20:23:53:58:76:94:3a:59:
d6:0d:e3:6a:02:81:52:7c:b0:a1:8b:6e:f8:d2:4e:
f4:66:a1:21:e9:6f:58:7f:1d:93:3b:c4:b7:c5:72:
a9:44:50:33:96:c2:c3:f7:71:16:5a:f8:91:e8:2b:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:F9:0C:80:72:F7:0D:D6:B0:05:57:11:56:91:72:18:BF:7B:BA
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3f:ac:f5:05:41:35:be:24:25:c2:74:11:54:d3:8f:c6:01:
d3:03:87:27:02:fa:40:80:fb:ec:5e:d8:62:be:26:50:c1:20:
df:5e:6d:ba:7e:45:ee:37:1c:d9:cf:28:d8:4e:7a:39:52:21:
86:8a:a5:b4:f3:ac:0c:04:27:65:de:70:cf:18:fd:2a:6d:15:
28:4b:ae:5e:82:88:fc:28:b2:6e:b9:0f:bc:b2:30:30:52:5c:
47:7f:e4:3f:94:d1:21:e5:2e:d8:33:e0:ca:78:ad:86:49:4e:
8b:26:ae:a9:d0:c7:14:01:6a:19:da:58:5a:6d:15:cc:07:4d:
53:60:bb:00:4a:9e:63:4b:09:21:91:a8:ce:ce:54:62:6d:e5:
56:54:7a:99:ae:8a:46:9d:56:76:f5:79:df:c1:21:e0:47:7f:
e1:1f:4b:bc:1b:47:fa:b4:3c:88:84:03:01:a9:3a:1d:d5:2c:
5f:e5:10:5c:98:15:35:e5:f1:db:b2:b7:b5:b4:fd:2d:ce:04:
fd:23:5e:4b:1a:8b:b0:4b:45:a6:ff:24:f2:ff:12:bc:9b:f4:
bd:26:b4:da:fb:31:d9:23:40:e2:22:b4:21:9c:6f:2f:0d:bc:
23:ad:09:38:6c:f4:75:e0:b9:d6:9f:25:00:ee:06:dc:8f:a1:
02:95:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:33:49 2026 by rpki-client