Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier: epkKDSf1ncNGU3oj/OMzHoRNMKZ5iXuCE/dqqGsm0sc=
Subject key identifier: 2F:C7:05:50:D9:93:C3:2D:70:18:01:AC:AC:BA:EE:00:B2:19:A5:37
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 019D394145FCD8616557BB4F07CFC0A5AC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number: 17E9
Signing time: Sun 29 Mar 2026 11:01:12 +0000
Manifest this update: Sun 29 Mar 2026 11:01:12 +0000
Manifest next update: Mon 30 Mar 2026 11:01:12 +0000
Files and hashes: 1: 06gNA3LV7YBXuhA1rKiMTeDxRoA.roa (hash: d9wHD1t/r/V+XScUKTAXojVgXFDnOgiwl/ANGl0ElHU=)
2: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: 379q2vNcF6PlysGBtCRxZC10Q1HcURI4DSZaU24LeI0=)
3: p_w8TFQKrPjZFeqKHXZkgHKF9Tc.roa (hash: tr6X6XVYM4REThJ5QdRO15I8HLm0u1bXqwDznTVnWXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:45:fc:d8:61:65:57:bb:4f:07:cf:c0:a5:ac:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Mar 29 11:01:12 2026 GMT
Not After : Mar 30 11:01:12 2026 GMT
Subject: CN=2fc70550d993c32d701801acacbaee00b219a537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:bf:41:fd:7d:95:47:81:d8:65:cf:87:1b:
a8:20:81:24:76:33:5b:2e:c8:39:81:34:b3:4d:89:
26:89:fd:05:9b:14:d8:09:a1:99:5f:27:a9:12:6d:
c8:d8:78:30:0f:51:d8:34:ac:6c:0f:a8:e8:03:42:
8a:81:3f:79:d3:7c:d5:50:b2:d2:95:65:e6:7f:f7:
c5:43:ea:41:74:ad:1b:e1:60:ee:d1:43:87:cd:27:
fa:21:c8:fb:ec:ba:2f:f3:c9:80:4d:0a:c8:2b:30:
19:06:77:37:6a:98:c0:62:39:a2:b0:03:7f:35:3c:
c4:34:8b:7e:2d:2f:23:4f:d1:2e:5a:f3:a7:29:2f:
d0:67:5f:79:20:1b:bb:78:80:ff:b8:f2:7b:7d:62:
bd:80:4e:ec:2e:6e:87:16:14:94:74:6d:0b:06:75:
de:f2:4a:e9:82:d9:5c:f7:40:90:ac:99:2d:2b:08:
fc:69:6c:76:22:56:19:3b:f6:34:5e:c5:21:75:82:
6d:97:f6:fb:b1:1b:84:18:64:b9:2b:ee:58:dd:c7:
36:4e:65:02:43:c9:74:36:8d:ca:e2:97:48:da:c0:
3c:f6:ba:ba:89:15:14:a2:ac:4c:76:33:86:1e:be:
94:03:fa:0d:ce:e8:f5:9d:60:a0:65:14:ea:b7:2c:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C7:05:50:D9:93:C3:2D:70:18:01:AC:AC:BA:EE:00:B2:19:A5:37
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:a0:a4:b4:a0:b8:07:e9:7c:78:18:4d:e4:cc:46:38:69:
a0:d6:4f:62:88:72:0c:72:b8:6b:6a:a8:68:aa:6f:8d:f9:bc:
01:7b:01:b3:88:0e:a8:e0:53:01:25:52:99:c8:50:22:0e:ce:
2c:eb:45:62:64:86:51:98:6f:89:bf:ec:f1:54:66:2b:f2:6f:
57:93:f1:b6:c8:c0:aa:d8:08:f5:0a:44:66:62:14:ea:e1:f5:
d7:8c:bf:f7:41:75:eb:d1:93:b0:ac:98:87:7f:f8:5b:45:44:
ba:34:83:69:d4:37:d2:28:9e:7e:23:80:8c:70:33:54:ac:ce:
a7:5e:24:c8:d3:77:e8:e3:90:cb:09:e5:9f:11:7f:5a:a8:4b:
d6:6f:5c:c4:67:47:c3:0f:4a:68:20:4c:e7:95:13:32:68:02:
d6:8d:20:e4:bd:a3:43:3a:d1:6e:57:c2:2a:03:82:a1:ca:7c:
80:71:5f:a5:fb:54:4a:1e:05:0e:c2:ef:16:14:8d:e4:0e:f1:
99:27:d8:3d:86:ce:68:34:70:0c:5c:ae:50:4d:93:d7:54:39:
96:f7:c6:5f:6e:d9:fb:bb:6a:f8:1d:d4:b2:7d:45:f0:a0:dd:
c9:e6:08:cc:cb:6b:31:71:e4:f9:eb:2d:ff:a5:6e:2d:65:d0:
d6:cd:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:14 2026 by rpki-client