
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier: ecVER1djOQaiikS5Q6UrF+ncKnqFYK6aYggoXaZC5Mg=
Subject key identifier: 0C:F4:B1:87:34:71:8B:E4:15:07:4E:06:C5:2C:32:D7:01:45:0D:2B
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 019FA14D619A3FD978CE5B3E40A04891AA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number: 1928
Signing time: Mon 27 Jul 2026 02:00:30 +0000
Manifest this update: Mon 27 Jul 2026 02:00:30 +0000
Manifest next update: Tue 28 Jul 2026 02:00:30 +0000
Files and hashes: 1: 06gNA3LV7YBXuhA1rKiMTeDxRoA.roa (hash: d9wHD1t/r/V+XScUKTAXojVgXFDnOgiwl/ANGl0ElHU=)
2: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: 0BdJFXRNdQkso2Swo4evtJa+58EASRTQ6Im3KLrkPtg=)
3: p_w8TFQKrPjZFeqKHXZkgHKF9Tc.roa (hash: tr6X6XVYM4REThJ5QdRO15I8HLm0u1bXqwDznTVnWXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:61:9a:3f:d9:78:ce:5b:3e:40:a0:48:91:aa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Jul 27 02:00:30 2026 GMT
Not After : Jul 28 02:00:30 2026 GMT
Subject: CN=0cf4b18734718be415074e06c52c32d701450d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:77:f3:70:2e:76:e3:bd:e8:f3:4b:85:c7:
92:d5:c6:18:a1:e2:86:5c:e9:50:94:bb:f2:01:d9:
39:ca:08:1f:bc:53:17:4b:0d:ad:a9:e3:42:cc:81:
61:8d:c0:11:ee:a2:8b:e9:08:8b:ee:e5:bf:52:17:
28:68:c6:72:f0:a9:9e:2f:a3:2c:22:4a:65:e4:9c:
39:0f:4f:35:d7:76:90:84:b0:ef:e6:95:18:87:5d:
96:2f:60:ae:01:6b:36:3e:f2:c3:29:b9:74:f7:f6:
fc:27:eb:0d:5f:6f:2b:7c:93:2a:0d:41:90:24:69:
4e:91:37:d6:6c:2c:6c:ed:06:f5:05:11:77:d5:0f:
5e:0d:38:d6:be:9e:1a:1e:9b:37:9d:0e:39:be:ba:
71:72:6f:ef:75:5c:44:62:fc:46:be:8e:d1:35:7e:
fe:cb:a9:89:44:8c:5d:bc:e5:bd:90:22:66:a4:30:
5a:41:3f:a7:2e:43:a6:13:53:74:fe:4c:67:e8:6d:
be:69:87:b4:74:d2:38:56:07:95:12:6e:1c:bf:8f:
b8:3c:19:42:93:cf:e1:86:45:4e:59:f5:a3:b8:35:
98:8e:d5:50:05:e2:2b:78:79:d3:c8:74:23:d2:2b:
eb:76:fe:6b:45:99:06:1b:59:7f:6f:e6:02:71:cf:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F4:B1:87:34:71:8B:E4:15:07:4E:06:C5:2C:32:D7:01:45:0D:2B
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bc:00:8c:ca:2f:0e:e5:19:44:58:7f:1b:9b:cf:60:59:89:
ee:55:c5:51:52:6c:da:85:cb:bf:08:82:55:17:f4:9d:d3:e3:
62:69:15:33:0e:12:27:12:13:ab:ab:20:06:70:7a:0d:04:9a:
43:28:8b:b2:ed:52:4e:03:c6:9d:c3:a6:be:47:9e:f5:86:03:
d5:f7:3d:82:b5:05:21:4d:5c:02:60:22:13:22:4a:69:e0:70:
2b:70:01:1c:d3:f8:0a:8e:b1:43:c4:76:a3:ce:68:92:05:0f:
b3:d8:47:18:7e:3e:40:76:e6:48:1c:37:85:b0:cf:7d:f9:94:
77:38:28:cc:93:ca:77:3a:70:87:9a:d3:c4:82:ad:c8:71:b5:
99:70:fc:75:75:14:22:ba:bf:ab:bd:eb:4e:55:be:92:32:6e:
b6:2d:81:3e:46:bb:8a:b2:79:ad:c7:77:ef:0b:59:ba:40:8a:
75:12:d9:9f:89:fe:8c:80:e2:94:57:c4:c6:5a:48:59:1d:07:
57:d0:f9:02:64:f9:05:4c:17:41:83:9a:d5:5b:fc:4e:99:66:
15:ef:27:f1:b6:a0:29:b1:5e:98:71:fa:03:14:22:10:49:7f:
9a:4e:d2:df:dc:56:28:a4:7a:66:fc:99:06:cd:f3:33:c1:01:
16:8f:d6:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTWGaP9l4zls+QKBIkaoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODMyNTE2NjFiMGI3NzQyNzFjNWNmNTI2YWFiODg0YjFm
YTdjN2UwHhcNMjYwNzI3MDIwMDMwWhcNMjYwNzI4MDIwMDMwWjAzMTEwLwYDVQQD
EygwY2Y0YjE4NzM0NzE4YmU0MTUwNzRlMDZjNTJjMzJkNzAxNDUwZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY9383AuduO96PNLhceS1cYYoeKG
XOlQlLvyAdk5yggfvFMXSw2tqeNCzIFhjcAR7qKL6QiL7uW/UhcoaMZy8KmeL6Ms
Ikpl5Jw5D08113aQhLDv5pUYh12WL2CuAWs2PvLDKbl09/b8J+sNX28rfJMqDUGQ
JGlOkTfWbCxs7Qb1BRF31Q9eDTjWvp4aHps3nQ45vrpxcm/vdVxEYvxGvo7RNX7+
y6mJRIxdvOW9kCJmpDBaQT+nLkOmE1N0/kxn6G2+aYe0dNI4VgeVEm4cv4+4PBlC
k8/hhkVOWfWjuDWYjtVQBeIreHnTyHQj0ivrdv5rRZkGG1l/b+YCcc8hJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAz0sYc0cYvkFQdOBsUsMtcBRQ0rMB8GA1UdIwQY
MBaAFG6DJRZhsLd0Jxxc9SaquISx+nx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEt
NWMwMTgxN2ZiODIyLzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEtNWMwMTgxN2ZiODIy
LzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrwAjMov
DuUZRFh/G5vPYFmJ7lXFUVJs2oXLvwiCVRf0ndPjYmkVMw4SJxITq6sgBnB6DQSa
QyiLsu1STgPGncOmvkee9YYD1fc9grUFIU1cAmAiEyJKaeBwK3ABHNP4Co6xQ8R2
o85okgUPs9hHGH4+QHbmSBw3hbDPffmUdzgozJPKdzpwh5rTxIKtyHG1mXD8dXUU
Irq/q73rTlW+kjJuti2BPka7irJ5rcd37wtZukCKdRLZn4n+jIDilFfExlpIWR0H
V9D5AmT5BUwXQYOa1Vv8TplmFe8n8bagKbFemHH6AxQiEEl/mk7S39xWKKR6ZvyZ
Bs3zM8EBFo/WEA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:38 2026 by rpki-client