Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
File: BOlxI0nYWcXmno45CKeE-LRErx8.mft (raw, json)
Hash identifier: g3Zpalz+Z2+opUlXMPtLBlKqc+rcCVyWQjM/2AuKdok=
Subject key identifier: 28:20:59:E7:20:ED:59:1A:EB:D6:BB:22:97:3B:B6:DD:79:AE:9B:56
Authority key identifier: 04:E9:71:23:49:D8:59:C5:E6:9E:8E:39:08:A7:84:F8:B4:44:AF:1F
Certificate issuer: /CN=04e9712349d859c5e69e8e3908a784f8b444af1f
Certificate serial: 01A04084E80DB5B51D6EA57F3992FE9A1C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOlxI0nYWcXmno45CKeE-LRErx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
Manifest number: 0166
Signing time: Thu 27 Aug 2026 00:00:46 +0000
Manifest this update: Thu 27 Aug 2026 00:00:46 +0000
Manifest next update: Fri 28 Aug 2026 00:00:46 +0000
Files and hashes: 1: BOlxI0nYWcXmno45CKeE-LRErx8.crl (hash: O0jSuliodn5LlofBEnSZfWntCYxPdMfjqctUMDC6Fk0=)
2: adpBP4jM1W4t4AVnML6vQBZ_yh4.roa (hash: LvDq1gWnjhUnCFVJ+3Mcx5kpSzUPOxKKyLQHkkuIht4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOlxI0nYWcXmno45CKeE-LRErx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:84:e8:0d:b5:b5:1d:6e:a5:7f:39:92:fe:9a:1c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e9712349d859c5e69e8e3908a784f8b444af1f
Validity
Not Before: Aug 27 00:00:46 2026 GMT
Not After : Aug 28 00:00:46 2026 GMT
Subject: CN=282059e720ed591aebd6bb22973bb6dd79ae9b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:b0:4f:77:83:66:4a:80:1c:ac:27:f0:bb:
46:a6:07:1c:fb:7d:72:e1:63:3a:05:85:5b:0f:9d:
d4:cd:8e:b6:66:94:24:02:e3:75:cb:c4:c3:c6:04:
d5:22:11:90:7c:2b:23:9a:9b:1f:a5:87:2d:2b:f6:
24:4b:e6:83:21:89:e5:b0:3c:7b:a1:1a:16:dd:57:
59:7b:d7:2a:f2:36:06:d2:fa:26:2c:89:43:7b:38:
51:39:32:d1:dd:93:2b:81:ba:73:e4:12:c0:2a:62:
73:c1:88:a8:44:ff:86:ca:41:fa:c4:2e:24:27:32:
85:23:5e:a2:53:f9:64:1e:f8:d6:28:e1:d5:d3:af:
03:10:40:a0:1f:ee:06:2e:bb:58:e9:e5:c2:0c:e4:
86:62:d6:5f:93:de:7d:0c:1d:3b:da:58:0b:80:b4:
fd:05:1e:7c:57:48:42:46:7a:0a:b1:9a:70:fd:4c:
26:f5:eb:9d:52:1d:13:eb:0d:b1:83:93:9a:bc:5c:
a2:18:ba:04:30:c5:34:cf:9f:5f:eb:65:e5:34:cb:
d3:92:74:2d:2d:9f:39:99:16:2b:70:ce:fb:54:fd:
de:14:ee:0c:9e:8e:8d:d0:f4:3a:14:53:74:6e:f6:
24:3b:28:89:df:29:d0:f5:b1:11:bf:60:e3:af:26:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:59:E7:20:ED:59:1A:EB:D6:BB:22:97:3B:B6:DD:79:AE:9B:56
X509v3 Authority Key Identifier:
keyid:04:E9:71:23:49:D8:59:C5:E6:9E:8E:39:08:A7:84:F8:B4:44:AF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOlxI0nYWcXmno45CKeE-LRErx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d8:92:08:49:7a:62:0f:6d:7f:c9:d3:f6:b3:c9:88:a5:18:
68:fd:57:2b:de:b5:0c:89:f0:02:b8:e0:8d:25:95:57:e4:9b:
8a:8d:f1:b9:24:88:3f:eb:fb:06:99:28:6a:06:c2:cf:28:83:
97:6b:0e:4a:d9:0b:36:18:f6:88:8a:41:a2:c0:e7:f6:64:e2:
32:08:82:28:0c:99:ea:db:0f:ca:46:1d:a3:0e:4e:80:b4:fe:
f3:93:2f:07:54:92:a5:9f:76:5e:07:be:3e:59:dd:9e:3e:e4:
a1:1f:ea:94:3b:f6:1c:9c:d1:7b:35:50:37:28:22:09:61:39:
c5:c2:a1:bc:be:7a:a4:a6:66:33:ca:57:07:db:2a:79:93:01:
72:c3:e7:29:ec:17:22:c1:1e:7b:15:8a:bb:60:f1:1c:4f:c6:
42:e0:5f:5f:d8:e8:d3:62:6e:fb:08:f5:fd:80:f3:53:3f:15:
71:1e:f1:da:f3:01:51:ab:f6:e0:9c:58:d4:9e:39:ed:f1:f2:
8c:63:6d:9d:14:1d:33:34:b9:7c:a7:59:a0:e1:d6:78:bf:ca:
bf:c5:b8:3d:08:1f:60:0a:17:27:70:3c:49:fd:f3:71:94:1a:
5c:7a:43:06:fd:66:07:b0:4a:51:55:1d:fa:5e:9a:68:72:89:
8a:d7:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:40 2026 by rpki-client