Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier: kxLfBPjOch+23TuAdJwTbYXsv3oOBgrEsNqy6Mm2RsY=
Subject key identifier: 0B:70:D8:AC:1D:1D:65:8D:FF:90:21:B5:1E:75:E9:95:5C:0A:EB:E0
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial: 019D3865F33F1B9DA21890F546B416071696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number: 158A
Signing time: Sun 29 Mar 2026 07:01:38 +0000
Manifest this update: Sun 29 Mar 2026 07:01:38 +0000
Manifest next update: Mon 30 Mar 2026 07:01:38 +0000
Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: RYjtHBYioEmtUeNe/ShoNbkdRJMrY0iT8NVzMM+ZkRQ=)
2: WooYK0ZFDaGgHVC8DJ-VYW0Dmbw.roa (hash: lZyCoxT1QmpmA3Qk/5sG1h73ylWFJ3LJg+hw5CFIWuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f3:3f:1b:9d:a2:18:90:f5:46:b4:16:07:16:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Validity
Not Before: Mar 29 07:01:38 2026 GMT
Not After : Mar 30 07:01:38 2026 GMT
Subject: CN=0b70d8ac1d1d658dff9021b51e75e9955c0aebe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:74:e8:5d:28:f0:29:22:43:9e:48:41:23:
0b:cf:19:12:50:52:e9:2b:cf:a6:a1:f6:42:1b:14:
7d:3b:57:f0:79:ca:d3:a1:0a:2c:6f:4d:63:e2:51:
83:dd:93:e4:98:6d:86:3d:79:f6:05:0e:ba:10:47:
fb:d5:f3:9a:31:7a:9a:0c:2a:8f:27:d8:00:50:4b:
df:7a:66:5a:cd:02:4e:4a:83:45:81:66:e7:13:a6:
12:6f:14:bd:b8:51:73:49:05:23:9b:f9:c2:02:a3:
5a:a7:1f:e2:9f:c4:7d:c8:51:8d:55:77:c0:85:50:
93:46:f0:85:6e:7d:9a:2f:05:83:d9:73:d9:3e:c7:
81:d4:94:1d:ec:95:e3:a4:7f:c2:fb:d2:49:35:17:
91:b6:2e:e6:a8:97:d7:02:01:d6:61:48:41:12:3c:
58:6b:ce:25:3c:d2:fd:39:89:99:02:d9:74:54:d1:
24:08:83:2b:76:9a:9e:d1:e2:62:82:7f:95:1f:ee:
f2:3b:24:2d:b1:03:73:da:a6:a2:cc:52:dd:6e:ca:
ab:13:6e:27:b1:e2:b3:ea:e1:fc:e7:cb:93:b4:1b:
55:b5:93:f3:fe:2f:ec:7c:bf:24:34:c6:2c:ae:34:
84:71:5d:be:89:32:8a:cd:cd:77:f0:b1:3a:50:73:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:70:D8:AC:1D:1D:65:8D:FF:90:21:B5:1E:75:E9:95:5C:0A:EB:E0
X509v3 Authority Key Identifier:
keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8f:08:00:19:97:ce:ef:5a:1d:09:62:dc:bc:3d:b5:96:0a:
5b:90:bc:24:a4:3b:59:35:64:fd:b5:95:56:8a:56:97:e4:13:
03:fd:9c:80:d5:2c:cb:f3:11:c6:d7:3c:c7:ff:a7:bd:49:93:
9c:9b:4a:e5:ff:5e:f7:ca:91:cd:df:8f:fb:91:99:95:f1:3c:
79:d9:c5:2e:7e:e2:48:ab:89:c1:89:e3:50:71:7b:58:c9:7e:
25:ff:c8:d3:3a:5d:16:d7:c3:7d:35:65:d1:2e:4e:3e:a8:0a:
8a:da:b8:f5:9f:4b:c1:75:1c:90:69:fc:70:39:57:36:67:16:
dd:ab:13:ba:de:20:a8:46:6f:a9:59:36:2e:6a:78:2c:29:a0:
95:ee:b7:b4:7a:a4:6f:36:e1:fa:af:d9:59:82:7a:54:c8:08:
4e:03:2e:3c:fb:a5:fc:87:f8:d8:63:fa:a4:10:3e:9b:83:b2:
e3:10:b2:20:f0:5b:7a:6f:23:a0:aa:eb:2e:4e:af:0f:25:fa:
97:27:25:54:4c:0b:62:01:39:36:0a:6e:e8:28:07:5b:68:53:
1d:ce:03:94:f4:0c:6f:dc:96:ab:13:d5:d1:3e:2d:83:10:2b:
7c:90:69:b1:81:95:9b:73:48:2a:21:a2:f2:5a:62:3c:c5:dd:
af:66:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:00 2026 by rpki-client