Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: BtXAlYN6iJ6cil8W98/92oGBH2mLVFn+vW5unqm4lE0=
Subject key identifier: 43:5F:6E:51:3C:B5:9A:91:6E:DF:7C:CF:52:89:00:B1:63:87:09:10
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 01A0C7EAC4F60B9F6AEE289E1D7AF21FB266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 1A63
Signing time: Tue 22 Sep 2026 07:00:46 +0000
Manifest this update: Tue 22 Sep 2026 07:00:46 +0000
Manifest next update: Wed 23 Sep 2026 07:00:46 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: v3AAT7uDPlW2Jz6zGeKj68bAHRFbMHDtREKf1sw27ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:c4:f6:0b:9f:6a:ee:28:9e:1d:7a:f2:1f:b2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Sep 22 07:00:46 2026 GMT
Not After : Sep 23 07:00:46 2026 GMT
Subject: CN=435f6e513cb59a916edf7ccf528900b163870910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:55:6c:62:0f:18:c0:cc:4a:4f:16:49:76:
1b:1b:d2:04:fa:e3:84:88:4d:4e:39:4d:46:f3:d2:
8a:b7:41:eb:63:8c:2c:82:7a:43:6f:a2:67:0c:b1:
48:a6:4e:b4:59:51:96:78:8c:1d:21:03:79:9b:a4:
c6:d3:8c:de:d8:d3:d3:8c:99:e3:02:d1:86:dc:4f:
7a:63:0a:f5:b4:9b:69:55:66:36:08:b8:c1:72:25:
8b:32:41:3b:19:9e:d3:ef:60:21:82:4b:61:a4:0a:
bb:bd:d3:44:15:ea:90:30:48:ed:a1:44:aa:3c:e7:
3c:c1:75:11:a1:67:b8:1c:52:04:5c:cd:69:43:04:
56:d7:f1:ae:31:d3:23:1c:1f:9f:1b:3b:13:80:73:
19:71:03:2d:80:af:1d:ca:81:13:f9:65:40:b7:ce:
e3:6b:6f:b0:60:23:21:1e:be:ae:77:3e:e3:0f:ad:
14:6f:8f:bd:b2:e1:eb:09:ab:53:2d:4a:c0:80:4b:
88:aa:67:82:91:2d:e5:67:7d:98:8d:c2:b2:f6:48:
fb:09:2f:c9:08:0f:91:7d:c2:46:b8:68:80:fa:69:
36:53:01:26:14:f7:2a:bc:6f:11:b7:03:a3:ae:9a:
ee:b7:d6:fb:7e:89:c0:06:02:d5:92:4f:14:0e:30:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:6E:51:3C:B5:9A:91:6E:DF:7C:CF:52:89:00:B1:63:87:09:10
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5a:72:35:79:4e:01:c8:6a:d6:ad:e1:d6:99:c3:24:5c:42:
d8:3d:81:68:c7:2a:c0:86:6a:41:d3:cd:a7:68:57:90:d2:ec:
6f:98:2e:b1:e6:c9:da:63:e6:e4:ac:fd:e6:ee:d6:57:ad:c6:
af:b3:f6:da:fb:9f:73:51:36:8c:ac:66:8e:bb:1b:a2:1d:42:
a0:0e:b6:78:c7:9e:6a:bb:be:e3:f9:26:a7:9c:0a:fd:93:86:
cc:80:ec:1c:fc:bf:1e:cd:f9:2d:be:81:46:93:7c:0a:57:bb:
f2:29:38:b8:c3:12:cd:33:1d:f7:31:b3:4e:95:98:f1:87:ee:
5e:fc:e0:1b:45:a0:cc:ef:7c:9c:e1:21:b3:40:4c:5b:41:b1:
82:d2:a7:80:f7:81:1f:6f:0f:ee:cc:20:b7:8b:22:98:2a:0b:
04:92:1a:91:66:14:cc:15:be:4e:59:c2:e1:7f:e5:43:62:47:
86:b2:96:dc:5b:c8:10:d3:69:df:71:f1:bb:35:9b:3d:3b:1c:
1d:9a:94:64:5f:fb:70:fd:8d:5d:a3:18:91:51:ee:b6:23:43:
37:0e:25:14:ab:92:4e:9b:4a:45:b3:1d:fe:7d:35:de:50:29:
ce:77:1c:80:3f:b9:8d:3d:d6:1b:f6:01:4b:f9:fe:c3:b6:41:
e6:b5:20:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6sT2C59q7iieHXryH7JmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTIyMjg4Njc4ZWZmZjE1ZmVhNzlkZWYyNGM2MDY3Y2Uy
NGFhMjcwHhcNMjYwOTIyMDcwMDQ2WhcNMjYwOTIzMDcwMDQ2WjAzMTEwLwYDVQQD
Eyg0MzVmNmU1MTNjYjU5YTkxNmVkZjdjY2Y1Mjg5MDBiMTYzODcwOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7NVbGIPGMDMSk8WSXYbG9IE+uOE
iE1OOU1G89KKt0HrY4wsgnpDb6JnDLFIpk60WVGWeIwdIQN5m6TG04ze2NPTjJnj
AtGG3E96Ywr1tJtpVWY2CLjBciWLMkE7GZ7T72AhgkthpAq7vdNEFeqQMEjtoUSq
POc8wXURoWe4HFIEXM1pQwRW1/GuMdMjHB+fGzsTgHMZcQMtgK8dyoET+WVAt87j
a2+wYCMhHr6udz7jD60Ub4+9suHrCatTLUrAgEuIqmeCkS3lZ32YjcKy9kj7CS/J
CA+RfcJGuGiA+mk2UwEmFPcqvG8RtwOjrprut9b7fonABgLVkk8UDjDGjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENfblE8tZqRbt98z1KJALFjhwkQMB8GA1UdIwQY
MBaAFATiIohnjv/xX+p53vJMYGfOJKonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9JaWlHZU9fX0ZmNm5uZThreGdaODRrcWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NGY4ZjYtYjkwMC00NDA1LTkyN2Mt
ODljOTg5MmMxNGYwLzEvQk9JaWlHZU9fX0ZmNm5uZThreGdaODRrcWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81NGY4ZjYtYjkwMC00NDA1LTkyN2MtODljOTg5MmMxNGYw
LzEvQk9JaWlHZU9fX0ZmNm5uZThreGdaODRrcWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVpyNXlO
Achq1q3h1pnDJFxC2D2BaMcqwIZqQdPNp2hXkNLsb5gusebJ2mPm5Kz95u7WV63G
r7P22vufc1E2jKxmjrsboh1CoA62eMeearu+4/kmp5wK/ZOGzIDsHPy/Hs35Lb6B
RpN8Cle78ik4uMMSzTMd9zGzTpWY8YfuXvzgG0WgzO98nOEhs0BMW0GxgtKngPeB
H28P7swgt4simCoLBJIakWYUzBW+TlnC4X/lQ2JHhrKW3FvIENNp33HxuzWbPTsc
HZqUZF/7cP2NXaMYkVHutiNDNw4lFKuSTptKRbMd/n013lApznccgD+5jT3WG/YB
S/n+w7ZB5rUgsw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:52:07 2026 by rpki-client