Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: MU/jwplWtta0/931ungdWrZn7vcN7NBhFABFQ0LliD8=
Subject key identifier: 5F:48:ED:A4:62:79:EB:A7:55:B0:45:69:3A:35:D0:03:61:0E:F0:A2
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 019FAA1A31EE8DA5C02394BE7B55219DC7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 19:01:11 +0000
Manifest this update: Tue 28 Jul 2026 19:01:11 +0000
Manifest next update: Wed 29 Jul 2026 19:01:11 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: hqZPhwj5mQcxwEK1cC03KNwyjHa2M5gODoYcs7S/KJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:31:ee:8d:a5:c0:23:94:be:7b:55:21:9d:c7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Jul 28 19:01:11 2026 GMT
Not After : Jul 29 19:01:11 2026 GMT
Subject: CN=5f48eda46279eba755b045693a35d003610ef0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:ef:46:6f:ab:99:13:6e:91:62:60:9e:df:
c2:fb:f8:58:84:cc:04:2e:00:94:61:ce:66:41:6d:
1d:cb:58:fd:a1:fe:14:c1:e7:30:4c:d2:ed:3a:5f:
a9:d4:e4:36:c0:2a:e3:08:c9:e0:6d:13:64:89:03:
0d:ef:78:b9:1f:9a:a4:7a:4f:84:dc:b7:6e:2f:8b:
e5:0e:9e:41:69:fd:9e:b1:13:4c:cb:c8:59:f1:84:
8e:22:e5:fc:c9:bc:ea:06:69:08:a8:95:8a:19:86:
9c:e9:c3:cd:4c:a3:08:e1:fe:bb:fd:15:fd:2f:66:
e5:0c:fb:54:51:0a:16:2c:ce:48:97:86:36:e9:98:
33:b4:c8:c4:b4:a1:c6:86:0b:20:e6:81:14:da:95:
ea:c0:a8:c0:c8:27:79:d4:28:35:61:a4:88:d3:67:
19:0f:d4:a0:00:86:a9:ec:44:40:d8:a2:9f:e1:23:
ba:f1:63:43:11:4d:66:fd:f6:a8:02:a9:65:94:6f:
52:a8:2a:eb:95:5a:f3:6f:c2:96:40:19:63:18:75:
30:88:19:d0:50:87:ae:81:b4:e0:ea:09:33:5c:bb:
fd:c5:53:1d:3d:7d:c9:12:8b:1b:00:d5:9b:41:b2:
b8:4f:e9:c8:76:dd:51:98:8b:50:79:35:d6:13:c4:
c2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:48:ED:A4:62:79:EB:A7:55:B0:45:69:3A:35:D0:03:61:0E:F0:A2
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:07:90:15:81:87:d8:62:a9:37:87:2b:15:a2:57:a3:f2:4b:
6b:b8:b3:f0:6c:4b:bc:33:63:45:e7:62:b7:ed:63:ba:67:43:
a5:00:be:01:97:df:9d:0a:3a:d3:6d:93:94:8f:36:99:7e:1a:
71:fc:96:61:49:39:c7:04:81:9c:37:3b:25:43:94:65:ad:fa:
dd:17:01:ad:47:f8:46:ce:4d:6c:8f:4d:c5:41:3d:15:a2:4f:
0f:41:8e:69:1c:b0:de:2c:15:dd:48:7f:1b:a4:d4:f1:be:a8:
df:84:5d:c7:3d:cd:ff:bd:e5:4e:1f:79:c3:ec:b9:1c:85:b5:
9f:d4:63:d1:7e:97:5c:cd:34:a7:51:75:d7:4e:57:50:ae:7c:
4f:c6:24:99:2f:8e:a0:3d:86:ca:96:87:20:68:fb:80:23:1b:
c9:30:a1:b9:f2:b8:4e:09:a5:8f:c4:20:05:ca:5b:64:19:6d:
4c:c2:79:16:ba:6d:89:74:df:53:90:aa:c4:9a:0f:b2:19:23:
05:a1:e9:d1:f7:bf:14:df:88:9c:ea:05:f7:f0:dd:53:d6:bf:
9c:2d:4f:39:58:34:29:d0:b4:4c:63:f2:34:ca:ea:09:b2:12:
c6:01:35:d6:1a:85:dc:25:9d:cf:04:ae:9d:f9:1a:d9:54:55:
73:3b:f5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:34:47 2026 by rpki-client