Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File: boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier: W9w86t6vfCey9T4HoRIxjYEYgj8BvtTRkqkQE7gDjpg=
Subject key identifier: CC:39:6D:CA:66:74:F0:CC:4D:6E:FA:1D:E8:FD:A7:03:60:48:CC:B1
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial: 01A1BDD204E1CA60A8A1642FB5BF2848B3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number: 1AE6
Signing time: Mon 09 Nov 2026 01:00:19 +0000
Manifest this update: Mon 09 Nov 2026 01:00:19 +0000
Manifest next update: Tue 10 Nov 2026 01:00:19 +0000
Files and hashes: 1: Jb2gO1BQcML39rnxFGep61phXGU.roa (hash: 8e9M6TIpgOCh+hUbFPaNx/cdQqfZysi89tk+qyctjYM=)
2: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: J+WYnp4GL6BU8k52qi3E2n7eFIYANYkxG7UycsTpRrE=)
3: mNpdXKWJkISb2lRdTODfubt1kNs.roa (hash: ySSUuCm7wtMq5dX67A2of7qfSBu2XTsgfJ1fOTuaKd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bd:d2:04:e1:ca:60:a8:a1:64:2f:b5:bf:28:48:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Validity
Not Before: Nov 9 01:00:19 2026 GMT
Not After : Nov 10 01:00:19 2026 GMT
Subject: CN=cc396dca6674f0cc4d6efa1de8fda7036048ccb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:29:23:a3:91:79:c5:71:30:85:37:6e:9d:
1c:4c:fd:10:83:47:65:17:69:c6:4a:c7:2f:09:64:
4a:27:c4:70:8d:66:e8:18:a2:75:17:8c:d8:1d:dd:
d8:91:28:b6:65:9c:51:d2:7c:56:6b:d7:ba:d1:c5:
aa:b0:af:94:98:74:02:4f:73:2d:ab:0d:b6:6a:50:
9e:cb:76:3d:c5:39:39:e0:52:ca:fc:1c:88:91:f3:
d5:2e:dd:58:53:a0:a1:81:40:3f:74:2a:f0:c4:6e:
58:06:3d:d7:5b:75:03:d5:d1:47:24:c8:00:85:6f:
3a:79:92:fa:c9:81:9f:39:98:fe:a9:d6:b9:4a:53:
97:2c:bf:a5:e3:57:78:b3:a7:e7:e4:b6:97:cb:81:
9b:9f:e9:63:ef:e0:b1:fc:ea:48:ee:40:61:9d:db:
a3:1f:8f:64:49:66:58:c4:ac:9d:7f:73:91:0c:63:
f7:21:71:53:07:88:ca:a9:44:46:bf:ed:78:30:a0:
eb:01:72:19:35:4c:ab:d9:ff:45:80:ae:d5:2c:70:
4f:37:ad:72:da:16:b9:dc:92:58:25:44:ed:7a:2d:
e4:07:b5:6f:e8:54:9a:74:86:67:1d:50:01:80:be:
f1:ba:e1:71:46:58:e9:fc:b6:35:b9:1e:30:2e:ca:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:39:6D:CA:66:74:F0:CC:4D:6E:FA:1D:E8:FD:A7:03:60:48:CC:B1
X509v3 Authority Key Identifier:
keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:19:e1:8e:b2:b1:3b:bf:db:2c:78:f2:e5:37:4c:30:07:1f:
a3:3c:90:36:55:9b:1f:de:88:30:b3:65:20:43:b3:80:af:8f:
f5:6c:c8:14:99:46:36:e8:ec:52:91:bc:30:cf:37:3e:40:97:
19:2a:f2:d6:5d:c6:74:5d:c3:1b:28:b6:44:b9:f6:df:67:96:
e0:2e:57:ce:81:24:ec:36:1b:27:5c:85:74:42:00:95:81:fd:
1d:07:b2:3d:b3:a0:27:26:c0:0e:f4:38:2c:98:0b:6d:5d:41:
6d:5a:86:3d:ae:d7:df:da:f8:c2:be:8a:cb:e9:16:3f:e2:bb:
71:bd:10:91:38:d1:ec:4e:7c:10:7e:76:5b:4a:9b:56:0f:89:
63:28:99:bd:71:62:96:65:de:e6:02:56:4f:be:1f:db:e3:a1:
49:7f:63:78:13:5b:6c:c0:b2:3f:c4:17:88:f3:bd:27:13:22:
c5:af:b0:25:50:3c:f1:b8:c6:07:ac:4c:26:24:a3:1a:ee:17:
fc:69:90:51:53:c8:5c:af:74:2e:bd:52:fe:33:50:09:52:9e:
46:dc:6d:00:4f:c8:e8:81:c2:16:9a:1f:f0:35:95:32:bf:1d:
98:16:d8:e3:83:0d:b5:30:e8:39:ba:c9:31:ca:e0:57:17:01:
1f:c6:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 10:13:32 2026 by rpki-client