Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File: BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier: NsgL+Ts7fQGE1HtiAsPY5vvtEPImmCmct6ITy0P5kaY=
Subject key identifier: 26:F1:49:20:C8:4F:5E:AD:76:23:17:EE:10:70:57:3B:CD:B8:A4:14
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer: /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial: 019CAC103D13C238199FCB96AD6BA1BCCACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number: 1765
Signing time: Mon 02 Mar 2026 01:01:11 +0000
Manifest this update: Mon 02 Mar 2026 01:01:11 +0000
Manifest next update: Tue 03 Mar 2026 01:01:11 +0000
Files and hashes: 1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: FM+IUJGaBxCrkWvQXqeyBCtXn4MAeYBBHevgfF9emIY=)
2: qh-sD6kOkExAEQOZYjnoqxx9DpY.roa (hash: 5t8eLCXvC3atBWqULd/nurDvBUxx1v91TFam4vLNrJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3d:13:c2:38:19:9f:cb:96:ad:6b:a1:bc:ca:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
Validity
Not Before: Mar 2 01:01:11 2026 GMT
Not After : Mar 3 01:01:11 2026 GMT
Subject: CN=26f14920c84f5ead762317ee1070573bcdb8a414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:88:e8:65:d5:1c:02:1a:f0:0a:12:f3:fb:
d0:00:49:25:3d:10:42:60:97:2a:b0:c4:0c:bc:f2:
42:9b:63:92:5a:3f:7c:4a:86:ce:24:ce:93:ac:b4:
1e:6b:b1:45:8c:fa:b6:ee:e1:35:5a:38:81:e0:a0:
26:73:81:30:9c:9e:6f:b1:9c:e2:27:75:24:61:f1:
b5:d5:52:f0:c6:6e:5d:2a:23:ac:6e:64:92:21:63:
92:f1:aa:74:dc:4a:f5:ec:7f:af:e7:23:17:05:7e:
94:84:c0:c7:a9:e5:e0:4d:61:03:6f:e9:2d:86:1e:
79:7f:ea:2d:ac:84:b7:65:14:6f:d1:75:86:55:7b:
14:f2:c2:67:09:f2:2e:61:b5:0f:3e:8c:4e:95:85:
a4:fb:9f:47:5b:a8:1b:e3:1a:ce:a4:dc:21:df:eb:
56:92:02:b7:c4:56:f2:c9:02:be:7d:17:dc:e2:72:
f7:4b:81:5a:46:6b:aa:85:8f:4f:6f:03:56:c7:11:
32:b5:bf:5a:bb:70:ad:de:85:9d:e5:d5:2d:f3:ca:
ae:f8:68:e0:c5:f7:ad:c6:ff:f2:23:7b:65:50:6c:
c9:7c:90:4c:f3:cd:31:e8:74:58:b5:17:f8:a2:b4:
73:b2:d2:a8:0d:96:02:37:b9:f6:e6:75:50:19:50:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:49:20:C8:4F:5E:AD:76:23:17:EE:10:70:57:3B:CD:B8:A4:14
X509v3 Authority Key Identifier:
keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1a:84:c0:a9:75:af:06:0c:0e:4d:94:fc:cd:39:ac:4d:5f:
6c:6e:cb:d1:ab:a5:b9:e8:9b:36:4d:b4:53:31:80:07:c0:f8:
e8:64:36:aa:1d:fc:f1:2c:47:91:b2:b9:9a:b3:05:53:52:ae:
49:73:9b:2d:9a:df:e6:70:d0:8f:f5:7e:9c:de:e8:a7:45:2f:
c0:bf:f7:fa:d4:fd:a6:a5:e0:b6:3b:49:86:b8:07:df:e1:65:
81:13:f1:af:f8:26:78:d7:bd:95:75:e3:9a:22:d4:41:1e:fb:
69:33:61:2e:2c:d6:25:dc:2c:71:ca:48:53:60:3c:e4:70:25:
b0:63:51:7f:4e:3c:a5:a9:b4:74:b5:13:2f:3c:75:98:2a:18:
33:15:27:bd:ab:e0:ad:45:3c:38:25:71:04:46:24:9c:62:2d:
6b:c1:82:f8:5a:ef:a7:92:e1:59:c9:72:0b:df:10:ce:b3:ab:
03:d0:f6:0a:79:2e:e3:49:7c:5b:b1:42:78:01:63:b3:eb:b7:
46:74:e0:30:a6:f1:e1:e6:06:d2:d6:24:dc:84:81:92:9e:35:
1d:01:3a:fd:a5:e1:19:61:34:91:33:55:71:af:db:3b:01:c6:
99:45:bc:4b:5a:3d:61:92:11:0e:fe:a7:82:17:ae:7a:31:f8:
82:f0:e3:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysED0TwjgZn8uWrWuhvMrPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTYwNGE0NTY3N2JlNzczMTM5NjlhZDE3YWVjNjljZTk3
YzQzY2UwHhcNMjYwMzAyMDEwMTExWhcNMjYwMzAzMDEwMTExWjAzMTEwLwYDVQQD
EygyNmYxNDkyMGM4NGY1ZWFkNzYyMzE3ZWUxMDcwNTczYmNkYjhhNDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2WI6GXVHAIa8AoS8/vQAEklPRBC
YJcqsMQMvPJCm2OSWj98SobOJM6TrLQea7FFjPq27uE1WjiB4KAmc4EwnJ5vsZzi
J3UkYfG11VLwxm5dKiOsbmSSIWOS8ap03Er17H+v5yMXBX6UhMDHqeXgTWEDb+kt
hh55f+otrIS3ZRRv0XWGVXsU8sJnCfIuYbUPPoxOlYWk+59HW6gb4xrOpNwh3+tW
kgK3xFbyyQK+fRfc4nL3S4FaRmuqhY9PbwNWxxEytb9au3Ct3oWd5dUt88qu+Gjg
xfetxv/yI3tlUGzJfJBM880x6HRYtRf4orRzstKoDZYCN7n25nVQGVAgbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbxSSDIT16tdiMX7hBwVzvNuKQUMB8GA1UdIwQY
MBaAFATmBKRWd753MTlprReuxpzpfEPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNDI5YWEtMDQ2MS00MTM2LTkwY2Qt
NTJhN2I5MjViMjI0LzEvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iNDI5YWEtMDQ2MS00MTM2LTkwY2QtNTJhN2I5MjViMjI0
LzEvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBqEwKl1
rwYMDk2U/M05rE1fbG7L0aulueibNk20UzGAB8D46GQ2qh388SxHkbK5mrMFU1Ku
SXObLZrf5nDQj/V+nN7op0UvwL/3+tT9pqXgtjtJhrgH3+FlgRPxr/gmeNe9lXXj
miLUQR77aTNhLizWJdwsccpIU2A85HAlsGNRf048pam0dLUTLzx1mCoYMxUnvavg
rUU8OCVxBEYknGIta8GC+Frvp5LhWclyC98QzrOrA9D2Cnku40l8W7FCeAFjs+u3
RnTgMKbx4eYG0tYk3ISBkp41HQE6/aXhGWE0kTNVca/bOwHGmUW8S1o9YZIRDv6n
gheuejH4gvDjIQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:10 2026 by rpki-client