Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
File: BozI9XorPCKZsfSCtn4V2d5DrTw.mft (raw, json)
Hash identifier: ++10suMvB9lV6zGoFL7ecTgN/eGmNRcS66RhAKlAq3g=
Subject key identifier: D3:55:A2:19:17:99:78:8A:DC:FF:91:CB:2D:8D:1F:99:E2:73:87:EB
Authority key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
Certificate issuer: /CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Certificate serial: 01A1C69F2497167B15EFEE402B9C5004E329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
Manifest number: 1861
Signing time: Tue 10 Nov 2026 18:01:20 +0000
Manifest this update: Tue 10 Nov 2026 18:01:20 +0000
Manifest next update: Wed 11 Nov 2026 18:01:20 +0000
Files and hashes: 1: 1-2P8OWE-nT9yglepyYQAlaB5NfE.roa (hash: hXJitTuZsInHr+UtjyUxAZf5csxkpDvw7CF/W7Cve9U=)
2: BozI9XorPCKZsfSCtn4V2d5DrTw.crl (hash: O4ekCeV1a427N7ooalGvu8lB1CIcSXgACY6jnIZy7r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:9f:24:97:16:7b:15:ef:ee:40:2b:9c:50:04:e3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Validity
Not Before: Nov 10 18:01:20 2026 GMT
Not After : Nov 11 18:01:20 2026 GMT
Subject: CN=d355a2191799788adcff91cb2d8d1f99e27387eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:d4:52:0a:0e:21:e0:34:21:da:db:95:d0:
7c:1c:a8:df:b2:80:d8:d5:3c:ab:85:da:9d:a4:9c:
83:18:e6:82:c8:21:e5:ee:7e:84:f5:19:2b:a5:63:
33:eb:c1:c5:9e:ce:ab:6b:21:fa:a1:49:6e:4b:28:
1c:c7:ee:8e:e1:04:91:a6:33:68:fa:6e:d1:af:73:
20:48:f1:72:e1:6a:ff:30:13:26:a0:b5:4c:e4:ba:
a9:3a:cf:60:5e:7c:5e:4e:a4:7f:c3:ac:66:39:8e:
cc:23:5b:70:6f:04:e2:51:13:ae:86:b9:e6:8d:e2:
91:fe:d7:e3:68:c1:a2:bc:4a:47:ce:80:36:76:2b:
a4:34:ec:d5:59:b7:48:19:6d:e5:c4:34:9e:f7:d0:
1d:70:6d:8e:c0:0d:07:d4:cd:ad:70:c2:18:54:f2:
0c:c0:ae:50:56:d3:e5:4d:d6:d4:9e:37:3d:19:2b:
ba:74:e8:24:14:f4:0b:ab:d1:3b:d1:52:96:5b:d5:
16:8b:b5:6f:5a:ce:17:4f:31:0c:dc:0f:9b:2f:e2:
32:22:43:32:e4:97:34:38:c5:29:87:c5:2a:76:dc:
41:30:0d:64:10:d0:07:b3:31:1d:c8:15:01:12:83:
65:3b:4e:19:37:3f:d8:b6:bc:ee:34:28:16:7e:ce:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:A2:19:17:99:78:8A:DC:FF:91:CB:2D:8D:1F:99:E2:73:87:EB
X509v3 Authority Key Identifier:
keyid:06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ea:45:e3:20:95:9a:81:9e:5c:1a:dd:0d:02:c3:89:08:de:
33:29:0b:95:44:cc:a9:27:71:a0:76:02:e5:87:35:4b:c5:dc:
79:78:dd:94:79:b2:dd:c9:34:af:64:5f:2d:68:b4:0d:ef:52:
1b:de:7e:49:06:8c:9f:60:bf:bd:75:71:1c:3d:3c:a3:4c:c1:
98:e9:a9:ae:7b:3b:9e:10:a7:bc:3c:27:9a:a5:ca:d5:b9:a9:
8f:b0:f4:49:e7:86:44:e3:58:c7:24:e7:6c:61:18:02:ee:48:
b3:b4:12:bc:b1:72:66:c6:bb:82:21:50:19:0e:fc:a7:3d:00:
a6:df:47:a2:11:e5:9e:79:cc:6e:78:b6:00:52:dd:9c:4d:b6:
dc:0d:be:92:4f:07:b3:54:49:5f:2d:c2:99:8a:0e:e0:d1:0d:
46:a8:0c:11:66:7a:05:82:84:78:b9:dd:1d:d3:5e:26:db:b7:
81:fc:42:c8:28:2f:b8:45:d0:6f:78:33:74:9c:79:33:f3:44:
2e:e8:b6:d8:63:7f:07:17:b7:8a:21:b7:a4:e7:ac:40:e0:4f:
b1:c2:1d:e7:b9:40:76:87:56:4d:55:2c:a0:a0:a2:3a:f9:10:
23:d7:a8:c7:68:dd:c3:f8:a6:41:d2:73:b1:97:42:c1:55:4b:
49:f2:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 01:10:45 2026 by rpki-client