Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
File: BozI9XorPCKZsfSCtn4V2d5DrTw.mft (raw, json)
Hash identifier: uSjkO/LV/wn7gNyRtAVcyYkvAq2lRBNi0rw06lDyb94=
Subject key identifier: A7:85:64:7A:3F:E1:E3:D9:F8:B0:31:36:F7:79:75:B5:DB:E9:10:59
Authority key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
Certificate issuer: /CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Certificate serial: 01A0C1E8655C2DC00CDDC26A103BF74B196C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
Manifest number: 17DA
Signing time: Mon 21 Sep 2026 03:00:28 +0000
Manifest this update: Mon 21 Sep 2026 03:00:28 +0000
Manifest next update: Tue 22 Sep 2026 03:00:28 +0000
Files and hashes: 1: 1-2P8OWE-nT9yglepyYQAlaB5NfE.roa (hash: hXJitTuZsInHr+UtjyUxAZf5csxkpDvw7CF/W7Cve9U=)
2: BozI9XorPCKZsfSCtn4V2d5DrTw.crl (hash: xwQLgwrIShHUoSWoGtHQqbZU0vDaBihOOqr0LSdxbJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:65:5c:2d:c0:0c:dd:c2:6a:10:3b:f7:4b:19:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Validity
Not Before: Sep 21 03:00:28 2026 GMT
Not After : Sep 22 03:00:28 2026 GMT
Subject: CN=a785647a3fe1e3d9f8b03136f77975b5dbe91059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:3a:58:87:2e:92:e3:5b:82:df:ad:58:16:
77:12:77:27:c8:a7:d1:4c:84:32:86:0f:86:1b:fe:
63:16:ef:ae:bf:f2:68:9f:8b:4a:70:ec:4a:82:80:
a4:5b:32:4b:35:63:10:2e:3d:45:a0:84:39:4b:9d:
e0:1a:02:b6:69:a2:80:7f:e6:ab:ed:1d:db:c0:1d:
06:f2:96:ef:92:e7:fa:9e:fe:8f:74:4a:10:5b:15:
4c:7e:41:81:7a:51:e3:5c:6c:b6:9d:7f:92:55:aa:
a3:ae:5e:ba:21:fe:0a:3d:b7:12:eb:30:13:b3:34:
c1:4c:20:af:20:04:55:4f:22:7f:ef:a4:3b:f1:fe:
e7:cb:18:fa:c8:17:83:d5:72:72:23:09:f1:9f:74:
a0:f9:39:05:49:f2:b6:a9:ed:81:e6:a4:dc:d5:b4:
ed:40:7a:b4:78:f2:3b:7c:b0:c6:cf:61:53:36:18:
df:44:f9:b6:43:47:88:e7:8b:bb:9e:7f:43:43:ad:
0a:9b:91:24:43:36:01:76:bd:24:39:98:a8:af:ea:
46:31:56:d5:07:e8:64:9d:41:22:eb:89:d8:51:7a:
e8:60:1d:65:49:16:97:40:80:03:bb:fb:8d:e7:22:
9c:e5:35:ac:2e:26:96:1c:57:d0:41:f1:17:44:99:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:64:7A:3F:E1:E3:D9:F8:B0:31:36:F7:79:75:B5:DB:E9:10:59
X509v3 Authority Key Identifier:
keyid:06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a9:96:59:03:30:f4:6e:61:66:91:d9:8b:3f:6e:70:6b:e3:
65:92:1c:2a:22:c4:e4:a8:00:e1:17:4e:17:0b:06:57:df:b6:
9a:68:96:bc:d6:5a:ae:3c:b6:23:50:66:eb:fa:e9:f3:87:d4:
e1:a9:45:67:d9:70:cc:bc:d5:0a:4d:07:f3:4c:8f:de:21:7f:
a2:05:d9:50:6d:52:e6:18:0b:1e:f5:7f:6a:fb:bb:81:a7:c9:
f3:d9:10:4e:f5:6e:c3:10:2e:a0:34:fd:3d:11:de:95:80:67:
d6:c4:4f:13:f9:16:09:cb:24:2e:d6:26:50:32:0e:17:8d:24:
c6:7d:08:cb:e8:00:ef:91:90:6b:63:d0:ac:d7:07:65:68:19:
73:d0:93:c9:ce:64:4f:3a:c6:1b:45:13:c6:0f:dd:9e:e4:4e:
f4:af:56:bb:4b:71:ef:0c:03:6b:5c:f5:87:b6:bd:15:43:0e:
fe:56:c3:36:fd:28:b2:ee:cb:15:82:76:29:bd:a9:5a:e5:60:
e9:0a:e4:c9:91:b5:ee:62:1d:b9:eb:76:c1:26:46:58:93:b4:
fe:18:f3:9f:65:83:01:7e:b6:a3:8b:d6:c5:94:99:23:29:e7:
12:d5:91:0a:59:4b:2b:ae:99:24:da:a8:6f:20:3b:87:ed:5c:
7c:8b:32:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6GVcLcAM3cJqEDv3SxlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OGNjOGY1N2EyYjNjMjI5OWIxZjQ4MmI2N2UxNWQ5ZGU0
M2FkM2MwHhcNMjYwOTIxMDMwMDI4WhcNMjYwOTIyMDMwMDI4WjAzMTEwLwYDVQQD
EyhhNzg1NjQ3YTNmZTFlM2Q5ZjhiMDMxMzZmNzc5NzViNWRiZTkxMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoI6WIcukuNbgt+tWBZ3EncnyKfR
TIQyhg+GG/5jFu+uv/Jon4tKcOxKgoCkWzJLNWMQLj1FoIQ5S53gGgK2aaKAf+ar
7R3bwB0G8pbvkuf6nv6PdEoQWxVMfkGBelHjXGy2nX+SVaqjrl66If4KPbcS6zAT
szTBTCCvIARVTyJ/76Q78f7nyxj6yBeD1XJyIwnxn3Sg+TkFSfK2qe2B5qTc1bTt
QHq0ePI7fLDGz2FTNhjfRPm2Q0eI54u7nn9DQ60Km5EkQzYBdr0kOZior+pGMVbV
B+hknUEi64nYUXroYB1lSRaXQIADu/uN5yKc5TWsLiaWHFfQQfEXRJlsbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeFZHo/4ePZ+LAxNvd5dbXb6RBZMB8GA1UdIwQY
MBaAFAaMyPV6KzwimbH0grZ+FdneQ608MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2It
MmEyODQxNmQ0NWIyLzEvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2ItMmEyODQxNmQ0NWIy
LzEvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOamWWQMw
9G5hZpHZiz9ucGvjZZIcKiLE5KgA4RdOFwsGV9+2mmiWvNZarjy2I1Bm6/rp84fU
4alFZ9lwzLzVCk0H80yP3iF/ogXZUG1S5hgLHvV/avu7gafJ89kQTvVuwxAuoDT9
PRHelYBn1sRPE/kWCcskLtYmUDIOF40kxn0Iy+gA75GQa2PQrNcHZWgZc9CTyc5k
TzrGG0UTxg/dnuRO9K9Wu0tx7wwDa1z1h7a9FUMO/lbDNv0osu7LFYJ2Kb2pWuVg
6QrkyZG17mIduet2wSZGWJO0/hjzn2WDAX62o4vWxZSZIynnEtWRCllLK66ZJNqo
byA7h+1cfIsyJQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:47:13 2026 by rpki-client