Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: 4VyfquaU3ams5wOYCWnCi4uH9sqbifXYkNgkh5UR8ks=
Subject key identifier: EF:E8:4B:81:6A:A3:25:B8:E9:5A:1E:26:A1:05:4D:6F:3D:87:11:DA
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 019D9B507B4598F4BAB7D70B6B1D9F1A4CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:00:35 +0000
Manifest this update: Fri 17 Apr 2026 12:00:35 +0000
Manifest next update: Sat 18 Apr 2026 12:00:35 +0000
Files and hashes: 1: KmFH08iC5J-95oBTnRmMORdBhYQ.roa (hash: jxzbdMpWjw66b8Fw1Ba2LpATegGadHxvfHdlKL67I8A=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: BQY1NB3Cz0GyrdYDQq8rDMAF4YhHxa8Az66vc4pWWfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:7b:45:98:f4:ba:b7:d7:0b:6b:1d:9f:1a:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Apr 17 12:00:35 2026 GMT
Not After : Apr 18 12:00:35 2026 GMT
Subject: CN=efe84b816aa325b8e95a1e26a1054d6f3d8711da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:ab:73:7a:d7:65:ac:5d:59:13:65:28:0b:
c1:17:54:43:10:76:b9:4e:25:9e:fc:f2:a3:85:ba:
bc:03:f6:ae:80:ae:e8:25:1a:30:60:84:ec:04:23:
13:b9:12:8b:68:bc:da:cf:7f:68:a5:6e:be:3a:58:
fa:3e:78:12:eb:ec:56:96:1c:b3:b6:9c:25:fb:36:
07:99:79:09:83:46:ea:20:e8:9d:79:85:04:9d:22:
8a:2d:9d:bc:7c:26:e0:9a:69:52:fc:74:79:f4:03:
c0:b0:ee:b8:4e:2f:01:d4:32:4b:43:2d:45:77:8c:
00:8b:82:ef:08:16:2a:d1:73:70:e7:e9:87:5e:4d:
ae:31:46:e5:77:c6:e4:54:c5:ce:35:43:c4:17:11:
cb:49:9b:b7:1f:2c:3e:53:3d:0f:30:ec:fb:87:1b:
15:4f:38:89:5d:b0:2f:54:21:d4:6a:c9:99:a0:fd:
f6:1b:e1:c8:db:6a:19:0d:53:4a:1f:0b:a7:cb:b8:
fd:98:82:e7:84:ba:c9:47:12:7f:2c:6a:7c:f8:e8:
2b:b2:4d:c3:66:1c:58:7e:5c:52:22:29:94:93:8f:
18:ef:13:0e:bd:9e:ae:5c:72:bd:0a:34:78:05:61:
d5:ea:47:29:eb:ad:df:20:6c:74:0a:76:29:17:02:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E8:4B:81:6A:A3:25:B8:E9:5A:1E:26:A1:05:4D:6F:3D:87:11:DA
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f6:c8:0c:0b:d1:b6:9c:c8:16:26:ee:52:4d:4d:a2:03:70:
23:06:05:a4:7c:20:c2:5f:72:d0:9d:d6:e4:9f:74:d8:e0:ba:
26:01:ac:f8:2e:3a:4a:70:0e:95:c2:9a:2f:90:f4:e1:52:bf:
e3:cc:f5:d8:ef:f7:b9:74:95:a9:94:f9:3b:bf:9f:83:59:0b:
80:e6:c9:8c:f7:2b:1e:01:6b:fa:10:7e:12:b3:13:96:8a:f4:
3b:94:29:14:6b:62:a4:ac:e9:b1:db:61:3b:76:0e:f4:97:1a:
6b:f2:84:3b:dc:9d:c2:05:62:14:02:e5:5b:db:6f:79:b6:90:
fb:85:c5:0d:fd:c0:d7:73:65:92:4d:f8:a9:9c:18:b2:fb:c3:
49:5c:ec:ad:1d:0c:a2:37:d6:b7:b4:aa:07:5f:77:8b:c4:f3:
6e:12:15:09:80:17:20:6e:db:2b:bf:ea:63:b8:9e:00:37:ef:
16:24:d9:9a:fc:41:6e:06:6e:9a:79:56:df:d9:28:71:c6:5b:
76:f1:48:f8:71:46:08:74:28:a9:dd:3b:15:d2:20:11:2a:6d:
9c:c1:a4:28:57:84:3d:94:8c:b7:db:de:fc:7d:87:47:3f:db:
56:ba:61:b5:3a:0a:f5:b1:b0:f3:b8:50:fc:ef:97:34:9d:95:
13:bf:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:43 2026 by rpki-client