Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
File: BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft (raw, json)
Hash identifier: 8sm4jOwfkrhlOi7ATMJ+awmuOskvDyv9ivB1mcsDPrw=
Subject key identifier: A9:68:E2:CC:D4:C3:51:D6:54:45:59:84:2B:D4:0D:A0:BF:5D:AC:DE
Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
Certificate issuer: /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Certificate serial: 019FA907BCA48888F27F6B7BFA0B6CC08F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
Manifest number: 0B7D
Signing time: Tue 28 Jul 2026 14:01:24 +0000
Manifest this update: Tue 28 Jul 2026 14:01:24 +0000
Manifest next update: Wed 29 Jul 2026 14:01:24 +0000
Files and hashes: 1: BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl (hash: ljg1CjXgkp4mhxuLCHvSsctG9V53KePOartIzQfsmHo=)
2: Uo9-W2ZV65vRiK7JyaEHx54nLwM.roa (hash: UJ7a0gKDZTd9yEENvLgRe2acSSS/hxOdpooHg+CZtds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:bc:a4:88:88:f2:7f:6b:7b:fa:0b:6c:c0:8f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Validity
Not Before: Jul 28 14:01:24 2026 GMT
Not After : Jul 29 14:01:24 2026 GMT
Subject: CN=a968e2ccd4c351d6544559842bd40da0bf5dacde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:a8:f2:39:5e:b2:72:7f:8c:d7:c3:a6:82:
69:a9:df:82:78:73:5f:ae:87:3e:70:ac:96:17:66:
cc:ba:29:c8:4c:a5:eb:72:f7:72:ad:d9:23:48:3c:
53:a3:cf:c1:fe:20:df:3f:84:29:f9:47:69:b1:a2:
c7:78:60:e4:56:5d:6c:9f:7e:b0:df:44:00:ed:9b:
b3:d4:a8:fd:11:d3:4b:22:b6:95:db:00:fc:95:7b:
b1:18:58:3d:b9:6f:ab:dd:77:74:fa:83:2a:49:07:
2f:db:1f:17:8a:d1:5e:db:46:ae:85:e8:fa:7e:1b:
80:31:95:93:9c:40:bf:1b:59:f1:52:c4:69:7b:a9:
c1:19:1e:42:df:68:74:8d:44:92:7e:10:6f:bb:2f:
67:e5:0c:c0:43:2e:69:61:49:1a:aa:e7:d0:1b:2c:
96:20:07:de:ac:52:da:71:21:d2:3b:94:3c:a6:d1:
c2:77:95:2e:6a:8d:2b:02:ca:8e:64:d3:9a:37:09:
d6:d1:9e:49:87:73:3f:cf:d2:b5:c4:98:98:ed:27:
65:8d:33:04:c4:df:84:ae:f7:77:3c:16:1f:1f:3e:
de:07:b9:54:28:05:11:c0:80:f8:eb:67:b0:75:e9:
f3:a0:87:f2:ae:16:9d:7c:6c:dd:3f:1c:96:60:9c:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:68:E2:CC:D4:C3:51:D6:54:45:59:84:2B:D4:0D:A0:BF:5D:AC:DE
X509v3 Authority Key Identifier:
keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:e4:1e:18:39:37:fd:70:ce:12:89:6f:c9:cf:f6:72:a8:81:
4f:b7:f0:4e:63:be:e7:7f:6f:c1:01:be:04:30:9c:50:fb:8a:
4c:04:99:61:0b:07:c0:77:0f:0b:aa:64:76:49:50:7e:8c:f7:
1d:c1:35:35:c9:d4:fc:ce:27:06:8e:db:35:7c:60:3e:74:db:
e3:ed:6b:74:4b:92:64:8a:99:17:b7:dd:fb:dd:4a:0f:b1:17:
70:3b:22:55:2f:fa:ac:12:55:06:22:1e:77:ef:3a:5f:e5:18:
c9:51:fc:35:c4:e1:38:73:71:65:28:0d:c2:30:36:dd:b9:60:
9d:7c:8c:f3:2d:2f:36:d6:4f:79:ab:2e:62:f1:2f:3d:ec:df:
af:b2:08:fd:ca:fb:88:e1:b7:be:8d:64:5a:0f:e9:86:81:75:
b7:69:a9:12:fa:85:17:39:eb:08:55:48:d4:e7:95:f4:94:41:
2d:2f:42:55:d4:53:c0:79:45:93:0b:eb:5b:8f:5c:1a:27:cc:
2a:46:5c:94:9f:c3:af:8d:9a:cf:d6:bc:e3:4b:df:68:0a:2a:
dc:73:0e:ec:04:33:68:99:68:8c:25:4f:eb:ce:49:5e:80:54:
9f:e7:03:dd:ab:0f:73:00:bd:e6:48:fc:b0:8e:a5:b2:f7:e0:
d4:e3:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:10 2026 by rpki-client