Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: 4hKGeV4bf1E02BZtUpl9EK9haAwy7UntRj2ZVHugq+8=
Subject key identifier: 9B:83:31:6B:7A:D0:1B:94:BB:3C:B7:8C:A7:54:5E:E0:AC:0F:37:AC
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 01A0C52019CD510F67C4FFBC1D2C3DC58717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 18:00:10 +0000
Manifest this update: Mon 21 Sep 2026 18:00:10 +0000
Manifest next update: Tue 22 Sep 2026 18:00:10 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: cWbBnICDtaCHdgkO3jXJOEUeV8RxhWhhxKm5c8yEZM4=)
2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:19:cd:51:0f:67:c4:ff:bc:1d:2c:3d:c5:87:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Sep 21 18:00:10 2026 GMT
Not After : Sep 22 18:00:10 2026 GMT
Subject: CN=9b83316b7ad01b94bb3cb78ca7545ee0ac0f37ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:da:16:eb:0c:80:b8:7e:57:06:63:6d:61:
49:f3:ba:7b:bc:e9:d1:1b:1b:28:34:35:bc:39:9c:
85:44:d2:b8:94:56:d7:70:0b:a3:26:e7:ba:b0:cc:
c7:a5:f6:5b:a5:0c:53:72:4a:b4:0a:5a:92:82:af:
61:55:02:3f:54:b2:4f:4d:eb:51:3f:47:88:97:ea:
ec:93:07:7b:56:b6:13:83:0a:11:27:f6:75:2d:a7:
a3:8c:50:b1:de:c0:9e:0d:a8:16:47:66:5f:ce:67:
4c:12:4a:ad:69:91:4f:3c:d6:67:0c:1a:a3:41:f1:
3f:84:fe:fc:f0:d5:f6:ee:4f:e8:9a:43:50:07:b8:
52:bd:01:97:f3:f3:83:4d:15:30:a5:ac:fd:20:7b:
cb:bf:a1:2a:0e:64:2b:fb:73:e0:57:f5:fc:af:57:
ba:8c:80:0a:bf:5d:d5:1b:6f:b6:41:f9:e6:d7:bb:
93:6c:32:65:ae:27:7a:42:db:42:a1:a6:71:db:cf:
5e:67:af:32:c2:2a:d0:2f:75:3f:b2:17:9b:be:ec:
43:93:b5:dc:69:64:aa:a2:99:94:e3:07:08:90:e7:
d3:99:ac:c1:66:c6:1e:2c:fe:3b:f2:3c:9e:56:ba:
ba:3b:dd:67:ac:41:a1:d9:3c:c8:eb:06:88:42:48:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:31:6B:7A:D0:1B:94:BB:3C:B7:8C:A7:54:5E:E0:AC:0F:37:AC
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3e:43:87:d1:9d:81:38:f3:aa:53:cf:75:bc:34:cc:aa:eb:
2c:55:ee:04:16:ef:bb:52:ce:67:a2:b6:ce:37:e0:0f:65:dc:
3f:f6:61:54:4b:b1:9f:25:00:c1:26:21:15:af:d3:2e:30:07:
a6:20:ba:77:66:da:78:8f:75:b0:13:81:0e:02:6f:a4:a1:b6:
ca:4f:19:9c:e8:4b:c0:a9:aa:a5:0f:45:49:43:9a:58:b5:ce:
60:30:35:46:1a:67:c9:6a:03:94:b9:1a:7f:62:0c:c2:f6:21:
cf:86:ba:a0:e2:db:87:39:e3:36:86:8e:47:95:58:b9:73:6d:
7f:f7:49:b9:fe:95:52:6b:d8:84:0b:40:5d:f4:bc:95:78:51:
46:91:6b:95:a5:eb:1d:30:69:58:b6:21:3e:d0:af:53:70:e7:
75:9e:81:f5:0e:90:8e:c0:50:ae:e4:5e:9d:35:09:e6:d2:1f:
0b:0a:b3:88:fd:21:a2:46:1f:6b:ea:f3:84:3a:db:44:e8:e1:
e7:84:82:fd:36:48:ab:19:cc:14:58:62:8e:7a:50:56:d4:8f:
08:b0:76:a5:e1:da:69:2a:80:ac:34:26:60:6f:4e:37:66:44:
9c:f5:99:ec:81:11:4c:28:2f:8b:b7:18:6b:35:ca:4a:7e:ed:
86:4f:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:48:58 2026 by rpki-client