Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: IJrUu7Vtjb1Dyc+SkKDnuPTyLu6RFHLF6GNMebRmSQk=
Subject key identifier: A2:7F:FF:11:B3:A4:73:EB:70:A6:80:6E:32:5F:29:BC:76:FF:D8:F7
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 019FA93DE9CE64645D6B8E82EC308FFF1C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 15:00:34 +0000
Manifest this update: Tue 28 Jul 2026 15:00:34 +0000
Manifest next update: Wed 29 Jul 2026 15:00:34 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: jQ/de4sAEmDClaZTLfkLm3W6+/ZOZMC/0wWgwSzCWaU=)
2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:e9:ce:64:64:5d:6b:8e:82:ec:30:8f:ff:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Jul 28 15:00:34 2026 GMT
Not After : Jul 29 15:00:34 2026 GMT
Subject: CN=a27fff11b3a473eb70a6806e325f29bc76ffd8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:0d:f7:e7:9a:2f:1c:47:87:e9:7b:8e:1e:
6d:66:cd:c5:c7:7f:5a:3c:dd:4e:b0:1d:6e:3f:42:
7d:49:44:57:86:d5:dc:52:01:14:70:0a:8a:df:82:
b5:0a:e9:82:46:ca:c4:68:66:75:ef:50:c3:26:2d:
ea:fd:d5:59:9b:4b:cd:e0:c0:d6:d1:bd:2e:10:58:
70:aa:c2:a6:bf:38:a7:1e:6d:83:c0:a3:a9:07:66:
00:8a:fb:49:81:e3:d2:e1:85:3c:d3:54:ff:b0:26:
20:2e:b9:e9:c8:5e:4d:93:c6:44:be:48:da:de:6e:
c8:51:01:af:0a:63:2e:a3:e0:60:d9:fb:42:c0:63:
1d:a1:8b:9e:ba:a8:86:bb:d1:b7:52:eb:ee:a7:c7:
bc:8e:c6:d7:c0:df:2a:5d:88:aa:96:06:69:ee:fd:
f2:94:22:e6:8d:6a:99:50:1d:4e:85:8f:89:fa:75:
c0:98:85:45:e9:a2:5a:4b:fa:12:50:08:05:b4:03:
82:a1:fd:3e:cf:c1:23:cb:6c:1e:db:0a:a4:b4:63:
10:21:c3:ce:2e:d7:2e:24:77:1e:fc:1b:d3:80:3a:
fe:1e:1e:44:4c:a2:3c:23:b9:e9:08:24:f9:d3:e3:
a8:51:28:59:55:25:1c:70:7c:5d:d5:bc:26:46:de:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7F:FF:11:B3:A4:73:EB:70:A6:80:6E:32:5F:29:BC:76:FF:D8:F7
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7b:e6:2c:eb:b8:d5:12:4a:25:09:51:7c:7a:e2:fc:1b:05:
53:4d:df:c5:e5:c6:c8:a5:99:f5:da:e0:79:bc:bd:34:a0:00:
18:79:46:16:b7:a6:cc:f9:2f:de:a0:98:4c:06:81:53:04:89:
27:39:9d:26:c6:6f:1f:b7:c4:c4:69:9b:f4:02:56:57:9e:69:
ff:39:b5:1e:b6:ca:e0:38:9b:38:1f:f2:21:2e:ef:8f:88:88:
9f:d0:29:34:4b:d3:ce:62:aa:11:c8:66:fa:8d:f7:85:36:18:
0f:e2:0c:f6:57:c9:38:57:97:e9:4f:ce:1c:4c:2a:c6:fc:0d:
d1:03:cb:c5:f8:fa:7c:9d:b2:eb:59:65:e3:02:e9:24:47:49:
a5:4e:4b:9a:04:5a:93:c4:01:c9:91:c6:f8:80:ee:b6:83:60:
cb:ac:e9:b7:c0:ca:f0:1d:93:6f:71:8a:9e:55:5d:aa:e9:0b:
cb:7d:2d:73:29:b0:02:d2:74:49:d0:d8:be:ca:bd:a8:01:ed:
7b:a8:5c:e8:a6:37:8e:87:e7:fc:37:08:29:90:85:5b:ab:54:
8b:cf:13:37:d2:46:2d:24:d4:01:d6:04:29:16:0b:c5:91:3d:
99:63:74:f5:24:f4:17:ea:46:79:33:a8:3a:7d:fb:26:9a:a9:
82:23:73:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:38 2026 by rpki-client