Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier: nQ8Y/qSb9dQJrtiHCGQ/Yzm8QyJWEBCwUNkT71Xg+WI=
Subject key identifier: C4:A6:F7:F5:C0:8E:4A:0E:C5:B1:B5:07:C0:6D:12:80:64:EF:AA:A1
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial: 019CAA90068BEBE968B3DFB867139E1A0EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number: 1521
Signing time: Sun 01 Mar 2026 18:01:31 +0000
Manifest this update: Sun 01 Mar 2026 18:01:31 +0000
Manifest next update: Mon 02 Mar 2026 18:01:31 +0000
Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: wYqrfN29eH3a/5tajjvZj8K42ugTmPdxsPOOsckOjoc=)
2: TM2u3nE4U4gt579zKk1egxcYwGw.roa (hash: XOA83pwjmnyrd8JcXEc6+qU+kfl85cy7kc2/rS23hZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:06:8b:eb:e9:68:b3:df:b8:67:13:9e:1a:0e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Validity
Not Before: Mar 1 18:01:31 2026 GMT
Not After : Mar 2 18:01:31 2026 GMT
Subject: CN=c4a6f7f5c08e4a0ec5b1b507c06d128064efaaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:b0:bd:1c:d8:1e:06:1c:74:45:bb:7f:1f:
a6:57:91:7f:3c:50:de:28:c7:cb:ed:5f:c5:9a:ca:
a9:a4:19:e0:7d:e8:1e:b9:4b:04:f7:76:02:95:93:
c3:69:30:5c:ff:d1:7a:08:30:9a:2e:79:20:eb:e6:
26:67:36:1f:18:12:0c:e4:62:71:e3:b5:27:4a:da:
f2:5a:84:cf:1e:66:ab:cb:c7:e6:82:85:ed:d2:58:
60:b6:f9:d1:67:77:b3:30:19:0d:80:51:b8:26:f2:
a3:b5:c7:27:87:37:5c:b9:0c:67:d8:36:bd:4b:6e:
ee:78:b7:94:ee:41:15:38:52:33:92:26:91:5a:ac:
1d:a9:c5:1e:88:c0:87:19:34:a2:4b:3c:d7:84:21:
dd:a6:b9:b6:27:8f:bc:93:b8:d5:cc:e5:64:a4:9f:
41:9a:8f:67:2c:49:10:96:39:e7:8e:b8:89:9d:3f:
f6:49:6f:0f:d6:dc:ab:ae:cd:c8:1a:af:ef:20:d4:
62:35:3d:24:f1:fc:a3:a4:11:0e:e2:86:a4:3b:a4:
e2:c0:77:2d:88:02:5b:c5:24:ab:84:80:e8:42:2c:
fe:91:d7:0b:21:dd:15:76:ce:c9:79:cf:c5:2b:a0:
fb:22:28:26:db:86:48:e2:d0:c4:15:0a:ea:33:62:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A6:F7:F5:C0:8E:4A:0E:C5:B1:B5:07:C0:6D:12:80:64:EF:AA:A1
X509v3 Authority Key Identifier:
keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b0:38:23:6b:1a:e7:bb:b8:e8:41:e9:f1:4e:a0:0b:54:54:
74:c0:0c:3b:36:aa:c2:15:a2:a1:7a:8f:f5:3f:3a:72:96:9b:
49:8e:d9:7e:ef:3f:32:ad:8c:68:43:01:b5:10:bb:dd:67:ac:
1d:0c:7b:77:8c:05:7b:bd:bc:5c:f1:5e:67:f8:bd:40:99:64:
25:eb:31:2d:2d:e8:81:00:cd:67:6a:28:78:a2:31:95:42:94:
95:e0:9a:3d:58:a5:43:29:d5:c6:1a:2c:90:e9:7a:5b:ad:68:
5c:99:dd:68:8e:34:8d:1b:f4:5b:7c:24:12:3b:d7:7b:0b:33:
0a:76:d3:11:cb:7d:60:39:06:c3:45:06:8c:77:07:00:f4:65:
89:33:a8:f5:f4:1f:b6:66:d6:a6:38:ed:2b:49:06:4d:08:52:
db:95:c3:25:82:f2:74:a2:2b:8a:38:36:70:6b:ec:2f:ed:a4:
fd:1f:c5:81:6f:06:42:fb:09:7e:44:71:09:da:50:3d:30:56:
19:bc:dc:0a:51:26:69:6d:01:cb:6f:f5:5f:37:8e:34:e8:73:
8f:37:6b:21:cf:4f:b4:7e:a7:10:10:15:da:b4:25:5e:84:96:
73:98:f0:cd:38:aa:80:60:ec:20:05:5b:26:cd:63:5c:ec:ff:
34:ba:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:43 2026 by rpki-client