Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: 8YF0mHOvTW5Um2Kty6Pg1br/xaVqWMqcOcGp40GGkeo=
Subject key identifier: 34:60:72:8A:2D:B8:4F:FE:62:1D:17:E8:3F:15:B8:73:35:10:49:07
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019FAABE297BDD12EAD1AD66AF96549DF9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 0B8D
Signing time: Tue 28 Jul 2026 22:00:16 +0000
Manifest this update: Tue 28 Jul 2026 22:00:16 +0000
Manifest next update: Wed 29 Jul 2026 22:00:16 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: Oxf+OtUTjcn0dL6UdjvI0Jdcl1+yIqd5z7CF3UsRCpQ=)
2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:29:7b:dd:12:ea:d1:ad:66:af:96:54:9d:f9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Jul 28 22:00:16 2026 GMT
Not After : Jul 29 22:00:16 2026 GMT
Subject: CN=3460728a2db84ffe621d17e83f15b87335104907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:a0:4d:89:0f:dc:9e:ee:25:e7:11:4b:31:
78:ef:1a:84:99:74:40:a3:02:aa:5c:73:9c:33:8b:
00:96:c0:bb:28:8e:eb:72:05:fc:37:b0:cb:ed:33:
ca:b7:ba:ea:23:0a:e9:21:1e:15:34:09:4a:8a:f8:
3d:17:3b:7f:59:3f:f1:dd:84:43:ee:03:09:cd:38:
66:3a:d3:d2:42:5b:a2:c8:ff:59:ab:ae:33:fd:3d:
43:81:b1:09:db:ce:65:2b:4a:55:f0:8e:6f:41:d0:
ac:a9:fd:07:a8:b2:b6:54:e6:9e:b4:ba:dd:16:a1:
6b:6b:10:31:65:47:cb:2e:f5:e9:8b:12:c3:11:fd:
48:54:83:93:fd:65:29:31:ad:87:56:d0:58:e4:05:
4b:48:ab:82:0b:63:33:5e:b3:c9:29:99:c9:31:74:
0c:83:48:15:52:51:8c:4d:ae:c8:7a:97:b2:d0:c0:
bb:74:03:de:0f:d6:8a:ad:ef:b2:fb:74:4f:15:ad:
bf:6b:fd:35:3c:68:64:d9:12:8d:a0:b7:a7:8f:6f:
82:c8:51:65:3d:64:a7:c7:71:b5:23:1c:0d:46:57:
2d:34:a2:dc:fe:e2:5e:e6:8c:fa:3f:3c:f1:3f:a3:
19:77:a5:a4:61:65:87:0b:c0:38:82:5e:b0:9e:8d:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:72:8A:2D:B8:4F:FE:62:1D:17:E8:3F:15:B8:73:35:10:49:07
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:15:16:7e:3c:27:16:b1:37:7d:73:84:22:65:f6:92:92:68:
45:6f:0b:c3:a5:ba:70:d2:45:ae:d9:d5:09:24:4d:d8:63:57:
40:08:70:0a:cb:fa:4b:9c:f0:e7:80:18:80:51:cf:9b:b7:c5:
03:28:5b:ad:db:44:ab:d4:1b:3e:e9:ec:e9:4f:5e:3c:27:00:
0e:32:99:ce:f1:30:d4:3f:ed:16:a7:bb:b2:22:d9:9f:4b:49:
e5:e5:b6:1f:32:0b:ad:34:ea:1e:f8:6a:60:4c:6e:da:cf:89:
c2:b8:d3:a1:e0:11:66:92:00:8f:f9:65:e0:ac:0f:e5:f6:46:
1b:97:26:4c:ec:01:91:bd:d6:49:19:91:01:a0:ec:36:51:48:
99:0a:b1:e8:43:55:54:c0:11:a5:bf:ad:b1:35:91:c0:c9:2a:
66:8a:98:f9:53:8d:38:e8:b4:20:83:d9:e4:fa:f3:c5:01:5e:
13:3a:ff:0a:00:2d:c3:0b:d6:05:ab:92:ec:60:df:99:1a:96:
7d:29:d4:39:55:e6:d1:81:39:ad:c1:99:28:cc:65:77:ea:01:
51:93:14:50:91:f9:19:75:ad:33:49:74:e1:73:58:ca:ec:6d:
0b:96:3e:0e:c6:8d:a5:12:11:7f:b8:d3:54:c6:70:02:5f:ea:
f3:20:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:10:47 2026 by rpki-client