Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: bQgL7oBjDT2LI/L05MS9Y+gLY1EJR2bL9LUaeUNrgIc=
Subject key identifier: BA:CE:F7:07:85:48:DD:91:75:2D:4D:11:82:A5:DC:19:92:56:9E:51
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019D9998FD1DD2A8E2AA8DBF83024EB04B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 0A7B
Signing time: Fri 17 Apr 2026 04:00:33 +0000
Manifest this update: Fri 17 Apr 2026 04:00:33 +0000
Manifest next update: Sat 18 Apr 2026 04:00:33 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: Fs0kIGMj8k95CsKfCrfXuhQcSBTRoBothwYW+8jxbe8=)
2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:fd:1d:d2:a8:e2:aa:8d:bf:83:02:4e:b0:4b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Apr 17 04:00:33 2026 GMT
Not After : Apr 18 04:00:33 2026 GMT
Subject: CN=bacef7078548dd91752d4d1182a5dc1992569e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3f:b4:07:9a:d7:1b:0d:85:bd:a2:85:cd:4f:
a5:97:bf:3b:0e:f5:79:89:46:74:5b:f0:ef:35:82:
81:f8:1d:80:cf:f8:7f:a4:d8:fc:d8:c5:ef:07:49:
3c:73:12:56:a8:45:e0:66:3c:67:d7:9e:20:64:ae:
9b:71:b6:ff:97:fa:01:dd:5a:90:c5:78:e6:c1:9a:
e1:80:16:0d:34:82:ed:3c:71:65:24:3e:28:d4:54:
ee:d5:b1:a6:76:61:44:bd:23:64:7e:75:c8:d7:df:
56:de:4e:3f:f4:3b:8e:3a:1a:5d:b7:e6:1f:c9:ad:
d3:b7:fb:68:fa:cd:b7:2b:e7:e4:1d:e3:8d:82:70:
9c:f9:43:ab:a4:24:af:4d:91:a8:fa:2e:31:65:bc:
d9:3b:04:c5:22:ed:ef:e7:f7:91:fb:51:21:84:60:
27:5b:c7:81:45:52:d3:94:56:68:f1:93:fb:b9:3c:
22:86:d2:97:f7:f8:38:df:69:43:bc:52:79:82:a5:
ef:39:11:a0:2c:71:2d:e8:8f:31:87:10:da:2a:fd:
08:f8:d2:9c:08:f6:cf:72:27:40:3a:0d:be:96:89:
df:ba:06:fc:c2:1d:49:cd:ed:15:df:9a:70:89:b8:
c8:96:7f:82:43:b1:a5:4b:30:3a:79:df:d1:f1:64:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CE:F7:07:85:48:DD:91:75:2D:4D:11:82:A5:DC:19:92:56:9E:51
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a9:d6:2c:8b:e0:a5:37:85:42:29:a1:0c:ec:4c:08:56:77:
1a:10:89:ec:38:66:cc:e6:4e:6d:e5:a0:7f:e3:0b:90:3e:a1:
c9:c0:4e:f6:8a:1b:b2:d3:bd:f8:b5:5a:57:c8:37:f0:d9:28:
90:15:8a:e8:95:2d:1a:b3:e4:cb:a7:14:dd:5b:6f:fb:f9:92:
f6:d0:46:38:a8:8e:c9:1f:87:e7:2c:da:53:8c:5e:d1:da:57:
64:65:44:4d:0f:91:c7:2a:b7:2f:a7:11:9e:0b:71:ee:d3:6e:
d3:fd:83:5d:0d:92:01:62:89:1f:c5:48:c2:1f:82:66:11:0e:
90:8b:b8:ec:eb:d4:04:68:a0:97:dc:05:c2:ee:db:f5:6d:91:
76:b3:8b:c9:4c:e1:ea:76:bf:b3:c1:56:b8:ec:a2:e9:a5:3c:
6f:03:ca:17:b9:a9:9d:bd:77:4f:6b:57:f7:59:0d:2a:24:f7:
d3:e5:1f:7c:3f:fe:f1:fe:f3:d1:81:a2:10:2b:40:ba:02:53:
0e:86:fe:0b:c4:48:57:73:46:63:65:99:15:3e:55:33:8c:19:
47:73:c9:38:b2:cc:68:d8:c9:0b:1f:f4:31:b0:a6:77:7c:a5:
fa:b7:7a:80:b0:19:e5:45:e6:f3:0f:85:27:fb:42:b7:40:d3:
7f:92:94:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmP0d0qjiqo2/gwJOsEtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ODdhNGFjYTU4MWQ4ZWJjZGZlMjRiNjVmMWU3MGExMmYy
ODlhNzgwHhcNMjYwNDE3MDQwMDMzWhcNMjYwNDE4MDQwMDMzWjAzMTEwLwYDVQQD
EyhiYWNlZjcwNzg1NDhkZDkxNzUyZDRkMTE4MmE1ZGMxOTkyNTY5ZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8j+0B5rXGw2FvaKFzU+ll787DvV5
iUZ0W/DvNYKB+B2Az/h/pNj82MXvB0k8cxJWqEXgZjxn154gZK6bcbb/l/oB3VqQ
xXjmwZrhgBYNNILtPHFlJD4o1FTu1bGmdmFEvSNkfnXI199W3k4/9DuOOhpdt+Yf
ya3Tt/to+s23K+fkHeONgnCc+UOrpCSvTZGo+i4xZbzZOwTFIu3v5/eR+1EhhGAn
W8eBRVLTlFZo8ZP7uTwihtKX9/g432lDvFJ5gqXvORGgLHEt6I8xhxDaKv0I+NKc
CPbPcidAOg2+lonfugb8wh1Jze0V35pwibjIln+CQ7GlSzA6ed/R8WQYRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrO9weFSN2RdS1NEYKl3BmSVp5RMB8GA1UdIwQY
MBaAFAaHpKylgdjrzf4ktl8ecKEvKJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEt
MmQyOGExOTEzNWZkLzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEtMmQyOGExOTEzNWZk
LzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqnWLIvg
pTeFQimhDOxMCFZ3GhCJ7DhmzOZObeWgf+MLkD6hycBO9oobstO9+LVaV8g38Nko
kBWK6JUtGrPky6cU3Vtv+/mS9tBGOKiOyR+H5yzaU4xe0dpXZGVETQ+Rxyq3L6cR
ngtx7tNu0/2DXQ2SAWKJH8VIwh+CZhEOkIu47OvUBGigl9wFwu7b9W2RdrOLyUzh
6na/s8FWuOyi6aU8bwPKF7mpnb13T2tX91kNKiT30+UffD/+8f7z0YGiECtAugJT
Dob+C8RIV3NGY2WZFT5VM4wZR3PJOLLMaNjJCx/0MbCmd3yl+rd6gLAZ5UXm8w+F
J/tCt0DTf5KUoA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:01 2026 by rpki-client