Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: BYO2hUM8NH22Mtn+5zf22xFfA1gOsX8eOcvwsgmBSpY=
Subject key identifier: 25:5C:CE:7B:53:D6:9B:AA:0C:41:8D:E2:87:B6:05:31:63:B8:CB:66
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019CAC0FEC7C58AD8DAB7AEEC7F05ADFB4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 0A00
Signing time: Mon 02 Mar 2026 01:00:50 +0000
Manifest this update: Mon 02 Mar 2026 01:00:50 +0000
Manifest next update: Tue 03 Mar 2026 01:00:50 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: 8qM+tqIYSeRNMDjWm/juL3rp3HjjyBLH/8g1ZxY48Iw=)
2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ec:7c:58:ad:8d:ab:7a:ee:c7:f0:5a:df:b4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Mar 2 01:00:50 2026 GMT
Not After : Mar 3 01:00:50 2026 GMT
Subject: CN=255cce7b53d69baa0c418de287b6053163b8cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:8c:49:4f:a5:e6:c2:8a:d7:bb:3f:77:3d:
c4:a0:86:90:0d:8f:bd:73:f5:78:dc:e4:19:6c:81:
62:75:4e:bd:90:b5:42:8a:bf:c0:a0:f2:e5:79:c9:
6c:19:13:7a:8b:99:75:33:33:de:9a:06:e1:54:02:
a9:41:34:fe:5f:e4:4a:4c:07:26:bf:5a:fb:55:36:
dc:be:22:1f:e6:47:69:32:35:c9:5d:35:5e:75:bc:
e4:3d:c3:30:35:a5:9f:fd:99:1c:db:66:6b:f2:55:
96:72:a5:00:f7:20:98:ba:5b:0a:c3:6e:d3:f3:ba:
10:79:36:cd:91:d8:73:77:08:9d:96:6e:d8:5a:21:
2e:aa:43:a4:c3:30:d8:50:c5:7c:7e:c0:5e:c8:93:
3a:b5:8f:cd:84:74:ef:4e:be:1d:d2:90:27:2b:3f:
a2:ef:13:c8:57:a4:2b:e8:08:f5:bf:ee:54:31:52:
58:3c:45:a8:76:18:52:cb:71:7f:1a:fa:6b:95:d0:
9b:99:e2:c7:6b:33:99:79:d2:43:70:29:02:04:60:
62:d8:b6:95:fe:c6:a1:6a:d5:07:89:86:9f:03:89:
28:f3:21:f8:ea:6c:cb:24:5c:98:47:6c:94:32:be:
2c:4a:9b:d0:5c:1b:a1:68:07:c5:f3:e1:ee:2a:82:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:CE:7B:53:D6:9B:AA:0C:41:8D:E2:87:B6:05:31:63:B8:CB:66
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a2:b2:68:d6:9c:b1:12:a5:82:1c:c3:15:26:4a:c5:4d:cc:
8e:7d:55:a9:09:5a:d6:bf:e8:2b:67:e8:77:fb:96:62:e4:82:
f2:91:cb:f2:79:9e:cb:46:07:3c:b4:57:d9:ad:96:f5:de:37:
a4:72:09:90:0d:82:79:6d:58:a2:24:65:7a:9b:43:89:ba:0c:
4b:23:7d:b4:f4:20:0a:87:bc:91:e4:78:d4:81:01:60:c5:70:
21:af:0d:8b:84:11:47:84:2d:23:cd:29:d9:c4:64:cc:99:c7:
7a:53:68:cb:e8:0d:fd:3a:8c:b6:c1:5e:89:9e:7a:92:d1:3e:
df:15:96:38:b5:c9:dc:80:64:8d:3c:36:d7:11:bb:56:34:20:
7b:d1:38:9e:f9:bc:dd:13:4e:6a:95:a8:21:3f:87:b0:d8:dd:
00:84:32:bc:b0:ab:6b:f2:80:83:bd:93:49:91:1c:e6:65:98:
7d:62:e0:cc:91:6c:79:f1:58:0c:44:7a:65:38:7b:48:24:f9:
66:cf:c6:6d:7d:82:67:ae:85:cf:17:07:45:e9:51:f2:85:26:
1c:34:90:ed:22:69:97:3e:27:3a:65:e3:d3:aa:91:d4:e8:04:
00:ab:c4:41:31:bb:01:e7:f9:d0:b0:38:66:d8:de:8b:18:95:
4a:6f:a7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:53 2026 by rpki-client