Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: dO6g7pyOb5uLBCSv2UfLFTXbsQkxUpiG5gHa97/BZRU=
Subject key identifier: 7B:3C:85:42:71:93:E4:6A:28:82:46:DA:A6:04:C8:96:6F:96:30:DF
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 01A0C58DF49A40A0BF84D5F7846B3524297F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 1183
Signing time: Mon 21 Sep 2026 20:00:09 +0000
Manifest this update: Mon 21 Sep 2026 20:00:09 +0000
Manifest next update: Tue 22 Sep 2026 20:00:09 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: nsdAQy9Ag2i6wi7n1d55qVLdfZ3Mvq9fX/21j70WMxs=)
2: GjbkJ49m1ylK_4cEmIWXPszPEDM.roa (hash: gxfEhCbhLA8o8by+I0tdbjJ2UvnCGKEhH4gj7vfErb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8d:f4:9a:40:a0:bf:84:d5:f7:84:6b:35:24:29:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Sep 21 20:00:09 2026 GMT
Not After : Sep 22 20:00:09 2026 GMT
Subject: CN=7b3c85427193e46a288246daa604c8966f9630df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:8f:d1:85:f6:28:05:04:65:a6:40:b6:70:
3c:dc:5f:a8:2b:45:03:cf:62:62:c5:bd:5b:b7:1f:
81:59:98:a4:e1:95:6e:51:a8:77:72:98:42:e5:bb:
2c:ad:f7:16:4a:ff:be:36:4f:e5:c6:fa:09:d6:9c:
44:24:23:4d:37:a5:e5:be:a1:ea:06:be:1f:70:d5:
80:5e:4e:a5:03:24:e1:ec:33:da:0b:6b:87:60:1c:
08:7b:77:8d:41:42:3d:d5:70:82:37:37:8b:7d:3a:
44:20:5f:2c:f8:ec:0c:8d:40:26:d3:25:19:3f:27:
4c:2a:a7:29:39:61:7b:77:cc:a8:3e:ba:08:73:dc:
c1:4d:92:9a:85:3d:5d:70:27:96:bb:41:05:e4:93:
79:ee:01:e6:0a:75:55:62:0a:ee:fc:15:e3:5f:f4:
36:7e:8c:89:8c:d4:f2:47:88:bf:3d:ab:1e:40:ae:
7f:34:7b:29:df:2a:c2:f1:09:1f:ee:e9:49:77:dd:
04:5d:e3:a2:c3:05:9b:35:cb:60:3e:2f:e6:db:19:
06:0b:b6:b4:37:9e:cf:9f:f3:b9:a1:27:1e:a0:bc:
59:2f:b8:4e:5c:98:7d:29:8b:e8:79:36:c3:87:96:
c3:e8:eb:4a:00:78:dc:d0:16:33:bf:8f:df:a4:32:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3C:85:42:71:93:E4:6A:28:82:46:DA:A6:04:C8:96:6F:96:30:DF
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4a:1d:a4:37:2f:4d:bf:fa:89:49:81:3b:87:09:12:85:b1:
47:af:a8:57:76:b0:8c:ac:b5:52:17:fe:1b:38:ff:db:00:42:
ce:32:a6:bd:cb:ef:81:3c:e1:6c:c8:9c:fb:f2:74:c6:3f:62:
f0:92:85:79:2b:56:26:a8:92:0c:9f:39:d4:1d:58:ed:37:7d:
81:25:7e:bd:fb:f6:71:a2:15:e8:49:82:63:0a:3d:9d:0d:ca:
e7:a3:7c:46:1e:03:2d:40:fc:a9:17:12:c0:61:b3:39:07:0c:
35:b5:ad:da:93:07:c8:cf:84:e7:6f:b8:34:69:5a:68:32:41:
5f:b0:8e:b3:02:41:b8:be:e1:ad:62:8b:76:3c:5a:67:32:80:
1e:6e:8d:e7:57:5d:26:f2:78:64:ca:84:e5:50:5e:36:06:de:
22:18:44:be:3b:1b:fc:85:04:e4:59:05:8e:3c:65:af:b8:88:
15:31:a8:c8:42:c6:89:3d:23:f3:e3:e1:3d:24:6d:62:a6:c1:
ce:26:42:1c:35:e0:b8:f9:fd:2b:42:cc:87:b1:6f:4f:85:ce:
3a:41:19:08:61:fb:20:6a:86:a9:9c:85:d5:8b:16:14:1f:15:
0c:95:57:51:7c:f3:47:7f:8b:6b:c3:f1:53:8c:0f:43:3d:5e:
9b:78:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:09:52 2026 by rpki-client