Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: MZEk9kBt0h77Zjh6kbUQCpiSBOOO2n5IMZjujFHhzqI=
Subject key identifier: A6:F5:65:59:C6:14:CE:3D:05:5A:4D:74:6C:F9:B7:06:0D:17:FF:75
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 019CAEDA5504A84A4515487280EB55774B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 0F65
Signing time: Mon 02 Mar 2026 14:01:09 +0000
Manifest this update: Mon 02 Mar 2026 14:01:09 +0000
Manifest next update: Tue 03 Mar 2026 14:01:09 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: B4tmnqxXTw6DPG49mBk9bm5bn5N0D3Ipv00z2Tj89+8=)
2: GjbkJ49m1ylK_4cEmIWXPszPEDM.roa (hash: gxfEhCbhLA8o8by+I0tdbjJ2UvnCGKEhH4gj7vfErb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:55:04:a8:4a:45:15:48:72:80:eb:55:77:4b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Mar 2 14:01:09 2026 GMT
Not After : Mar 3 14:01:09 2026 GMT
Subject: CN=a6f56559c614ce3d055a4d746cf9b7060d17ff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:22:b0:49:a2:5b:f1:2f:fa:a4:71:1d:01:
f8:d2:88:95:eb:93:9c:ea:b8:66:ab:47:56:f1:f4:
5a:fe:ee:b4:89:11:cc:4e:79:6e:9b:32:b6:be:17:
46:fe:e2:e9:ec:8f:52:c5:67:f1:ce:19:55:63:a3:
1e:80:3b:62:13:a0:c1:22:9c:1b:8c:81:9f:85:aa:
8a:15:4d:fd:61:31:e4:46:bb:f6:f5:3e:f3:b5:a1:
79:cb:7e:0f:78:80:5a:2f:8c:3d:12:d3:af:ab:77:
3c:a1:42:cd:20:d3:f9:05:f8:8d:01:b1:25:aa:f3:
42:61:5c:42:fa:f8:80:cb:5f:8f:f7:4a:1a:dd:c2:
89:66:df:3b:0c:79:bd:79:e0:1e:5b:86:6e:d5:73:
b0:93:23:f3:e8:68:cb:60:e0:61:b0:e2:40:68:53:
e0:86:bb:77:b1:51:d0:a2:82:2f:83:e6:76:e3:a8:
68:d0:da:56:8c:0f:17:1f:4a:5a:db:71:df:63:91:
36:22:b1:d1:a2:8a:ba:65:ef:b7:b4:16:ad:a1:4b:
77:91:f5:96:44:2d:ba:9f:67:72:b0:af:37:fa:60:
13:02:6e:16:08:98:8f:74:5d:34:d9:cf:23:8e:5c:
32:26:9d:ae:2d:e2:e7:de:87:d5:d1:8e:ee:f4:2a:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:65:59:C6:14:CE:3D:05:5A:4D:74:6C:F9:B7:06:0D:17:FF:75
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:79:9f:27:4b:7d:aa:2b:c3:d8:fb:84:c3:b1:5e:fb:fa:26:
b1:3f:36:41:fe:f3:3d:18:85:0f:bc:35:53:b5:a5:de:2c:b9:
82:4d:8f:d3:90:1d:8e:c7:7d:b2:2a:d2:cc:b6:6f:d8:6d:1e:
5b:56:dd:e3:57:db:06:48:3b:7b:f1:b3:db:05:b6:a2:3a:aa:
f9:29:ed:91:75:7a:78:06:3b:a4:03:51:22:10:b9:80:93:14:
e7:1f:77:ff:d7:e8:2e:64:b4:e7:2c:f2:ee:b2:01:ce:ae:42:
3e:bf:74:07:72:d8:d9:20:27:a1:02:9f:e9:cf:62:09:0e:97:
52:d8:28:84:9b:ce:60:22:8a:88:5e:66:f5:7d:9b:da:7c:d8:
35:9d:f6:06:99:bf:f5:b5:07:fa:1c:ca:af:18:2e:d6:6a:76:
bb:ae:cf:98:1f:38:b7:d0:d8:76:44:6b:5a:c8:10:01:8d:dd:
eb:3a:df:79:07:fc:2e:ad:45:75:20:24:44:e7:9b:5e:53:fe:
66:d8:b8:20:17:fe:89:16:73:8d:20:6d:d6:84:72:dd:0b:5d:
c5:05:fa:29:66:4d:9b:70:ee:f1:f1:3b:ba:e9:fe:d8:3d:16:
17:a0:af:00:dd:4f:3e:df:ce:5e:8f:68:39:1b:47:e0:30:9c:
b2:9c:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:36 2026 by rpki-client