Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier: o4bBc6ta3R9jo4IkHKKKUe+ZUgc74Y+GeY9NTRyiu40=
Subject key identifier: 88:6D:66:14:13:A4:45:3D:AD:17:93:C2:A7:F9:31:05:DC:0C:16:C2
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 019CAE3593496E8EA7328908C3DD9D01BC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number: 17A1
Signing time: Mon 02 Mar 2026 11:01:12 +0000
Manifest this update: Mon 02 Mar 2026 11:01:12 +0000
Manifest next update: Tue 03 Mar 2026 11:01:12 +0000
Files and hashes: 1: 06gNA3LV7YBXuhA1rKiMTeDxRoA.roa (hash: d9wHD1t/r/V+XScUKTAXojVgXFDnOgiwl/ANGl0ElHU=)
2: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: Bl1d3R/EKrSm8810FuYCfmm76Z8JN0ZcU6hc8wAebPE=)
3: p_w8TFQKrPjZFeqKHXZkgHKF9Tc.roa (hash: tr6X6XVYM4REThJ5QdRO15I8HLm0u1bXqwDznTVnWXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:93:49:6e:8e:a7:32:89:08:c3:dd:9d:01:bc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Mar 2 11:01:12 2026 GMT
Not After : Mar 3 11:01:12 2026 GMT
Subject: CN=886d661413a4453dad1793c2a7f93105dc0c16c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:3d:98:31:c7:ed:99:68:8e:67:6a:e2:50:
94:0e:2a:69:4b:67:bf:17:90:5c:9e:33:16:91:2b:
91:b7:ae:0a:d9:08:fc:02:94:4c:39:26:a1:2d:47:
0e:52:45:a2:97:3f:df:71:54:dd:15:c4:1d:f5:91:
87:78:54:48:21:5c:be:22:e6:3c:ec:8d:b6:c0:58:
0a:71:e8:1a:72:2a:24:a4:82:19:41:52:63:a8:79:
b6:31:0d:ba:61:1c:8d:42:e7:3d:f0:d2:eb:87:28:
fd:5c:e1:06:f6:4b:c7:b8:30:7e:b7:b1:52:e7:a6:
40:83:c6:73:d3:d1:43:b2:b9:c3:58:21:a6:56:bc:
70:8a:96:7b:62:b3:4d:6e:5f:df:7c:c7:90:38:64:
d4:88:de:85:ec:e1:98:c4:97:a0:fe:6e:34:42:6b:
a1:47:00:04:d3:e1:31:89:f1:29:b5:c3:9b:3b:f3:
ae:49:a7:3c:85:4b:3f:a6:0d:c3:73:c0:6e:79:9c:
68:67:28:10:0b:05:a3:b0:35:1c:f3:22:c0:d2:62:
35:82:2c:2f:d2:59:50:ed:6e:18:2a:e7:db:81:77:
cc:a1:b2:37:bc:48:e9:a1:50:8f:cb:46:bb:36:33:
6b:4e:0f:3f:d5:f2:21:27:49:17:28:d5:96:c6:6c:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6D:66:14:13:A4:45:3D:AD:17:93:C2:A7:F9:31:05:DC:0C:16:C2
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bc:60:3a:88:1c:f6:ac:f2:3b:1f:f8:2e:99:57:00:81:ec:
d5:9d:c7:19:8c:92:01:7c:c1:6b:9e:00:c8:b8:15:0d:59:3f:
f3:de:65:18:59:5c:2d:86:9b:05:bd:c2:a1:80:c1:f2:21:b6:
b4:2c:a7:43:7c:fe:14:80:ce:71:35:4c:4b:a3:94:ec:9e:e4:
d1:77:eb:86:fb:07:a4:73:4c:cc:2a:d1:db:ed:8e:28:d1:c5:
40:17:29:b9:c1:d8:4a:c1:98:65:c3:8d:51:a9:53:7f:aa:53:
ff:e0:e2:e5:60:7a:58:45:e1:91:e0:f9:16:d9:b1:60:0d:dd:
f5:d5:72:83:7c:be:c3:cb:fe:83:b7:f0:d3:bd:48:24:5c:05:
9e:8c:db:64:81:e5:fc:5c:25:3d:d5:3d:2d:26:b1:80:00:23:
82:4b:92:23:bd:19:82:29:c4:4e:93:40:fb:46:d5:d3:dd:93:
7d:f4:5f:ea:fb:78:32:e1:f1:46:de:36:f6:e8:b4:83:76:f1:
dd:0a:ae:80:5d:f3:59:b8:f6:9e:94:0c:a7:8c:2f:7b:ff:a1:
c4:fd:2b:f5:fe:49:a9:bb:3c:a7:15:80:c3:5f:3e:5a:10:0b:
f6:f3:c6:21:ca:86:d8:04:e1:81:49:2a:70:c4:ca:e2:90:33:
9d:95:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:11 2026 by rpki-client