Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier: ozUeimbvjPATO2JoSjjUytbI9+jKUfC7u8t0cI2npPU=
Subject key identifier: FD:04:52:C7:F7:2A:28:A3:9E:D5:DC:2E:20:02:08:86:16:CB:D1:58
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 019CAC46ABB3E469B3275A67786AA0083D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number: 17A0
Signing time: Mon 02 Mar 2026 02:00:38 +0000
Manifest this update: Mon 02 Mar 2026 02:00:38 +0000
Manifest next update: Tue 03 Mar 2026 02:00:38 +0000
Files and hashes: 1: 06gNA3LV7YBXuhA1rKiMTeDxRoA.roa (hash: d9wHD1t/r/V+XScUKTAXojVgXFDnOgiwl/ANGl0ElHU=)
2: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: 9lSN+Iq0uOHILGQJ4x3C6aPr5BOjphL45YyiXaEAqm4=)
3: p_w8TFQKrPjZFeqKHXZkgHKF9Tc.roa (hash: tr6X6XVYM4REThJ5QdRO15I8HLm0u1bXqwDznTVnWXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ab:b3:e4:69:b3:27:5a:67:78:6a:a0:08:3d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Mar 2 02:00:38 2026 GMT
Not After : Mar 3 02:00:38 2026 GMT
Subject: CN=fd0452c7f72a28a39ed5dc2e2002088616cbd158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:0e:10:f4:97:06:62:81:e9:42:35:7f:78:
3e:8c:1e:07:d4:6b:6a:ec:fb:5d:e4:46:f5:3e:32:
ed:3c:7d:5b:25:56:84:22:a8:a3:a1:a4:50:8e:23:
e3:60:73:87:a3:37:09:af:d7:1f:59:13:39:11:a0:
7e:6d:67:34:22:15:51:9b:e8:8a:31:b5:19:93:9f:
fb:4f:f4:8c:21:b2:c8:f3:37:9b:db:4d:10:e3:ad:
91:e9:e5:4f:21:b4:26:0f:20:9b:85:ac:92:9b:b3:
9b:a4:aa:55:61:d4:34:77:1e:02:b1:83:05:92:73:
2e:10:55:11:df:b0:02:79:21:a9:5a:b3:a8:32:2f:
3d:96:0f:77:e9:de:d8:0b:10:d2:ee:63:ea:64:17:
33:aa:2d:b8:96:d3:5b:5e:59:1c:28:80:91:0c:49:
82:21:0a:df:82:3d:12:8c:c2:cd:fb:ef:9a:8a:b7:
6c:4f:91:13:bb:b2:a6:31:9a:90:48:b9:e4:7e:5a:
cb:a2:72:7b:c3:44:90:da:28:c2:55:11:b1:9d:88:
c8:ee:2c:d6:40:31:3c:40:74:08:a9:69:cc:99:b0:
dd:6e:31:f2:4f:31:30:21:96:27:c9:dd:a7:d8:ef:
62:2d:8a:c5:83:91:0f:6e:50:8b:6f:2e:f2:63:47:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:04:52:C7:F7:2A:28:A3:9E:D5:DC:2E:20:02:08:86:16:CB:D1:58
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:50:77:46:bc:f2:eb:39:29:78:8d:3a:2f:b6:07:70:21:ee:
34:27:18:25:f6:82:92:d7:a0:33:0b:db:23:b6:06:5d:c1:02:
9b:5b:d3:92:37:e5:19:d6:67:79:c1:a0:ee:b2:57:ac:ab:c9:
fb:32:ed:9d:99:0f:9b:3b:2b:ad:94:1b:9a:e2:6a:35:ff:44:
00:32:cc:7b:76:a6:e2:5c:2d:fa:03:ac:19:bf:1c:9a:9c:95:
3b:92:be:af:bb:03:6f:69:b7:cc:a8:c7:92:a8:61:15:10:ce:
2f:a2:8b:52:d8:b0:b6:d5:0f:64:d0:a7:57:b6:8b:61:83:bf:
d3:89:08:c3:b2:d6:45:07:f6:50:ea:c8:52:bd:a9:2c:63:74:
69:5f:36:af:0d:35:b5:28:8d:bc:d0:b9:4e:19:31:67:94:1c:
d5:87:16:07:ae:d9:d7:28:4c:a1:04:90:6c:1b:f8:bf:c6:e8:
45:40:5b:ba:6a:e3:73:ee:cf:2c:cf:4d:4a:93:e4:85:48:b3:
cd:94:25:a8:86:e3:de:fb:5f:19:03:4d:5a:3f:5c:b4:83:61:
c2:7a:ca:76:3e:f9:c1:5d:b9:d5:76:f0:36:2d:37:4a:ae:12:
37:87:3d:d5:76:e8:7b:50:98:ff:27:2e:3c:ce:00:f3:90:bf:
f8:cb:90:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:29 2026 by rpki-client