Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: LlHjsj6vRrwv+21VU9RXrTHfy+Labgb44i0d6PM/bw8=
Subject key identifier: 44:42:C8:DD:7F:23:B5:6D:DE:E3:D0:FC:55:89:68:BE:B1:BC:1E:4E
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 019D38662F56AE33DB1734D33AC11DD4CEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 0B4E
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: E7BVO0rWO2KlrwaB7aNAAZ6sagxUCpdQaBL/cASzzmc=)
2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2f:56:ae:33:db:17:34:d3:3a:c1:1d:d4:ce:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=4442c8dd7f23b56ddee3d0fc558968beb1bc1e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:d5:59:c6:2c:52:09:da:6d:7b:a5:a2:df:
ac:02:5f:31:e7:1c:72:5d:94:5a:c7:34:93:74:a2:
8e:6e:76:52:c0:f4:96:c6:11:cd:46:c3:39:22:15:
01:bb:6d:dc:86:e1:c5:33:d4:0a:73:47:5e:e6:c1:
28:6d:09:4f:9a:9f:8f:cc:c7:f8:9e:45:9f:fd:ed:
d1:2a:75:6e:08:a9:38:31:01:b2:89:53:ef:da:f8:
59:8e:52:1b:97:03:9b:86:0a:71:aa:9f:4b:67:8d:
bb:bc:a0:b3:c7:12:10:2e:22:6b:db:1e:1f:94:bd:
ae:f9:2e:b1:33:22:83:33:4a:a5:e8:2f:03:37:c4:
0c:86:a5:70:5e:8d:17:d9:00:1a:84:91:b6:df:88:
27:af:0f:56:4d:4c:21:1e:b3:4d:0e:5c:85:b8:3b:
ef:8b:c8:9e:37:53:57:ec:2d:38:d7:9a:73:1b:27:
41:19:74:47:69:12:7f:1d:c8:42:55:34:9d:9e:27:
bc:52:19:61:44:9a:dd:d0:9b:9c:e2:e7:0d:07:63:
2e:61:14:5d:f9:20:82:3a:bc:7c:74:a2:e6:b4:5b:
8f:37:88:f1:e0:fc:f9:c0:7f:30:c0:01:90:b7:d7:
8e:6a:e3:97:80:57:e4:54:da:1e:08:63:03:b9:37:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:42:C8:DD:7F:23:B5:6D:DE:E3:D0:FC:55:89:68:BE:B1:BC:1E:4E
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:77:01:0d:d9:9b:b5:15:1f:9e:c1:be:c5:43:d3:83:3b:6e:
9a:9c:23:f8:9d:7f:95:2b:27:3c:21:eb:d0:75:a9:54:de:38:
07:b6:cf:00:e2:11:34:5b:df:0c:12:46:f3:9a:cb:94:b5:ed:
79:3f:ce:ae:1f:e1:0b:6d:e4:46:f2:9d:4f:1e:a4:37:1d:43:
39:8e:63:06:47:0d:e7:a2:92:88:e1:61:fb:a0:7f:b7:21:85:
73:96:1f:9b:fb:f4:7e:71:6b:b4:3e:07:68:b2:38:bb:95:d0:
ae:72:cd:d9:52:8d:32:6d:f7:bf:36:b1:7a:bc:f0:f3:ef:7f:
d1:1b:03:bf:3f:49:38:d7:e7:02:a1:b3:13:ab:9a:c7:bb:39:
2e:f7:bc:1f:4e:86:fa:05:3c:2b:03:78:04:4d:ce:b3:51:8e:
1d:30:e9:bc:46:d4:fa:b1:1d:93:aa:6e:72:d5:97:ad:2d:58:
a4:7a:87:a3:e2:5b:fb:b0:b4:30:62:a3:03:45:cd:e1:83:86:
df:ef:4f:78:9d:b0:cb:77:61:33:30:5c:de:b4:2f:75:41:d9:
9f:3f:c4:de:da:e7:2f:be:ce:47:99:91:49:7b:63:28:fd:18:
66:db:41:f2:be:97:84:46:30:8b:ee:68:fe:35:aa:69:40:1d:
10:ac:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:15 2026 by rpki-client