Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: Fjp2JRvfkXiLdKjLr0RHSsVop1r3y6Rbb+njVMOU4jo=
Subject key identifier: 82:AB:37:11:7D:18:92:AA:89:E9:E4:15:DD:01:DA:41:BA:89:2F:EF
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 01A1660F853FC9240872FF3CE5B3A172D34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0CF8
Signing time: Fri 23 Oct 2026 00:00:55 +0000
Manifest this update: Fri 23 Oct 2026 00:00:55 +0000
Manifest next update: Sat 24 Oct 2026 00:00:55 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: 6mVD5S13EHvhyqzjRQw9sR1BzCvWdW5VkO7o5JW4PMg=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:0f:85:3f:c9:24:08:72:ff:3c:e5:b3:a1:72:d3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Oct 23 00:00:55 2026 GMT
Not After : Oct 24 00:00:55 2026 GMT
Subject: CN=82ab37117d1892aa89e9e415dd01da41ba892fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:aa:82:21:cc:be:91:dc:d6:0d:ac:8a:0b:
c8:cd:1c:fa:49:0d:61:e3:3f:60:77:83:4e:67:55:
da:a1:db:7e:35:d5:4a:db:56:7b:d6:c9:bc:24:06:
38:27:0a:5c:7c:be:f3:e1:61:a4:78:4f:58:6e:dc:
b8:f3:b5:50:e8:46:54:0a:96:a3:68:54:07:3c:3e:
65:69:5d:2d:86:f9:fd:15:84:21:3c:e5:fb:7f:ca:
b3:b5:f3:54:a6:e1:4d:f6:56:0b:8a:af:cc:ad:b1:
6e:d6:ac:b3:9d:b3:14:b2:62:3a:89:b4:33:91:4b:
55:2b:9b:d8:4b:a7:64:e7:07:25:ae:72:9c:22:1f:
77:03:7e:af:ff:47:4a:6b:e0:ba:58:2d:7e:7a:85:
70:93:74:2e:f7:bd:ff:85:93:48:0b:0d:26:95:d7:
55:5e:e8:66:31:8c:3b:03:7c:b1:c1:98:dc:96:cf:
d3:bb:69:e7:5b:4f:d0:0e:9b:87:34:03:c6:45:29:
ea:37:94:35:c6:c7:8a:77:bb:b6:8e:83:4c:ac:e0:
8b:d8:37:88:ef:a6:2d:9a:79:cf:8d:0b:b9:ca:ea:
cd:ba:4c:04:f9:58:c7:b5:9a:af:07:ec:ad:56:3b:
75:49:1a:00:0f:89:b6:4b:94:1d:77:22:15:5a:47:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AB:37:11:7D:18:92:AA:89:E9:E4:15:DD:01:DA:41:BA:89:2F:EF
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9f:1e:7d:f2:da:d2:4c:83:5f:7a:43:be:46:74:53:d2:f0:
ed:ef:36:60:93:2d:2f:6a:38:81:6f:77:ed:4c:77:39:5d:b1:
7d:e9:fa:ee:40:74:bf:fd:e5:f2:18:3e:64:bc:d7:00:cd:c7:
79:9b:e2:2c:92:e0:10:1a:34:66:19:d8:8e:59:1e:ac:fd:53:
88:d4:a7:c2:c5:21:00:32:d1:02:6b:3e:46:8f:b0:3e:b8:61:
3c:f6:be:46:71:76:b6:4d:e5:98:d6:2b:df:9d:1e:39:3f:6a:
57:d4:8d:1c:98:65:56:2a:5e:44:9c:f0:20:c9:3e:f7:3f:f8:
11:46:0d:7f:33:ef:c4:2f:46:2b:85:3d:88:78:05:f6:87:fb:
00:96:5d:7e:9f:32:1f:61:18:4e:c0:9a:e6:ff:54:3b:b1:7e:
85:5e:10:bf:a9:a5:70:93:49:3d:89:ba:cb:bd:94:7b:3c:79:
8d:e9:3f:29:1a:87:40:1c:a4:84:ea:88:90:de:5c:08:a1:8e:
34:c1:a2:a9:c9:fa:f2:f5:0b:fb:9b:1e:48:75:66:6f:fd:35:
a3:b9:1a:1a:df:17:2d:74:3f:fb:b8:e0:aa:48:77:24:0b:75:
a7:59:a7:70:d7:1c:cf:34:f6:72:46:67:a6:68:97:83:54:47:
56:f8:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:09:59 2026 by rpki-client