Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: Xx4+oXzIR1BKK95o9jZ5lajvDqJy7NLsxwMZFHrSMN4=
Subject key identifier: 64:86:69:A6:4D:8D:18:E8:33:F7:E1:76:69:E2:4C:BD:B0:3F:60:F8
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019D3A1D0B47EF08D81359F2517FEAC3AD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0ACF
Signing time: Sun 29 Mar 2026 15:01:15 +0000
Manifest this update: Sun 29 Mar 2026 15:01:15 +0000
Manifest next update: Mon 30 Mar 2026 15:01:15 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: HsNsjYrt1Xtr3fEo3TSmP/oEOH2OZXzU09fe8B3Gcgc=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:0b:47:ef:08:d8:13:59:f2:51:7f:ea:c3:ad:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Mar 29 15:01:15 2026 GMT
Not After : Mar 30 15:01:15 2026 GMT
Subject: CN=648669a64d8d18e833f7e17669e24cbdb03f60f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:49:ed:39:cc:44:47:af:4b:e0:bb:67:73:
24:cf:6a:28:eb:fd:a4:95:92:b8:e4:e0:16:df:c1:
a0:7b:89:67:01:d9:7d:8a:b0:ac:f0:7c:4b:08:69:
dc:86:2f:75:ab:f5:46:cb:6a:fd:fc:a2:39:97:32:
37:ed:68:3c:9f:0c:d4:d7:6c:ea:75:84:6e:de:6c:
c7:39:b2:b3:1b:b5:c5:08:04:6d:cc:cd:af:38:a3:
c6:2b:35:39:3b:50:de:79:8b:41:92:ae:54:a3:73:
89:73:46:43:f3:02:3f:5e:05:44:d4:56:b5:2b:0e:
02:98:be:e4:a5:01:9e:c7:88:fb:2f:7e:4d:f1:4e:
80:df:97:34:4f:1d:f6:a5:78:28:47:e5:75:cb:04:
83:6e:b3:44:53:16:60:6a:43:86:1e:03:a2:ea:36:
a6:6e:28:5b:85:1d:5a:79:e9:bf:e0:60:22:27:b4:
89:d6:33:94:a1:7c:eb:bc:71:1d:32:6d:c7:79:33:
85:8c:29:c3:ea:71:ab:d8:0b:46:51:e1:23:55:61:
51:5a:d6:56:54:b8:3c:5b:0f:7c:20:f2:54:08:77:
a8:3f:ba:e2:d4:aa:5b:fa:ed:b8:37:6d:34:ad:c9:
9f:0c:da:e1:bd:c4:0e:fd:48:90:4f:8c:b5:40:99:
0d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:86:69:A6:4D:8D:18:E8:33:F7:E1:76:69:E2:4C:BD:B0:3F:60:F8
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:aa:7e:38:71:e7:86:f4:39:5d:fa:c0:b9:ee:bb:33:07:92:
02:c8:34:92:db:2b:e8:7d:b5:35:73:a3:0e:be:dd:8e:fe:e5:
fc:2f:66:ec:9f:5d:df:3d:44:5e:44:bf:04:0f:f1:f3:fb:33:
01:45:7b:ba:09:eb:a0:4e:61:ec:07:71:21:c4:7d:bd:ea:b1:
89:09:e6:a1:da:43:05:4b:f7:48:ec:15:85:c8:59:9e:90:6d:
9d:f9:36:5d:a0:6c:47:7b:23:7a:01:85:aa:34:79:de:5a:6d:
45:26:50:18:8e:48:d9:cd:d7:01:5f:7a:58:28:ae:15:71:d0:
8a:0f:79:85:2e:8b:fb:7e:cc:53:82:91:73:5e:ef:c9:70:b5:
c4:28:6e:d5:d1:8a:23:dd:bb:67:50:ba:2b:4d:56:b8:29:8d:
7a:0c:c6:0b:20:6c:8e:53:e9:ae:48:d0:93:18:22:11:01:6f:
c1:e9:ba:af:61:5e:f5:0f:ae:93:2d:ea:93:33:98:40:f3:65:
34:07:b4:73:f3:d5:1d:31:54:fd:80:ed:fc:5d:79:80:12:ec:
2a:af:19:44:bc:2d:94:59:ff:0b:a5:35:e7:2c:b3:bf:d2:c3:
e0:b3:24:23:80:eb:1d:c7:b8:1c:88:0c:9d:1d:31:9d:5b:d6:
b2:25:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:33 2026 by rpki-client