Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: XQ2UtXP3jk92gwQnZJvu/ht0TAzZxYBQpmfLzwQFXhM=
Subject key identifier: 6E:F1:A5:10:C3:41:0B:23:7B:92:64:DD:2C:DD:C7:3A:2A:2D:1B:DE
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019E314E1A042F2EA449379136B9F1EBA9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0B4F
Signing time: Sat 16 May 2026 15:01:02 +0000
Manifest this update: Sat 16 May 2026 15:01:02 +0000
Manifest next update: Sun 17 May 2026 15:01:02 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: +VK78zI62k/qTqbfaxuhRWsP28PXViRlGo5oFX9vwS0=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:1a:04:2f:2e:a4:49:37:91:36:b9:f1:eb:a9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: May 16 15:01:02 2026 GMT
Not After : May 17 15:01:02 2026 GMT
Subject: CN=6ef1a510c3410b237b9264dd2cddc73a2a2d1bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:1c:cd:0c:77:2b:97:d2:78:25:10:ca:54:
7a:0a:ff:26:e2:f7:14:5d:2d:f4:9e:af:01:01:28:
2c:c8:df:92:47:6c:3e:36:82:f3:65:cc:91:20:34:
0b:c4:2a:72:da:06:c1:a3:38:9b:f0:96:02:d6:da:
63:13:c1:94:c2:ae:27:a9:a9:3e:50:59:0f:7c:8b:
0f:5a:4b:e2:3c:bd:f4:0a:c5:67:21:75:dd:0f:0a:
85:05:b3:93:5d:ad:5f:5d:41:18:53:a7:24:d7:f9:
97:b5:ba:ec:53:ce:88:6d:2d:c8:ba:1f:4f:66:a7:
8c:41:6d:04:1c:35:70:84:6c:01:34:06:ad:66:69:
6f:d3:b1:56:7c:e1:24:e0:6d:c2:8c:81:80:b5:14:
b4:4c:11:23:1f:11:52:56:4c:20:2d:16:4c:26:52:
a8:10:94:ee:1b:9a:f0:3c:0d:e7:49:fd:00:51:42:
be:c5:62:83:83:e6:d3:db:98:34:fe:90:4b:aa:ed:
92:b0:f1:80:55:d9:2e:26:24:3b:37:eb:27:49:8b:
25:5a:06:63:f4:88:9c:19:dc:ec:58:29:9e:30:ad:
07:7d:e3:97:1a:93:53:d2:76:0b:9f:e6:b9:05:5e:
3f:98:c8:f8:59:18:c2:14:7e:07:56:5b:2f:d5:80:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F1:A5:10:C3:41:0B:23:7B:92:64:DD:2C:DD:C7:3A:2A:2D:1B:DE
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:53:78:3d:2a:fa:38:60:34:d3:3d:53:0d:35:d7:cc:a6:a2:
3f:aa:14:46:6c:ba:cd:fa:81:14:00:21:00:d3:0b:00:a7:7f:
2e:31:5b:b4:ab:ea:d0:71:00:e1:50:70:5a:4f:d4:93:35:3e:
e7:6a:ad:3b:80:4e:a3:86:02:b4:72:9f:9a:22:76:b6:24:a8:
86:4c:c7:86:5d:0f:31:7c:3a:4d:6e:e1:72:a5:cb:2e:92:05:
77:f3:5c:d4:68:c3:4f:37:20:ba:4d:43:bd:63:f5:bb:c9:1d:
a1:84:90:67:5b:f1:38:9f:9e:61:a9:0b:07:08:23:69:8c:d2:
9a:b3:e8:d2:6d:b9:53:86:6e:ea:64:61:e8:24:d7:98:a1:44:
b5:4b:fd:54:0b:4a:eb:38:2b:a5:82:36:ff:80:d6:59:81:70:
b7:2e:8e:12:6b:db:0e:41:ea:af:2f:15:81:ec:05:1a:42:07:
40:06:4d:66:ef:2d:9e:86:97:8e:5f:38:7a:6a:39:0b:5a:97:
96:5b:f9:f6:f3:07:a3:79:58:22:5b:e2:19:1a:17:d6:18:6e:
86:1d:4c:74:b5:55:cd:17:15:5c:97:fb:65:ce:1a:57:9a:35:
cd:f6:6e:f4:c9:d4:02:1e:03:c7:38:3c:27:7a:c9:9a:c9:4d:
e9:86:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:16 2026 by rpki-client