Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: RMsou1ATxugOZODrrRvru1ztX7ROjtvbSQw2xLxtjyU=
Subject key identifier: 3B:E2:25:3E:B0:BA:D3:2A:D6:34:09:65:F8:A2:A6:99:17:BB:9F:B8
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 01A06EDE917D699BF9719912AF98374FBC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0C78
Signing time: Sat 05 Sep 2026 00:01:14 +0000
Manifest this update: Sat 05 Sep 2026 00:01:14 +0000
Manifest next update: Sun 06 Sep 2026 00:01:14 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: lUEGWnLXfIocnM692z/IkQbd/VddPQhy1QV8PRPugac=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:91:7d:69:9b:f9:71:99:12:af:98:37:4f:bc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Sep 5 00:01:14 2026 GMT
Not After : Sep 6 00:01:14 2026 GMT
Subject: CN=3be2253eb0bad32ad6340965f8a2a69917bb9fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:7a:df:39:26:5d:6a:8e:21:be:73:f8:0b:
7f:64:86:4d:05:b3:dd:d5:48:1c:9e:be:9e:ee:53:
6a:97:aa:2b:42:67:80:a0:a3:fd:f2:1b:0f:33:d4:
71:48:53:16:d9:dc:d1:6d:aa:2d:04:1e:8e:03:e6:
10:6e:57:d9:84:9a:e4:10:e1:06:8f:53:6d:bd:57:
94:06:42:73:55:2a:33:87:6b:5e:9c:5d:1c:d3:57:
f3:5c:6e:ee:a4:70:75:cd:4c:b8:1d:7e:ad:c7:81:
a7:ba:15:6d:63:cf:35:ff:c2:e3:8c:c4:4e:5b:6b:
17:13:7a:eb:bc:51:4c:a6:5f:70:15:dc:b1:81:5f:
80:c2:45:58:8d:b9:5f:b6:db:1e:93:c4:b9:81:c9:
ad:67:a7:fa:b4:b1:c9:fe:a6:de:13:55:f7:cc:b6:
5d:ec:89:b4:d4:5a:b6:b4:e2:da:2c:f1:b0:ab:cb:
fd:03:61:a4:30:a6:e2:3d:27:31:47:ca:71:b3:04:
88:c0:24:c7:9e:59:cd:87:c3:d8:ff:a1:b5:d9:99:
ca:b9:14:36:76:12:3a:19:47:c9:2b:1b:5d:a1:18:
8a:85:87:77:54:f2:aa:8e:4a:17:4f:4c:62:94:ff:
f9:76:c7:84:c8:b8:07:9e:10:7b:e8:81:d8:6d:64:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:25:3E:B0:BA:D3:2A:D6:34:09:65:F8:A2:A6:99:17:BB:9F:B8
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e2:cf:06:5b:3d:3a:b0:b8:62:06:5e:69:cf:3d:67:3c:f6:
26:eb:c1:bd:1d:7e:50:d9:6e:03:15:d8:f4:1a:d7:62:ce:94:
b7:77:3b:c3:4c:29:a9:81:f2:53:13:78:9e:aa:6e:9f:3e:d3:
b2:e4:32:b1:ac:a9:17:35:5b:a3:10:8e:d8:d6:5b:ea:69:db:
54:9d:46:6a:b7:e7:11:c9:4c:ab:5c:7d:8a:02:04:b3:3a:e5:
a6:8a:12:d5:2c:e0:c5:cf:8d:33:75:ad:0a:89:e5:25:6a:d8:
51:f5:7b:99:fd:b6:ab:86:1d:5a:5a:d9:38:34:2d:9c:b3:76:
11:82:ae:8d:91:20:cf:ee:16:b2:39:c8:31:c5:1e:c3:e6:00:
0c:0a:88:50:37:f2:e7:f7:8f:9f:47:97:1b:c7:5e:cc:30:d6:
01:42:41:ac:66:0b:9e:d3:10:e5:37:50:84:84:d2:42:38:57:
e1:5a:b6:f7:4a:af:39:95:63:71:aa:64:c2:c8:cf:06:1e:5a:
dd:5d:81:39:31:93:78:f1:9e:0a:3a:68:9c:53:be:1d:2d:09:
76:d5:fa:b8:53:35:cb:17:b8:18:38:03:ff:6a:ba:3b:74:57:
2e:8e:3b:98:57:f0:8e:3a:64:0e:52:fc:8a:8d:27:fd:87:5c:
76:86:9d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:34:07 2026 by rpki-client