Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: hk2/mFohrvkfYcPzAH3GbcIEb68vAD9sokT6CjMAmzk=
Subject key identifier: A2:75:84:34:74:77:DF:EF:12:CE:FE:20:32:C0:6B:14:C4:4F:B2:F1
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 01A1758269D791E8F11537D614736E9B2102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0D00
Signing time: Mon 26 Oct 2026 00:00:43 +0000
Manifest this update: Mon 26 Oct 2026 00:00:43 +0000
Manifest next update: Tue 27 Oct 2026 00:00:43 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: v0PjJ1TW7YLZ81C1zP31vDZyWicQIjW6yXw4Jer7DRM=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:69:d7:91:e8:f1:15:37:d6:14:73:6e:9b:21:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Oct 26 00:00:43 2026 GMT
Not After : Oct 27 00:00:43 2026 GMT
Subject: CN=a27584347477dfef12cefe2032c06b14c44fb2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:1c:ba:ee:0b:fa:73:5d:6c:17:de:50:77:
82:30:18:27:58:57:5c:a1:32:4c:46:55:80:85:d8:
ef:cd:31:b7:7b:61:f4:b0:ee:98:01:c7:78:a9:d5:
3e:f8:a2:e4:38:07:cc:dc:4e:32:d8:1a:d2:6a:e5:
89:55:5c:69:a6:61:a3:b5:00:ac:d6:f9:5a:d3:d7:
62:4a:92:4c:55:9c:95:78:0a:0d:1d:a7:4f:07:64:
14:e9:a7:23:58:e6:90:97:c7:2c:0c:80:28:a7:e6:
0b:c3:55:b6:a8:39:7f:75:4b:52:cd:e8:10:04:b8:
63:27:12:c6:e4:f7:22:6d:20:de:12:f9:6f:29:93:
f3:2b:fc:53:61:14:4f:df:19:09:a2:92:bd:64:b6:
8e:73:2c:5b:59:bf:4c:c1:06:86:ae:13:87:ad:60:
52:93:bc:b5:c4:05:bc:3c:09:1c:89:1d:ae:08:9c:
58:72:b4:60:80:9b:f7:a2:d5:80:70:c2:3c:66:ea:
83:55:6d:66:3a:ec:97:ba:3d:6a:58:23:8e:8a:6e:
f6:e4:e1:dc:05:98:a3:81:4d:0b:6e:5b:55:49:c2:
20:cf:9c:01:28:88:af:08:e9:c3:ce:02:74:10:0d:
d1:37:a2:44:b5:50:82:d2:22:f3:5f:e4:0f:ee:39:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:84:34:74:77:DF:EF:12:CE:FE:20:32:C0:6B:14:C4:4F:B2:F1
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:26:60:93:26:83:1d:10:ae:58:09:1c:4d:75:ec:49:db:25:
18:87:55:23:c2:09:0d:53:de:f4:f9:3e:62:75:d9:5f:64:2f:
7f:b1:9c:ce:04:2c:eb:fd:4b:0e:cd:35:f0:32:13:91:40:7f:
9f:8b:79:ce:62:d2:a6:3a:bb:bd:65:e6:a4:3e:48:30:21:e1:
32:77:c6:67:0a:47:7d:b9:e1:84:c6:f9:0d:d4:87:8e:e1:d0:
c8:42:cf:59:29:30:34:48:f9:89:1b:86:63:f1:6c:41:0a:6c:
ea:52:c0:69:e0:e7:51:6f:50:5c:f9:85:1c:0c:3b:d8:47:dc:
62:f1:0d:80:38:05:08:85:4d:98:36:ed:4f:cc:a3:3b:55:2c:
72:88:30:34:f3:bf:87:65:a3:41:2d:50:d6:65:70:0b:50:87:
b8:bb:4b:c6:84:0b:43:7e:6a:2b:c0:f7:1b:d6:42:6f:29:e7:
dd:e7:20:2e:e2:97:87:47:93:d4:a5:c8:fc:aa:af:4b:49:b4:
4f:a7:c4:fd:a3:57:c0:cd:7e:97:7f:85:98:ae:3d:b4:d3:56:
5c:4d:92:d0:ba:b2:e2:58:12:e4:04:e0:cd:43:d9:56:94:06:
07:90:f9:d2:9a:d5:47:07:2f:47:0f:b1:e1:15:2f:7a:c0:d3:
3d:aa:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:28:21 2026 by rpki-client