Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: O/r+KUE1dhRgoLFOgY5GaYNMmkVosQP6T3678NnB7to=
Subject key identifier: EA:74:BD:E2:22:5F:2A:5B:5B:81:3A:94:ED:BA:D0:A0:C8:41:42:F4
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 01A010AB947CD982242D7114E0A8D079890A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 127C
Signing time: Mon 17 Aug 2026 17:01:15 +0000
Manifest this update: Mon 17 Aug 2026 17:01:15 +0000
Manifest next update: Tue 18 Aug 2026 17:01:15 +0000
Files and hashes: 1: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: vM9sDs85BbMBxh2Aa5BG+nTo3mJhnq9JSm89a436pws=)
2: egKdfoe4jr_OcoA2zw7t88jvhNw.roa (hash: Rm9ZrDiXC3MyZptxhCKpvW8pxI8d9wrZAzUEIDnaY8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:ab:94:7c:d9:82:24:2d:71:14:e0:a8:d0:79:89:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Aug 17 17:01:15 2026 GMT
Not After : Aug 18 17:01:15 2026 GMT
Subject: CN=ea74bde2225f2a5b5b813a94edbad0a0c84142f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:22:68:d4:31:f9:72:b5:76:6d:5f:5b:f8:
5e:91:2a:46:db:e7:8c:63:3e:0d:eb:e5:27:e5:f6:
36:75:d5:b6:b2:ee:90:0b:74:66:42:c2:82:83:b2:
d9:5e:7a:2d:0e:a8:51:fe:ec:e8:ac:a8:4e:3b:35:
8f:28:74:27:88:09:47:b2:40:01:67:57:07:a8:fd:
4e:c1:4e:d5:af:0d:55:51:88:c0:5a:13:83:3a:db:
12:d4:5b:6c:39:6e:00:78:0d:d6:4d:c3:10:ba:4c:
69:1d:5c:0a:b5:d0:a7:6b:46:91:e7:99:89:0a:c8:
bb:b2:3d:4e:26:ec:8e:71:74:b0:e8:b3:a5:ab:8e:
c3:cb:72:df:72:11:95:50:a3:fd:82:7c:e6:5c:69:
48:3e:f9:ad:72:ca:ad:13:ca:0b:65:15:a8:ac:3a:
31:24:d9:e3:56:1b:3d:59:8c:c9:07:ae:61:92:81:
eb:00:f1:06:19:f2:c6:9d:c5:0b:42:dc:2e:88:86:
f9:36:de:44:a6:79:e5:bb:cb:e4:79:68:41:2f:c9:
11:81:4d:f1:97:29:af:06:df:6f:af:ea:48:de:5c:
d9:6e:59:ef:58:cb:4e:1d:cf:a6:1d:94:5f:84:00:
74:ab:96:cc:f6:ee:6c:9b:34:ae:ae:6a:b8:73:04:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:74:BD:E2:22:5F:2A:5B:5B:81:3A:94:ED:BA:D0:A0:C8:41:42:F4
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:41:2e:5e:a1:35:25:c5:07:b6:5c:81:d5:a7:14:49:4c:dc:
a7:2e:eb:b0:e7:dc:92:69:c3:b7:74:19:cb:25:8d:15:e9:e7:
5e:09:ab:13:95:57:71:45:d2:ee:72:92:ad:98:01:19:b0:b9:
d8:be:7c:e2:e3:4f:5a:c2:fa:f7:9d:89:fe:f6:ec:4e:41:1f:
54:4d:42:7b:b6:7f:c8:7e:f6:bb:ed:2f:19:e9:a4:4a:ce:06:
75:80:44:b6:cb:2e:56:17:8e:fc:fd:cc:e6:d6:f3:f0:b3:c3:
cf:f9:fa:8f:c1:d8:68:10:eb:e5:53:28:03:43:df:e0:c6:1d:
76:22:d4:f5:4a:6b:29:dc:f6:89:de:98:2f:d6:5f:b3:fb:2d:
cf:8d:1b:8c:4b:a5:96:bd:fe:55:b7:5e:fe:e4:05:6e:ac:41:
10:d5:1c:35:2b:ad:ed:28:e0:17:f9:de:14:c1:d6:c0:17:87:
9e:0c:65:0f:7b:df:a7:96:98:46:7a:6c:a6:f0:bf:05:bf:91:
72:95:e5:8b:4d:df:a3:7f:d2:6c:54:90:a1:7d:5f:64:e8:9b:
12:7e:0b:6d:96:9c:a0:cd:a3:d8:b1:20:40:4a:bf:63:26:1b:
b7:28:48:84:3f:15:4c:85:0e:72:6c:db:9e:1c:cc:b6:80:72:
60:98:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:14:53 2026 by rpki-client