Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: 9eqoHGdNV31847+hyaa3ygTcDnDxM8yPicH/+rjxk+M=
Subject key identifier: D5:83:DB:D0:11:4E:05:71:B1:B6:80:04:6D:15:0F:F6:A9:C6:E7:19
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 01A08AC310AF1125232A0C53EE0142CC169C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 1128
Signing time: Thu 10 Sep 2026 10:00:34 +0000
Manifest this update: Thu 10 Sep 2026 10:00:34 +0000
Manifest next update: Fri 11 Sep 2026 10:00:34 +0000
Files and hashes: 1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: 88Lbj1PeaCi5GHCjuzQhuMSUzs1IaDnTjisuq47FdwY=)
2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:10:af:11:25:23:2a:0c:53:ee:01:42:cc:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Sep 10 10:00:34 2026 GMT
Not After : Sep 11 10:00:34 2026 GMT
Subject: CN=d583dbd0114e0571b1b680046d150ff6a9c6e719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:36:0b:52:0e:b1:1b:0d:3e:ef:91:27:81:
96:cd:78:cb:b9:5f:57:57:43:a5:ae:5e:f1:b7:b7:
e4:8e:36:27:4d:57:a8:35:6c:03:d3:3a:e4:d7:79:
4f:f4:87:d3:15:9b:3b:89:22:15:f4:8a:e8:6e:6b:
ed:5a:86:5e:ce:3a:9a:cf:bd:cf:c1:e8:66:df:5e:
cd:35:60:60:d3:ce:44:2b:b9:21:17:c8:56:69:79:
38:20:cc:79:2d:b9:ad:b0:41:ba:83:15:a8:ab:a7:
ca:ca:30:a8:c7:06:73:75:f4:a1:dc:38:b9:26:46:
1e:88:7f:c8:53:05:88:ef:ac:bf:94:7f:4e:10:50:
9f:f5:a6:08:47:43:d5:40:a5:28:f7:06:7c:06:ff:
44:42:57:e5:8d:7d:a9:25:c2:e7:28:6d:01:aa:4b:
81:4b:28:4e:47:ec:1b:26:52:a1:93:e6:b2:d0:df:
fc:51:32:52:b4:96:8e:3f:2b:80:7e:5a:e1:2c:db:
87:57:4e:dd:de:7a:dc:78:94:ef:7f:f0:16:8a:23:
33:02:38:aa:47:4f:e9:cc:80:01:b0:ec:de:be:9d:
ee:a5:3e:4d:1b:72:36:cd:7d:67:3d:ae:75:34:bc:
ed:4c:70:ed:49:6d:67:57:e1:7b:e4:d0:e3:14:db:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:83:DB:D0:11:4E:05:71:B1:B6:80:04:6D:15:0F:F6:A9:C6:E7:19
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:32:61:60:2c:07:ad:6f:4b:2f:fc:4c:b3:de:f2:39:a6:ff:
22:6b:16:90:f5:d3:92:68:e9:ad:c9:0e:c1:14:89:12:aa:5f:
00:4e:03:64:3b:e4:f8:a4:ad:5c:31:70:8d:d4:3a:25:66:39:
78:54:ef:a3:ef:30:93:32:7b:5d:ea:f7:d2:69:25:dd:2e:22:
43:59:2b:e4:ac:b3:82:a4:ff:e4:81:17:4b:dd:ac:e0:95:db:
1a:dc:57:8b:3f:e9:9a:34:25:04:37:7a:48:b9:27:f2:ba:39:
21:f5:93:08:64:93:6a:65:3c:df:87:10:a7:bc:ea:87:b1:9e:
94:59:d1:fd:dd:85:68:0b:cf:f4:47:a9:65:13:46:c8:6a:6f:
eb:7c:21:78:51:1e:14:13:a3:13:86:2e:7e:e0:d2:52:c7:fe:
56:88:1c:46:97:86:19:a7:7e:4e:ad:f1:77:3e:33:7b:86:42:
83:68:f6:0b:c1:9e:b8:1b:bc:92:6c:ac:f3:e9:16:b5:23:6f:
dd:54:04:14:97:5d:d9:da:01:f5:c0:bb:52:7d:2f:90:cb:a8:
35:85:64:08:df:20:87:90:f9:cb:68:63:50:ab:ca:79:af:f1:
75:06:3c:8b:7f:5b:cd:49:65:02:74:c9:49:32:57:6c:be:0f:
e2:fa:6b:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKwxCvESUjKgxT7gFCzBacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjVmZTA1NWZiN2VkMDQzZDEwOTMwNzA0NWMwYWJkZjQw
NGQwNWQwHhcNMjYwOTEwMTAwMDM0WhcNMjYwOTExMTAwMDM0WjAzMTEwLwYDVQQD
EyhkNTgzZGJkMDExNGUwNTcxYjFiNjgwMDQ2ZDE1MGZmNmE5YzZlNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yY2C1IOsRsNPu+RJ4GWzXjLuV9X
V0Olrl7xt7fkjjYnTVeoNWwD0zrk13lP9IfTFZs7iSIV9IrobmvtWoZezjqaz73P
wehm317NNWBg085EK7khF8hWaXk4IMx5LbmtsEG6gxWoq6fKyjCoxwZzdfSh3Di5
JkYeiH/IUwWI76y/lH9OEFCf9aYIR0PVQKUo9wZ8Bv9EQlfljX2pJcLnKG0BqkuB
SyhOR+wbJlKhk+ay0N/8UTJStJaOPyuAflrhLNuHV07d3nrceJTvf/AWiiMzAjiq
R0/pzIABsOzevp3upT5NG3I2zX1nPa51NLztTHDtSW1nV+F75NDjFNumwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWD29ARTgVxsbaABG0VD/apxucZMB8GA1UdIwQY
MBaAFG1l/gVft+0EPRCTBwRcCr30BNBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAt
MWI3NDllOTgxMGI0LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAtMWI3NDllOTgxMGI0
LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzJhYCwH
rW9LL/xMs97yOab/ImsWkPXTkmjprckOwRSJEqpfAE4DZDvk+KStXDFwjdQ6JWY5
eFTvo+8wkzJ7Xer30mkl3S4iQ1kr5KyzgqT/5IEXS92s4JXbGtxXiz/pmjQlBDd6
SLkn8ro5IfWTCGSTamU834cQp7zqh7GelFnR/d2FaAvP9EepZRNGyGpv63wheFEe
FBOjE4YufuDSUsf+VogcRpeGGad+Tq3xdz4ze4ZCg2j2C8GeuBu8kmys8+kWtSNv
3VQEFJdd2doB9cC7Un0vkMuoNYVkCN8gh5D5y2hjUKvKea/xdQY8i39bzUllAnTJ
STJXbL4P4vprWg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:22:28 2026 by rpki-client