Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: omMMzj3GNvYtVNJhmPeqmUCPdMsTv1m63WqeacmuB6w=
Subject key identifier: DF:B0:29:80:9C:61:31:CB:46:C9:AE:0C:9F:C6:40:09:A8:64:0C:42
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019DCDBD64C7A6B8913D21DFDA373461A0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0FBD
Signing time: Mon 27 Apr 2026 07:00:34 +0000
Manifest this update: Mon 27 Apr 2026 07:00:34 +0000
Manifest next update: Tue 28 Apr 2026 07:00:34 +0000
Files and hashes: 1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: +ps57kbfaMZu/i1ntFDvjYuNRYJCoeh0tDslchbWtxw=)
2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:64:c7:a6:b8:91:3d:21:df:da:37:34:61:a0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Apr 27 07:00:34 2026 GMT
Not After : Apr 28 07:00:34 2026 GMT
Subject: CN=dfb029809c6131cb46c9ae0c9fc64009a8640c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:11:d3:ad:a4:71:51:31:a0:76:b4:b1:65:
a5:12:11:04:d7:05:bc:62:73:1f:7c:68:62:af:07:
13:02:27:ad:aa:21:21:ab:6f:a3:4d:dd:5e:6d:c9:
46:26:c1:8a:e9:d1:76:06:4a:26:c8:29:9e:02:de:
ab:42:db:61:39:d1:20:cc:40:82:da:3b:6f:7a:fb:
3d:44:6a:a1:5a:71:c9:53:37:c5:ad:22:c0:4e:96:
19:84:05:27:b9:04:a1:98:b5:bd:ae:16:5d:0a:55:
ce:fa:10:c3:6c:79:cf:65:23:6b:cb:05:65:03:14:
01:eb:d8:f6:59:e2:4d:b1:d1:b7:65:02:cb:ae:06:
65:40:c1:18:30:23:dc:2a:4b:5d:bf:d8:84:fd:b1:
04:c8:00:9c:7b:5b:28:79:17:e1:d2:f8:c6:fe:c4:
1a:e2:1d:40:6c:5a:45:cd:5a:bb:20:6d:24:76:04:
c8:4b:6c:c3:d0:1d:3e:e1:4f:dc:ba:67:dd:cb:db:
8c:74:52:03:cb:84:ce:bc:e6:ea:c6:33:44:3e:aa:
68:41:e4:41:f8:fa:fa:65:44:8d:41:e4:34:16:9d:
ec:a9:dc:2d:f3:37:d8:40:92:24:35:2d:d3:6d:93:
7b:63:dc:18:93:25:df:fd:a4:29:df:6b:f3:a0:2c:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B0:29:80:9C:61:31:CB:46:C9:AE:0C:9F:C6:40:09:A8:64:0C:42
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3b:14:c7:98:0b:c8:f6:fc:89:1c:1c:0d:e1:0b:db:5d:8d:
52:2f:58:4c:b0:d0:60:20:59:4c:b4:f4:47:56:4e:e1:53:91:
62:7a:3f:7a:bb:73:f9:14:e7:69:ba:a9:aa:99:23:34:04:f4:
6e:bf:7e:25:e9:e9:df:93:8e:07:b1:29:83:5d:e1:46:46:a0:
4b:ec:f8:d6:a0:9d:24:95:8c:1d:bd:84:56:72:52:14:22:d4:
cc:fb:b0:e3:37:44:ee:37:01:3b:64:98:01:79:08:42:71:69:
b5:9e:fc:6d:2e:b6:0e:d8:bc:c1:eb:96:e6:84:d8:dc:4f:ba:
3d:52:e4:68:4b:bc:e5:0c:53:d1:14:71:4f:5f:7d:af:e5:d7:
a7:2f:cc:eb:c7:5c:fc:a9:35:46:b2:1f:e6:f1:07:3b:66:ad:
7e:0a:36:62:07:ca:f4:84:35:77:f9:d2:23:f8:46:2b:e0:fb:
ca:69:ef:c1:71:00:0a:f2:3a:9c:d6:fc:7c:a0:1e:6b:5d:7b:
e8:92:7b:91:eb:55:7e:fc:c7:8e:72:ec:8a:ed:4b:4e:36:e3:
9d:ad:99:94:5e:3b:9b:5b:ff:82:03:5d:31:f0:f1:b8:1f:f3:
81:f7:94:66:32:07:95:1f:30:3e:d9:5e:19:ec:33:10:46:a0:
91:42:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:32 2026 by rpki-client