Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: gMTJdWOtQGehbuXTgOMzW7BHTTPnaffeJdzpLcEE5Dw=
Subject key identifier: 11:F1:88:08:70:02:32:A9:66:F3:35:D5:D0:EF:0E:1B:BC:9C:A1:32
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 01A183E2DC1F92A9D37007D774B8BFE011F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 11A9
Signing time: Wed 28 Oct 2026 19:00:45 +0000
Manifest this update: Wed 28 Oct 2026 19:00:45 +0000
Manifest next update: Thu 29 Oct 2026 19:00:45 +0000
Files and hashes: 1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: CMuQVPeT0BkMw3Y4WeSlBedoPKYN6AtLoMoNcqr/uyA=)
2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e2:dc:1f:92:a9:d3:70:07:d7:74:b8:bf:e0:11:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Oct 28 19:00:45 2026 GMT
Not After : Oct 29 19:00:45 2026 GMT
Subject: CN=11f18808700232a966f335d5d0ef0e1bbc9ca132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:19:d2:f5:96:f4:93:99:2e:5d:51:d8:c6:
f2:94:48:f1:e7:70:0e:f8:37:e3:21:66:62:5d:f7:
bb:dd:12:77:3f:89:31:93:7e:30:3b:1c:0f:2e:77:
46:94:cb:98:f7:09:6f:91:22:bc:15:3d:c1:5a:f8:
a6:e3:6a:30:44:4a:aa:8a:34:1f:61:f1:27:33:8b:
b8:fc:07:2f:26:b0:be:b1:af:5c:dd:c6:b9:94:75:
6f:ca:ae:3e:1b:33:af:2d:ff:3f:f4:25:62:5d:31:
5f:cd:35:c1:65:3b:57:be:03:48:fe:56:77:8d:84:
98:cf:f8:1b:c6:7e:99:c7:b7:e4:cd:6b:ab:c2:32:
15:98:2e:43:2e:ea:00:f2:99:f2:1d:c2:7b:51:04:
9b:81:f8:63:cf:b9:00:69:0c:20:e8:a0:0b:a6:8b:
63:74:56:81:ff:27:6e:04:b7:cf:7c:3b:ec:75:5c:
94:52:11:e2:55:53:1b:a6:d2:b9:06:90:a2:aa:3d:
04:c6:83:d3:63:c8:c8:c9:e2:54:63:26:6f:61:02:
3c:40:b2:b0:b6:7e:d5:bf:6e:1b:fc:e0:5b:ab:56:
5c:6a:93:e0:e2:b4:3d:33:ab:e2:12:0d:70:81:ca:
e8:c1:4e:bc:b9:6b:1d:48:bb:9c:ef:98:4a:22:f2:
b0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F1:88:08:70:02:32:A9:66:F3:35:D5:D0:EF:0E:1B:BC:9C:A1:32
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:42:0d:3b:52:91:89:b3:09:cc:7c:fc:a3:5a:1f:02:dd:64:
79:72:96:5e:2d:19:fa:5b:04:60:15:75:08:23:ff:b5:cc:17:
82:c7:23:11:11:0c:54:12:e9:00:25:db:d4:3c:d8:5e:1b:dc:
36:97:6c:ed:33:a5:1b:a3:83:10:1a:46:2a:a3:22:43:34:1a:
7c:67:f6:e1:c0:a0:15:dc:27:2c:f5:d0:c6:46:1c:c0:5a:0b:
0b:ed:69:2b:a6:65:1f:04:7e:db:17:63:48:73:c7:d8:c0:19:
b9:01:c3:ff:6d:d8:3a:90:80:1e:cd:c8:98:59:84:7b:40:37:
8d:10:5a:6d:e1:46:3a:b9:ee:ee:92:8b:36:33:c6:32:97:58:
50:95:be:5f:c6:ba:2a:b2:8e:ce:55:47:49:93:d4:56:1e:07:
9b:0b:65:9f:d0:c1:32:b8:74:24:07:ea:72:f5:b2:5a:0c:a0:
d2:f6:ab:fc:9a:c4:06:b6:ea:ae:b3:14:ee:28:c0:86:cc:4b:
a2:08:28:6e:1f:9b:d0:ef:ad:ce:0a:28:d8:d3:45:75:2c:5a:
dc:16:2a:f0:79:d5:9d:7b:3b:6e:3a:7b:d0:ef:5c:be:70:a5:
2e:60:fd:62:64:33:11:af:df:1b:ae:23:2e:70:3c:24:27:47:
c6:d8:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:54:50 2026 by rpki-client