Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: bzlFX6/d/XScZKT/8ZB98iZlOSCBQZrT+jKngStEmv0=
Subject key identifier: 31:D1:6E:47:85:13:4C:09:61:8F:DD:82:CB:0F:DD:DF:66:44:F6:4A
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019EB76ACAF850F9597C83AD44F9EDE9A708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 1036
Signing time: Thu 11 Jun 2026 16:01:29 +0000
Manifest this update: Thu 11 Jun 2026 16:01:29 +0000
Manifest next update: Fri 12 Jun 2026 16:01:29 +0000
Files and hashes: 1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: TYW6ko54vBBDVViwnN7RBokjmZ7Vl8+nNPkg9mmFXqo=)
2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:ca:f8:50:f9:59:7c:83:ad:44:f9:ed:e9:a7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Jun 11 16:01:29 2026 GMT
Not After : Jun 12 16:01:29 2026 GMT
Subject: CN=31d16e4785134c09618fdd82cb0fdddf6644f64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:87:1b:c8:62:39:a5:a3:18:6d:e8:17:5c:
35:bd:2d:ab:4e:ef:23:58:32:d7:13:5c:bd:fa:1b:
ea:93:f5:fa:de:02:81:4a:7a:5c:a9:61:cb:25:46:
c5:22:c4:70:84:de:f0:2d:00:20:e3:68:b1:63:df:
7c:5c:10:b8:db:ba:35:c5:12:43:32:1c:b4:c4:ea:
97:0c:dc:aa:16:85:1d:b9:54:c9:09:c1:1d:9d:90:
87:5c:6a:cb:6d:13:07:25:00:f8:6f:5b:37:71:b5:
19:63:ec:26:c3:ac:bb:72:14:a0:93:5b:4b:86:ad:
3b:dd:a0:49:fa:a4:8e:48:a8:e0:65:04:fd:03:08:
05:49:e9:c8:f1:56:99:72:c3:0e:5a:93:26:e2:32:
37:4f:93:3f:52:11:e0:fb:2e:64:ed:77:72:91:da:
b6:d4:6f:3d:15:0e:3c:bb:45:a0:70:9a:30:91:ef:
32:ea:31:31:f8:df:d7:b2:fd:10:ae:6f:52:c9:86:
58:0a:c6:dc:3f:6e:39:ae:02:ec:53:41:f6:56:e1:
29:58:08:2f:7a:5e:f0:0a:7c:53:a8:42:cb:b9:7e:
16:e3:b5:97:50:06:60:3e:77:5b:98:0b:47:0d:fe:
07:a9:23:23:a4:d8:89:76:cc:b0:52:36:54:94:02:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D1:6E:47:85:13:4C:09:61:8F:DD:82:CB:0F:DD:DF:66:44:F6:4A
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f1:b6:59:c8:29:d9:c1:e9:f1:ef:22:7f:4e:d3:84:2f:20:
b5:9f:c5:9a:47:59:0c:94:fc:27:96:1c:81:df:ec:11:c6:9a:
33:32:a6:a5:46:b5:c5:72:70:44:db:22:b0:45:90:b0:e6:bb:
68:c3:74:d5:ca:8a:a1:32:c1:c7:44:72:53:ed:5f:01:cb:23:
3b:95:32:32:68:24:4c:0d:71:72:46:97:76:d0:0b:1a:2a:23:
db:29:3b:b0:e7:09:52:ca:8f:20:a8:bf:a2:5e:4f:88:71:ae:
99:76:98:06:a6:e5:6e:1d:e2:86:66:9a:fa:a5:53:41:3d:1e:
e8:ae:a0:ac:11:86:8b:20:bf:ab:b1:90:73:29:07:0f:3e:24:
3a:2b:d5:3a:72:05:46:ee:52:57:e0:ba:49:6a:42:a3:63:e8:
c4:cf:55:0e:84:6d:aa:60:09:72:21:d8:8e:fd:cb:db:41:94:
4b:df:45:1f:34:86:41:cf:18:ef:b2:0b:9b:5f:19:5c:54:b8:
81:01:f1:d9:b6:cb:b3:33:1a:be:6f:6c:44:16:a1:83:5b:a3:
ec:14:01:ee:86:1b:e3:8b:12:b9:b8:e0:3d:0b:08:df:b3:74:
0b:25:91:6d:52:29:ef:ff:e7:c6:2b:2a:a7:3b:c3:8f:ed:03:
1a:a6:53:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:17:38 2026 by rpki-client