Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
File: BMWTwzo9oilIzOIyis8F2YoB8aU.mft (raw, json)
Hash identifier: HYCqXvo6TpIckfpxltkg3x84UrTesiidnfgAbPljgNA=
Subject key identifier: 67:BC:C0:FE:28:1E:EC:80:63:E0:87:F2:C5:24:27:9F:9B:B8:CF:62
Authority key identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
Certificate issuer: /CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Certificate serial: 01A13D80E715D84F7AEEACE82A0AF00C259B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
Manifest number: 0BD5
Signing time: Thu 15 Oct 2026 03:00:20 +0000
Manifest this update: Thu 15 Oct 2026 03:00:20 +0000
Manifest next update: Fri 16 Oct 2026 03:00:20 +0000
Files and hashes: 1: BMWTwzo9oilIzOIyis8F2YoB8aU.crl (hash: X7MXE95+UhXTsIeV6SlEPHbUDOdxgMV7Gi2ddMmwHSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:e7:15:d8:4f:7a:ee:ac:e8:2a:0a:f0:0c:25:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Validity
Not Before: Oct 15 03:00:20 2026 GMT
Not After : Oct 16 03:00:20 2026 GMT
Subject: CN=67bcc0fe281eec8063e087f2c524279f9bb8cf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ca:9e:c8:6d:dd:1b:4b:4a:51:0d:f1:69:e2:
94:c4:ab:ea:3a:c5:35:b6:dc:b8:18:06:ab:ae:82:
da:b4:b5:c2:f2:d9:40:42:34:7e:08:7f:23:52:de:
5b:63:ed:6f:9b:f5:14:8d:d6:27:d9:d4:a6:8d:83:
df:df:77:da:1c:88:21:c3:51:f8:6d:27:1f:44:06:
8f:a6:ad:af:68:d7:95:99:a8:ee:fb:03:be:0f:9a:
39:6f:8b:74:c6:22:6a:00:2e:82:88:da:26:43:7d:
86:67:bf:aa:2c:bb:81:96:f4:89:76:1e:5a:8a:50:
d4:3c:0b:b9:cc:eb:59:05:ec:66:b1:05:da:b7:7e:
10:19:19:fe:61:6d:3c:d5:5a:90:43:8c:33:fe:87:
ba:bf:2f:b1:48:df:cb:70:e2:fe:f8:cd:8d:6a:4a:
9f:19:e4:04:6b:94:02:82:ab:bd:4b:91:a6:d3:f5:
72:46:d2:30:cb:4e:b6:49:27:91:3c:bc:b2:86:61:
46:d5:1c:ea:33:d9:10:4a:b0:1c:7d:73:ed:ce:b5:
0b:92:7d:73:1f:c2:fc:a9:3d:c1:73:4b:d7:2a:f3:
99:c0:18:8a:0b:f9:d0:30:c0:70:1b:90:30:a2:94:
f5:fa:43:c9:34:07:57:b7:35:c2:a9:d3:16:01:53:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BC:C0:FE:28:1E:EC:80:63:E0:87:F2:C5:24:27:9F:9B:B8:CF:62
X509v3 Authority Key Identifier:
keyid:04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4c:07:0b:3e:37:c3:e8:5b:cc:f0:06:fc:a5:26:06:65:09:
d5:76:88:65:e7:19:f3:43:8e:47:61:fe:d8:2c:3a:eb:dc:62:
3f:b9:b0:3a:8c:d9:99:45:a3:8d:ec:8e:e1:38:a1:e3:ad:db:
58:fc:d3:11:02:8b:f8:f1:2e:fe:40:be:a1:20:70:33:f8:04:
e3:e2:79:6d:3a:8b:03:d9:a6:b6:79:a1:29:e7:43:91:a6:34:
8d:16:08:b4:8a:88:fb:df:c0:01:5e:36:8b:fb:e9:1a:e9:56:
02:0f:79:6e:21:45:c6:0d:17:31:74:ec:7d:d0:e5:84:fd:cb:
fe:83:9a:73:57:08:61:4c:98:63:cd:f3:7f:1e:a8:55:4b:d8:
99:ee:92:0c:76:bf:d0:f1:24:8c:9a:59:c3:7e:ff:9f:2a:09:
41:b2:58:8d:97:8a:9c:d6:af:5a:91:ac:72:55:c9:87:4e:41:
94:bb:a4:77:1e:cd:07:ac:2e:58:5b:08:1a:cd:e6:cd:de:94:
c3:c7:7b:1d:a4:46:a1:bc:b1:bc:53:c1:da:e8:16:ef:24:8c:
35:a4:f5:be:46:75:eb:55:22:79:1a:2c:e2:ba:b3:ad:50:67:
ff:0a:f6:a8:39:b7:e7:ed:ae:ff:00:c0:e0:19:8a:a9:b7:9b:
87:4b:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:37:33 2026 by rpki-client