Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
File: BMWTwzo9oilIzOIyis8F2YoB8aU.mft (raw, json)
Hash identifier: Ick3za9z/906o02LYQPNxpkF5FIlLM0vk/bPptxBau0=
Subject key identifier: 6A:1D:3C:9A:DA:AA:FC:CC:A7:C0:C0:F1:A4:32:A3:46:33:84:95:9B
Authority key identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
Certificate issuer: /CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Certificate serial: 019E314E78BF46461C97A11B8916278D785E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
Manifest number: 0A41
Signing time: Sat 16 May 2026 15:01:26 +0000
Manifest this update: Sat 16 May 2026 15:01:26 +0000
Manifest next update: Sun 17 May 2026 15:01:26 +0000
Files and hashes: 1: BMWTwzo9oilIzOIyis8F2YoB8aU.crl (hash: B66b2l/gDcsPaKnsZRXEdjiynD8XOwhm4HxPbUK4vfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:78:bf:46:46:1c:97:a1:1b:89:16:27:8d:78:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Validity
Not Before: May 16 15:01:26 2026 GMT
Not After : May 17 15:01:26 2026 GMT
Subject: CN=6a1d3c9adaaafccca7c0c0f1a432a3463384959b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:3f:98:1b:aa:e9:aa:ba:53:47:32:44:62:
80:f7:bc:b6:8f:0f:fb:6a:06:84:6f:92:f3:81:1b:
c1:5f:11:ac:7e:28:35:0d:83:de:58:44:5c:7e:77:
77:0c:29:22:0c:29:11:67:51:10:86:f4:59:94:d8:
c2:59:05:a1:0b:ca:30:b9:e1:d9:dd:3b:8b:b2:60:
27:8e:b2:2a:65:62:04:0f:97:73:b7:e2:af:d4:10:
d7:f4:27:92:8c:2b:c9:b6:24:ec:e8:ab:46:05:ad:
15:af:ea:67:98:53:68:bd:b6:b5:2e:7c:eb:95:10:
db:51:0d:c4:1e:bc:e4:f7:81:95:3b:f6:d3:83:bb:
fa:ef:fb:c9:8a:cf:95:d8:d0:00:99:a0:46:fd:54:
79:8c:c4:d7:68:f7:c4:1f:23:f9:cc:ce:54:03:d8:
0c:e6:9e:a7:fa:bb:72:86:27:16:3d:74:90:32:ee:
e9:3d:cd:e0:e0:ac:a4:2e:0c:7c:b6:05:97:2a:d5:
ae:bb:cc:0a:eb:ad:b8:3b:b5:7d:72:a1:e9:23:b7:
91:1f:1c:99:bf:65:f7:bb:ce:49:b5:8e:79:b4:6a:
9a:b3:21:44:e9:93:0f:34:e7:3e:65:dd:13:2b:d0:
f7:fa:86:c7:33:9a:59:4d:b6:93:d3:1e:e7:ae:96:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1D:3C:9A:DA:AA:FC:CC:A7:C0:C0:F1:A4:32:A3:46:33:84:95:9B
X509v3 Authority Key Identifier:
keyid:04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f5:6c:6e:c9:00:65:ad:6c:63:3a:e1:1e:f6:ec:ac:dd:5e:
ca:72:cf:bf:89:3a:57:5f:4d:b2:6d:9e:b4:b2:c1:84:1d:5a:
b8:72:3a:9e:21:56:5b:94:e5:fb:db:41:94:8a:a1:06:56:18:
b6:8f:ea:c0:5a:ee:61:23:d5:4e:b5:8c:e2:81:13:e9:4b:92:
9f:4b:eb:6d:8f:ab:a6:10:90:2c:8f:b6:4c:ac:57:c5:d7:4f:
76:24:76:ba:1c:3d:b8:39:66:24:05:80:85:76:f2:67:eb:14:
a6:49:b0:58:81:e9:80:f2:f7:1f:35:9a:57:fa:dc:c2:5f:4d:
28:f2:9b:13:98:70:a6:a9:14:b9:da:eb:4b:46:5f:1b:ef:dd:
03:ed:4f:a5:15:13:23:9e:da:c5:e2:39:a8:9e:70:7e:cf:3b:
c0:ed:d8:a8:c9:d3:b6:dc:a1:10:22:01:ae:af:ea:f3:c1:0a:
75:4a:1d:45:cf:e5:cb:1e:8e:95:06:55:a0:fc:fc:87:04:74:
ab:c0:14:8b:c3:5a:b4:b0:8f:c5:4d:42:d0:be:18:7f:72:43:
a5:b9:a8:68:f6:06:33:c4:87:e7:f4:f8:95:00:35:8d:0b:6d:
38:82:9f:8e:45:26:c6:26:c9:bf:36:0f:1d:e2:34:89:68:e5:
1a:80:48:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTni/RkYcl6EbiRYnjXheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YzU5M2MzM2EzZGEyMjk0OGNjZTIzMjhhY2YwNWQ5OGEw
MWYxYTUwHhcNMjYwNTE2MTUwMTI2WhcNMjYwNTE3MTUwMTI2WjAzMTEwLwYDVQQD
Eyg2YTFkM2M5YWRhYWFmY2NjYTdjMGMwZjFhNDMyYTM0NjMzODQ5NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+E/mBuq6aq6U0cyRGKA97y2jw/7
agaEb5LzgRvBXxGsfig1DYPeWERcfnd3DCkiDCkRZ1EQhvRZlNjCWQWhC8owueHZ
3TuLsmAnjrIqZWIED5dzt+Kv1BDX9CeSjCvJtiTs6KtGBa0Vr+pnmFNovba1Lnzr
lRDbUQ3EHrzk94GVO/bTg7v67/vJis+V2NAAmaBG/VR5jMTXaPfEHyP5zM5UA9gM
5p6n+rtyhicWPXSQMu7pPc3g4KykLgx8tgWXKtWuu8wK6624O7V9cqHpI7eRHxyZ
v2X3u85JtY55tGqasyFE6ZMPNOc+Zd0TK9D3+obHM5pZTbaT0x7nrpb3WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGodPJraqvzMp8DA8aQyo0YzhJWbMB8GA1UdIwQY
MBaAFATFk8M6PaIpSMziMorPBdmKAfGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk1XVHd6bzlvaWxJek9JeWlzOEYyWW9COGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMDc2ODMtNDNlZC00YTljLWIzZWEt
NTBhNzM1YjI5NzYwLzEvQk1XVHd6bzlvaWxJek9JeWlzOEYyWW9COGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wMDc2ODMtNDNlZC00YTljLWIzZWEtNTBhNzM1YjI5NzYw
LzEvQk1XVHd6bzlvaWxJek9JeWlzOEYyWW9COGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvVsbskA
Za1sYzrhHvbsrN1eynLPv4k6V19Nsm2etLLBhB1auHI6niFWW5Tl+9tBlIqhBlYY
to/qwFruYSPVTrWM4oET6UuSn0vrbY+rphCQLI+2TKxXxddPdiR2uhw9uDlmJAWA
hXbyZ+sUpkmwWIHpgPL3HzWaV/rcwl9NKPKbE5hwpqkUudrrS0ZfG+/dA+1PpRUT
I57axeI5qJ5wfs87wO3YqMnTttyhECIBrq/q88EKdUodRc/lyx6OlQZVoPz8hwR0
q8AUi8NatLCPxU1C0L4Yf3JDpbmoaPYGM8SH5/T4lQA1jQttOIKfjkUmxibJvzYP
HeI0iWjlGoBIpA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:57:18 2026 by rpki-client