Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: eOMVm1gwmXIzIHva5GqPsIwAp/qd9xjDzbpEAM0Lch8=
Subject key identifier: 4D:3C:CB:61:CD:0D:FF:1C:0F:B3:0A:91:AB:A6:0B:1F:BE:B6:46:8B
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 01A0E9D259858F7D8F3B212D6A85D15C3679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 0A7D
Signing time: Mon 28 Sep 2026 21:01:11 +0000
Manifest this update: Mon 28 Sep 2026 21:01:11 +0000
Manifest next update: Tue 29 Sep 2026 21:01:11 +0000
Files and hashes: 1: 2mmNYgAAnRwmcSYBM0IDngosLA4.roa (hash: nY1bukKyfttyC/3iq1POePricYqJ+1Tih3NnE1gnsUY=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: LJVlmaBtcW2fza60D2o2mwzeYbOzO/7OIkmYj/84IMA=)
3: Cqx4m029JaVGdBM3t0xvlCEAgzo.roa (hash: S8GX6C9oLkw5v91FP9+Y195QY3e/NY9EwWhEqzGuxl4=)
4: NeQydQcKe8qY06oC_Afus8sEgJU.roa (hash: 0r3TCPzszCfKtmrF/kyaRrXpr8kuhtaBNUphvREHO1Y=)
5: O63vFzK4x5ZTpmdF6YhLh0H2JRM.roa (hash: C3eD55pIFuNUzJ0bW9R6W7B2wd3cNHOtGS7ITnUaMJ4=)
6: RPcV_46izWFvqHxYNAfwO4rfhNk.roa (hash: +Kcr18TyAtMOfswQ2AFElqR161EtCNJRdXOpxKjayu0=)
7: WouQ5boJ9I90k_yfz3_xH_tfu1k.roa (hash: OH8f0iwKgQSCmkIn7xRG2E2rViHcnBt77Z8vCQX3BBI=)
8: mdt2WXNNXfXIWBr0juHcaeQiifQ.roa (hash: o+Tkj+m9xGMj8hgnIqFHVjFiAA/cU9ZsV1bWB3LAgR8=)
9: zRt11Vund2Tf-7IALkPmk7aZkx4.roa (hash: z201PyhUCG8Ta577hbAhZW0ZrjPaSrja2N7Brq64aFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:59:85:8f:7d:8f:3b:21:2d:6a:85:d1:5c:36:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Sep 28 21:01:11 2026 GMT
Not After : Sep 29 21:01:11 2026 GMT
Subject: CN=4d3ccb61cd0dff1c0fb30a91aba60b1fbeb6468b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:e3:bd:ea:4d:c2:ce:ab:eb:6b:80:eb:d1:
80:a5:f0:58:3e:55:c9:e5:86:47:cd:af:88:7e:f8:
1b:62:a5:0b:22:8b:a1:1e:87:59:5f:36:98:a5:86:
ec:2a:7a:47:c1:db:c9:22:12:15:00:3c:35:eb:9b:
df:d1:e5:d3:9c:d0:b2:5d:0a:15:61:47:0d:d0:67:
b0:d9:e9:98:5e:22:82:bf:72:1f:47:1c:3f:dd:94:
a7:78:de:24:7a:ae:3d:d9:2b:73:48:ab:14:94:ce:
d0:72:08:bc:7a:c1:98:aa:c4:ff:e6:f4:bb:18:d7:
04:40:ca:3f:c1:0d:18:49:4a:4b:bd:07:9b:51:98:
3a:58:87:42:bc:04:83:88:78:99:c1:f9:4e:ed:06:
67:c2:cb:33:ae:cb:5c:7c:92:58:68:73:19:20:44:
68:dc:85:b7:e6:20:28:f4:e7:c3:e1:fa:78:6a:68:
71:40:54:c8:f5:16:84:31:2a:0e:8b:b6:0e:49:2f:
7a:e9:d0:f4:e7:c0:82:d9:e5:76:7d:fa:03:3d:1b:
93:db:72:3a:73:61:70:a0:7a:3c:90:8d:5b:ea:ec:
39:14:de:77:90:fd:56:c9:c1:be:9b:16:61:31:7f:
b6:cf:03:2a:f5:2f:29:80:ab:ef:81:a7:26:c5:5b:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3C:CB:61:CD:0D:FF:1C:0F:B3:0A:91:AB:A6:0B:1F:BE:B6:46:8B
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ef:f5:b4:f6:95:45:c3:da:eb:f1:43:d2:34:bb:df:01:c0:
58:93:92:47:b3:e3:cc:91:a9:8a:cf:4d:26:89:fc:eb:1f:50:
45:c8:ec:a9:89:24:53:b6:19:a2:70:1f:cc:77:5c:9c:e5:f4:
80:b1:d2:9b:23:48:a9:69:40:80:32:28:a5:48:14:45:f7:34:
f8:07:fa:03:f1:f4:8e:5d:c9:9f:8f:4e:65:44:7c:bb:50:d0:
21:7e:c0:04:fc:32:e9:83:d5:e8:32:82:e8:e0:20:06:43:66:
a6:65:6c:59:12:ac:41:7d:fe:aa:9c:14:a0:42:46:7a:bb:68:
7f:75:59:0f:f4:c3:1e:e8:d2:b2:eb:f4:ed:43:85:4b:80:a1:
be:3d:69:70:28:61:8e:ff:42:12:05:86:fd:3d:73:fb:ac:71:
a7:ad:96:f2:8d:96:b3:35:4c:8e:9a:a1:fd:09:34:81:23:93:
e2:45:f2:76:dc:2f:d1:90:c5:c7:a2:5b:25:59:72:61:32:58:
58:de:c1:61:14:9a:e2:8e:45:df:9d:d1:18:e4:0f:a0:cc:e0:
4f:3d:ae:3b:6e:c2:6c:0b:77:a7:ce:48:76:f9:20:1f:6c:7f:
d8:02:b6:bd:7f:9f:99:44:e7:e8:a2:67:1f:fc:df:55:e2:7e:
0f:6e:fe:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDp0lmFj32POyEtaoXRXDZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjNjYjI2M2RmNTBkMmQ0ZDA3M2MwZjdkYjZjZDI3NzYz
MDJjOWQwHhcNMjYwOTI4MjEwMTExWhcNMjYwOTI5MjEwMTExWjAzMTEwLwYDVQQD
Eyg0ZDNjY2I2MWNkMGRmZjFjMGZiMzBhOTFhYmE2MGIxZmJlYjY0NjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4jjvepNws6r62uA69GApfBYPlXJ
5YZHza+IfvgbYqULIouhHodZXzaYpYbsKnpHwdvJIhIVADw165vf0eXTnNCyXQoV
YUcN0Gew2emYXiKCv3IfRxw/3ZSneN4keq492StzSKsUlM7Qcgi8esGYqsT/5vS7
GNcEQMo/wQ0YSUpLvQebUZg6WIdCvASDiHiZwflO7QZnwsszrstcfJJYaHMZIERo
3IW35iAo9OfD4fp4amhxQFTI9RaEMSoOi7YOSS966dD058CC2eV2ffoDPRuT23I6
c2FwoHo8kI1b6uw5FN53kP1WycG+mxZhMX+2zwMq9S8pgKvvgacmxVtIbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE08y2HNDf8cD7MKkaumCx++tkaLMB8GA1UdIwQY
MBaAFAVjyyY99Q0tTQc8D322zSd2MCydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQt
MTUwMzU0YjAwZTU1LzEvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQtMTUwMzU0YjAwZTU1
LzEvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe/1tPaV
RcPa6/FD0jS73wHAWJOSR7PjzJGpis9NJon86x9QRcjsqYkkU7YZonAfzHdcnOX0
gLHSmyNIqWlAgDIopUgURfc0+Af6A/H0jl3Jn49OZUR8u1DQIX7ABPwy6YPV6DKC
6OAgBkNmpmVsWRKsQX3+qpwUoEJGertof3VZD/TDHujSsuv07UOFS4Chvj1pcChh
jv9CEgWG/T1z+6xxp62W8o2WszVMjpqh/Qk0gSOT4kXydtwv0ZDFx6JbJVlyYTJY
WN7BYRSa4o5F353RGOQPoMzgTz2uO27CbAt3p85IdvkgH2x/2AK2vX+fmUTn6KJn
H/zfVeJ+D27+KA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:55:10 2026 by rpki-client