Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: NrRgGlOtPRdH/yr8pe54indouWxfYisNWaguWG3MpCU=
Subject key identifier: EE:6E:E8:40:03:38:50:D8:3A:96:5D:CB:9F:9D:A6:DD:05:4C:AB:52
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019F14C26043D599580CC219AE2E094A800F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 098A
Signing time: Mon 29 Jun 2026 19:01:50 +0000
Manifest this update: Mon 29 Jun 2026 19:01:50 +0000
Manifest next update: Tue 30 Jun 2026 19:01:50 +0000
Files and hashes: 1: 2mmNYgAAnRwmcSYBM0IDngosLA4.roa (hash: nY1bukKyfttyC/3iq1POePricYqJ+1Tih3NnE1gnsUY=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: UW+FdKqKRmnmsk1ouMb7r0/+QFHfE94up4Vn5iuW+EQ=)
3: Cqx4m029JaVGdBM3t0xvlCEAgzo.roa (hash: S8GX6C9oLkw5v91FP9+Y195QY3e/NY9EwWhEqzGuxl4=)
4: NeQydQcKe8qY06oC_Afus8sEgJU.roa (hash: 0r3TCPzszCfKtmrF/kyaRrXpr8kuhtaBNUphvREHO1Y=)
5: O63vFzK4x5ZTpmdF6YhLh0H2JRM.roa (hash: C3eD55pIFuNUzJ0bW9R6W7B2wd3cNHOtGS7ITnUaMJ4=)
6: R2uWMDmb1YfPEwjrPUSRr3_QEN8.roa (hash: 6OW2Lx2+1h6iO9PfK83UIXHOzzd7YoT8ZZx73Dp3z4I=)
7: RPcV_46izWFvqHxYNAfwO4rfhNk.roa (hash: +Kcr18TyAtMOfswQ2AFElqR161EtCNJRdXOpxKjayu0=)
8: mdt2WXNNXfXIWBr0juHcaeQiifQ.roa (hash: o+Tkj+m9xGMj8hgnIqFHVjFiAA/cU9ZsV1bWB3LAgR8=)
9: zRt11Vund2Tf-7IALkPmk7aZkx4.roa (hash: z201PyhUCG8Ta577hbAhZW0ZrjPaSrja2N7Brq64aFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:c2:60:43:d5:99:58:0c:c2:19:ae:2e:09:4a:80:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Jun 29 19:01:50 2026 GMT
Not After : Jun 30 19:01:50 2026 GMT
Subject: CN=ee6ee840033850d83a965dcb9f9da6dd054cab52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:d3:5b:89:e1:96:94:f8:11:f6:91:a1:03:
fc:22:f1:47:11:83:df:86:09:d0:e5:bf:a4:48:e8:
54:31:38:a2:2c:b1:5a:ca:f3:e4:7b:ef:62:d1:33:
dd:cf:09:10:5e:e4:cd:b0:2e:9c:b1:78:3a:39:d1:
6c:51:ed:f1:13:9f:e0:64:a0:cc:cf:26:40:9b:87:
e5:70:89:26:5a:aa:b0:d5:3b:18:cc:01:c8:07:7d:
58:dc:4c:1e:8a:d2:7d:ef:5c:d4:6e:c2:a9:fe:3c:
ba:4e:cc:c7:aa:40:33:07:d3:2d:33:04:e9:46:74:
fa:cd:81:1b:4f:4e:e9:81:0c:27:6f:22:2d:f4:93:
cd:db:d0:53:a2:3a:05:48:d4:a1:3a:d9:c4:0d:af:
8b:fa:51:7b:a2:97:fc:26:28:20:52:a5:46:78:c0:
76:32:8c:39:59:ea:62:23:f5:6e:f8:bd:10:c5:f8:
bf:18:19:d6:c0:c9:04:7a:ac:c8:a6:d2:2c:de:a8:
00:93:36:b0:a1:9e:1d:e4:db:8e:43:bf:49:58:32:
aa:0b:b1:bb:cd:64:b6:00:bb:d5:ef:40:8c:5a:43:
32:f6:87:77:45:45:de:e9:53:5d:31:12:19:ed:f2:
db:fd:8a:10:d3:9e:df:67:5c:42:24:21:72:c7:af:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6E:E8:40:03:38:50:D8:3A:96:5D:CB:9F:9D:A6:DD:05:4C:AB:52
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0e:ba:f0:fe:60:29:9b:e0:50:64:c5:6d:f5:b6:29:c3:f8:
44:50:a2:45:89:00:22:b7:3c:08:f6:ef:e9:a6:07:d3:cc:80:
bd:9f:16:e3:88:b2:51:72:1b:bb:27:54:11:46:93:3d:ba:ca:
3f:40:84:aa:ae:22:c7:b9:7d:08:54:c4:9d:fe:23:67:22:8c:
d0:03:be:2c:94:8d:fc:8f:cd:47:0c:cf:f2:20:92:9f:73:e7:
d0:4a:c9:3f:14:70:32:d8:a8:14:dc:c0:87:dc:71:92:85:82:
6d:72:2c:c3:2a:94:a2:14:b5:8b:10:6c:85:5e:00:53:92:b8:
bc:a9:cd:c9:e7:7c:e0:1f:23:7a:bd:1f:98:e4:3c:fd:b1:28:
cf:24:b2:d0:2b:16:57:44:14:f7:5e:ea:6c:81:0c:47:fc:bd:
47:ef:0c:1f:ad:af:a1:32:65:46:23:8b:dd:36:59:11:a8:36:
90:9e:6d:e3:7f:f9:00:93:e8:9a:8e:17:95:d4:e8:21:bd:d6:
9b:2e:12:50:69:b5:bf:dd:eb:43:cd:9e:02:25:7f:19:a4:14:
71:12:24:cc:e6:d7:a9:1d:60:b8:70:04:e9:8e:4e:c3:20:d2:
6b:0c:01:b9:3b:5d:17:12:63:2e:10:31:10:78:bf:8d:49:1d:
ee:df:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:44:22 2026 by rpki-client