Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: OG0CeGX1LkXOW8edgyr20M8z/5PB5+eL5wc+ZVtyPQM=
Subject key identifier: 56:BE:C1:FB:23:77:03:AA:8C:43:C1:FD:BC:E8:B8:48:4B:9D:F8:A0
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019D39AF315CA140261DC0BD93DF7DCAFBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 0894
Signing time: Sun 29 Mar 2026 13:01:15 +0000
Manifest this update: Sun 29 Mar 2026 13:01:15 +0000
Manifest next update: Mon 30 Mar 2026 13:01:15 +0000
Files and hashes: 1: 2mmNYgAAnRwmcSYBM0IDngosLA4.roa (hash: nY1bukKyfttyC/3iq1POePricYqJ+1Tih3NnE1gnsUY=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: kjWyL8Nb/j9gdF8WoTXeeomfiIbZc3U+7bxgHwgqw4U=)
3: Cqx4m029JaVGdBM3t0xvlCEAgzo.roa (hash: S8GX6C9oLkw5v91FP9+Y195QY3e/NY9EwWhEqzGuxl4=)
4: NeQydQcKe8qY06oC_Afus8sEgJU.roa (hash: 0r3TCPzszCfKtmrF/kyaRrXpr8kuhtaBNUphvREHO1Y=)
5: O63vFzK4x5ZTpmdF6YhLh0H2JRM.roa (hash: C3eD55pIFuNUzJ0bW9R6W7B2wd3cNHOtGS7ITnUaMJ4=)
6: R2uWMDmb1YfPEwjrPUSRr3_QEN8.roa (hash: 6OW2Lx2+1h6iO9PfK83UIXHOzzd7YoT8ZZx73Dp3z4I=)
7: RPcV_46izWFvqHxYNAfwO4rfhNk.roa (hash: +Kcr18TyAtMOfswQ2AFElqR161EtCNJRdXOpxKjayu0=)
8: mdt2WXNNXfXIWBr0juHcaeQiifQ.roa (hash: o+Tkj+m9xGMj8hgnIqFHVjFiAA/cU9ZsV1bWB3LAgR8=)
9: zRt11Vund2Tf-7IALkPmk7aZkx4.roa (hash: z201PyhUCG8Ta577hbAhZW0ZrjPaSrja2N7Brq64aFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:31:5c:a1:40:26:1d:c0:bd:93:df:7d:ca:fb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Mar 29 13:01:15 2026 GMT
Not After : Mar 30 13:01:15 2026 GMT
Subject: CN=56bec1fb237703aa8c43c1fdbce8b8484b9df8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fb:b2:b0:a1:2c:19:b6:ca:a7:b7:6f:8c:01:
51:94:6b:81:74:78:97:4e:32:28:18:19:4b:1d:fd:
9f:fb:63:77:18:89:41:51:61:0b:ab:ca:bd:e2:21:
10:ea:c4:8e:63:ec:9d:2a:6b:23:a3:8f:14:94:55:
ac:02:68:09:a2:77:6a:cb:bf:6d:5c:4c:63:d4:54:
7b:3e:11:21:f5:3c:28:53:77:cf:4f:7d:9e:7f:2f:
be:b1:c7:6d:1a:64:06:51:96:d2:63:f9:b8:9e:6b:
e9:78:a2:93:20:0f:fb:59:92:af:93:7d:ac:c9:56:
58:35:1d:c0:e8:fc:30:dc:47:4b:a7:9b:af:77:6f:
3d:f6:e0:e1:6d:02:e9:3e:b1:5b:e9:48:57:5d:6f:
47:dc:a6:0e:7a:24:ce:7a:5b:66:dc:a1:d0:cf:90:
0a:6a:5e:cd:fc:05:4b:2a:e6:d6:67:1e:b9:07:42:
96:ec:43:b8:72:6d:62:ff:cd:f0:0e:6c:7b:e8:a8:
09:4d:eb:b8:1f:e4:a3:2b:04:92:5a:6f:52:55:30:
ed:6f:86:2f:99:2e:11:f9:e0:86:b2:ad:85:57:01:
df:d8:d3:29:82:84:6a:20:ec:1e:f0:fd:63:0c:10:
04:cc:48:07:7b:27:5f:c0:3d:ce:1c:c7:34:92:53:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BE:C1:FB:23:77:03:AA:8C:43:C1:FD:BC:E8:B8:48:4B:9D:F8:A0
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:19:52:27:7d:d6:74:dd:41:0b:ee:77:99:61:9c:4c:b9:ed:
e9:8b:48:ad:dc:90:b7:7d:52:75:76:48:0f:52:fe:06:0d:b4:
c9:05:c0:2e:47:0e:63:cf:82:55:cf:f2:fe:c1:9b:f8:71:13:
8f:a6:93:ad:8a:e4:e8:ca:70:82:c0:82:eb:c5:aa:08:03:89:
5a:ad:bc:72:36:e2:3e:e0:55:4c:34:ee:bd:7d:05:59:0d:38:
5b:a6:10:40:68:cc:3a:e5:4a:0a:b1:db:ba:3c:1b:b6:f9:87:
eb:5f:b6:c6:d3:f9:97:36:ec:c3:32:ba:49:c7:d2:2e:6b:02:
62:42:82:22:19:04:56:1f:68:db:16:ef:af:50:c0:6a:73:48:
0c:1b:da:d9:3f:43:85:5a:18:cf:86:91:1d:13:00:e4:e4:db:
48:e0:1d:e0:fd:04:00:3f:06:7c:6b:22:a8:95:30:a8:df:24:
c2:0f:f7:46:ce:1d:d6:87:62:d6:40:03:78:b6:ac:37:a0:f4:
f7:10:07:a9:a0:ba:cf:bc:78:8f:92:37:f2:b2:e2:c2:7c:93:
b4:59:6f:bd:19:4d:85:ff:77:d5:80:c0:a4:cc:9e:d4:46:3d:
71:34:9b:2e:8a:f5:23:e9:bf:32:01:7a:e7:f9:8f:e5:b7:d0:
4a:97:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:44 2026 by rpki-client