Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File: BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier: RSq4hLF4U2lxKQ2Z0z4BpnT2mP6ioU9px9h5fNbXl+E=
Subject key identifier: F5:4A:8A:BA:D7:2C:7D:F2:77:3A:80:B9:35:DD:B9:50:DC:DB:9D:E1
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer: /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial: 019D3977E87F884AC1F4FAC90587EF6734D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number: 0D1F
Signing time: Sun 29 Mar 2026 12:00:52 +0000
Manifest this update: Sun 29 Mar 2026 12:00:52 +0000
Manifest next update: Mon 30 Mar 2026 12:00:52 +0000
Files and hashes: 1: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: lKx8JE8UiHgyP9nnHIoUbldsdBHmh/3S/S3DsVJxzoY=)
2: sY2TntCf1cm5rPVJjS36b5m6tZc.roa (hash: TkRTS5xgT3a1OQtVhPAIwsqGlZKttwReXi6Ay6Ls3bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e8:7f:88:4a:c1:f4:fa:c9:05:87:ef:67:34:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Validity
Not Before: Mar 29 12:00:52 2026 GMT
Not After : Mar 30 12:00:52 2026 GMT
Subject: CN=f54a8abad72c7df2773a80b935ddb950dcdb9de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:bd:04:f4:76:e5:af:a1:57:1f:75:af:51:
e0:ae:1b:e2:f7:3a:3e:9a:6d:66:51:4f:1f:94:0a:
da:33:fb:5b:dd:ab:7e:54:13:eb:e7:8a:30:f5:c9:
18:8f:8f:02:df:af:92:e4:eb:fd:0d:e3:b1:35:51:
7e:64:95:6b:8f:69:06:8e:c7:4a:10:68:6b:fe:6e:
7f:1e:92:3b:83:51:c7:f0:60:e6:d7:5d:aa:b9:ca:
27:3f:50:12:dc:6d:5e:35:b3:db:87:f3:8e:2f:47:
9a:9e:f0:6a:b3:1a:c9:e2:33:ef:d6:53:d8:6a:fa:
d9:b4:25:eb:63:b6:56:2b:20:d6:e9:00:b4:69:18:
5f:9c:5b:a8:cc:20:ef:71:42:7b:33:8d:6f:10:b5:
a5:ba:05:ad:e0:20:60:84:12:15:30:af:a9:38:7f:
84:dc:ea:e4:e6:bd:70:a2:e0:a1:98:4f:88:d3:0b:
0f:8c:6d:0a:a2:ad:e0:c7:65:3e:8f:37:26:2f:36:
f0:d4:7f:c4:ae:4e:c9:8d:52:ef:ea:28:d1:87:3e:
67:e5:a4:27:4a:77:5a:05:f1:5e:8f:9a:7c:82:dd:
a5:85:90:6d:38:12:78:52:f1:27:66:12:7e:7d:7e:
8a:c5:b4:06:7b:36:b1:eb:45:2c:6d:ff:47:82:0b:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:8A:BA:D7:2C:7D:F2:77:3A:80:B9:35:DD:B9:50:DC:DB:9D:E1
X509v3 Authority Key Identifier:
keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:35:f6:0e:2b:b2:ce:cd:8c:34:c3:41:bf:31:66:46:cf:97:
79:56:dd:e0:19:fa:7a:60:0b:fe:b0:8a:df:12:2a:83:38:bd:
3b:ab:32:d0:f1:79:a6:7d:fe:08:6e:00:fd:09:fa:f7:72:1b:
d3:91:0d:c5:ab:39:1c:e2:be:20:ef:46:fc:70:56:d9:76:d4:
b5:af:85:bb:45:4d:5c:1b:a0:fd:73:40:a5:4c:59:6b:f9:4c:
a1:42:a4:a2:5f:d9:29:a8:cd:af:b4:ca:9e:ea:e9:8b:78:76:
82:64:7e:b0:5f:ce:53:54:21:96:f4:6b:55:08:93:f4:76:d7:
35:93:34:ce:d2:5b:1e:7d:78:77:06:b9:65:6d:9e:0c:95:96:
a9:36:e7:f4:8c:98:77:5d:95:46:9f:ea:7e:89:03:21:8e:29:
9c:ff:0b:6a:c6:52:25:4b:96:d6:05:f2:09:ab:8e:54:d0:39:
47:5a:fe:6a:65:e9:23:50:92:d0:32:3d:12:88:0a:1d:f9:5b:
05:56:01:25:41:71:f4:44:31:51:fb:c3:f5:e0:a4:be:91:41:
62:f7:be:44:d8:2f:79:e1:ce:8c:ef:7a:a1:fa:ca:25:66:7d:
0f:e9:67:67:d0:89:1f:95:a6:d8:b4:6a:a9:62:2a:ca:a3:96:
ae:91:40:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:03:32 2026 by rpki-client