Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: 0v+XvbE/9t6SsXtaxvM3qWZKZxM+Bomv5ig7IHSTBWs=
Subject key identifier: AB:0E:8D:8A:39:60:9D:7C:AC:6B:15:E4:88:2F:61:B7:F3:41:20:91
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 01A18D54B7A6D62CF51C9187DA3D3744FC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 1ACE
Signing time: Fri 30 Oct 2026 15:01:41 +0000
Manifest this update: Fri 30 Oct 2026 15:01:41 +0000
Manifest next update: Sat 31 Oct 2026 15:01:41 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: msriX6yrX9bCI9NzGIDSYJmtpFK5L5/rJzavzWu2z9s=)
2: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (hash: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 15:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:54:b7:a6:d6:2c:f5:1c:91:87:da:3d:37:44:fc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Oct 30 15:01:41 2026 GMT
Not After : Oct 31 15:01:41 2026 GMT
Subject: CN=ab0e8d8a39609d7cac6b15e4882f61b7f3412091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:ec:5b:cf:ba:5a:ad:24:df:56:af:c8:7b:
41:0d:f5:d9:41:af:39:a4:b7:72:80:66:24:ae:64:
85:13:60:d6:1a:9d:16:ea:3c:87:94:74:a1:ad:89:
3d:7e:e6:05:20:0a:09:f7:31:cc:d0:e2:dd:42:9f:
95:6f:54:92:fb:d7:b0:38:1f:fc:32:7a:91:1e:11:
4f:91:68:ed:20:6d:e1:4a:ef:8d:2d:07:77:a7:79:
91:6d:c6:90:58:52:96:26:09:34:3e:03:1d:ce:c5:
0e:bb:ee:95:62:0e:34:92:c8:d0:d5:7d:dd:8b:f7:
c7:3a:e3:a1:1d:e3:ad:a9:c0:50:bd:af:52:17:6c:
a8:d4:4e:5f:32:96:31:a5:2e:43:90:77:71:eb:a1:
56:86:bf:b7:8f:ee:2b:24:d0:91:bd:54:f0:77:27:
d3:cf:65:d7:27:ed:3d:21:25:dd:4e:c4:ad:9b:9f:
d7:48:81:d7:25:db:fb:81:74:37:61:f2:b9:80:d7:
b0:3a:ab:7e:b2:7d:55:73:84:a3:95:47:70:3b:9a:
31:e0:44:0a:9a:e8:92:9f:17:c1:e4:fe:d6:29:03:
63:48:b8:0a:54:f8:b3:68:1f:66:66:c9:46:fd:e3:
e3:20:f2:c9:a3:38:4a:3e:1d:1a:c7:7e:b5:e9:9d:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0E:8D:8A:39:60:9D:7C:AC:6B:15:E4:88:2F:61:B7:F3:41:20:91
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d8:ce:8b:9e:96:59:6d:d9:c1:95:d0:1e:48:38:ab:e2:bf:
9a:83:1a:cf:af:7d:9d:e0:b4:ad:8e:2d:1f:b7:36:71:a4:3b:
a3:5e:f9:73:3b:74:b1:da:37:06:f4:8a:e1:c0:55:80:e1:b0:
b0:2c:07:25:c9:0c:6a:eb:26:f4:b5:66:bc:c8:43:c4:c8:e7:
62:92:01:9d:1e:9a:16:64:9f:dd:4b:dc:53:3d:0c:fc:42:c2:
57:32:c7:c6:a7:ac:f2:47:54:7c:15:ef:00:b2:92:09:45:5e:
15:8d:50:96:49:74:59:04:d3:bc:12:b7:2c:b8:93:55:67:05:
7a:38:6a:98:71:59:7a:6c:53:8f:1a:50:98:6f:52:62:98:ec:
54:c8:4c:36:87:14:a4:d3:0f:37:4b:c7:36:67:5c:c9:66:eb:
76:de:3d:5d:b2:78:8a:b2:92:bc:e9:19:02:aa:77:e2:c2:15:
c4:57:c8:58:a9:04:65:e9:9e:83:cd:b3:ea:a8:15:db:c3:74:
27:bc:aa:02:55:10:49:79:72:70:5b:46:cf:90:07:b1:27:70:
2c:22:8a:d8:9a:bb:d8:64:24:28:33:9e:91:d3:27:e2:bb:41:
fd:82:ea:91:7d:71:ef:ab:bd:34:a6:7d:cd:a1:58:66:92:11:
9d:2b:09:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGNVLem1iz1HJGH2j03RPyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3
MGIxZmEwHhcNMjYxMDMwMTUwMTQxWhcNMjYxMDMxMTUwMTQxWjAzMTEwLwYDVQQD
EyhhYjBlOGQ4YTM5NjA5ZDdjYWM2YjE1ZTQ4ODJmNjFiN2YzNDEyMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4XsW8+6Wq0k31avyHtBDfXZQa85
pLdygGYkrmSFE2DWGp0W6jyHlHShrYk9fuYFIAoJ9zHM0OLdQp+Vb1SS+9ewOB/8
MnqRHhFPkWjtIG3hSu+NLQd3p3mRbcaQWFKWJgk0PgMdzsUOu+6VYg40ksjQ1X3d
i/fHOuOhHeOtqcBQva9SF2yo1E5fMpYxpS5DkHdx66FWhr+3j+4rJNCRvVTwdyfT
z2XXJ+09ISXdTsStm5/XSIHXJdv7gXQ3YfK5gNewOqt+sn1Vc4SjlUdwO5ox4EQK
muiSnxfB5P7WKQNjSLgKVPizaB9mZslG/ePjIPLJozhKPh0ax3616Z1+lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsOjYo5YJ18rGsV5IgvYbfzQSCRMB8GA1UdIwQY
MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It
ODU0OTMwNDZlYzQ2LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2
LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENjOi56W
WW3ZwZXQHkg4q+K/moMaz699neC0rY4tH7c2caQ7o175czt0sdo3BvSK4cBVgOGw
sCwHJckMausm9LVmvMhDxMjnYpIBnR6aFmSf3UvcUz0M/ELCVzLHxqes8kdUfBXv
ALKSCUVeFY1Qlkl0WQTTvBK3LLiTVWcFejhqmHFZemxTjxpQmG9SYpjsVMhMNocU
pNMPN0vHNmdcyWbrdt49XbJ4irKSvOkZAqp34sIVxFfIWKkEZemeg82z6qgV28N0
J7yqAlUQSXlycFtGz5AHsSdwLCKK2Jq72GQkKDOekdMn4rtB/YLqkX1x76u9NKZ9
zaFYZpIRnSsJMg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:26 2026 by rpki-client