Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: sS6ccHepZZCBzsV5k6WMDPzH1a+HETeb1kDURV5i0Ts=
Subject key identifier: 84:CE:3C:23:67:B9:51:E5:4A:4B:41:F2:46:71:92:1A:09:56:66:CD
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 01A08A8CFA447145E60B9B1EA704E8C394AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 09:01:29 +0000
Manifest this update: Thu 10 Sep 2026 09:01:29 +0000
Manifest next update: Fri 11 Sep 2026 09:01:29 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: SttVwuShEaZqQvFVOXIE5tpUI9u4OFbdtT/L9giRypg=)
2: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (hash: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:fa:44:71:45:e6:0b:9b:1e:a7:04:e8:c3:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Sep 10 09:01:29 2026 GMT
Not After : Sep 11 09:01:29 2026 GMT
Subject: CN=84ce3c2367b951e54a4b41f24671921a095666cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:17:06:34:10:6c:e1:00:b8:c5:3d:bb:89:
b0:40:51:ff:51:62:ee:7f:8b:3a:a7:dd:19:11:64:
de:5e:c3:ef:4a:d8:e9:ef:93:ef:15:41:fa:b7:18:
bd:17:b0:80:7f:69:a3:f0:1c:ec:b9:35:fe:f8:6b:
9a:81:70:6f:1a:06:f6:11:01:5f:8b:7e:9d:2e:52:
8e:80:65:4e:ef:9d:f2:72:c7:50:85:93:39:e9:c6:
22:1f:d8:ed:60:bb:bb:00:a1:7f:ad:76:84:f2:26:
26:e4:82:e8:25:14:d2:30:9d:4b:d7:22:b4:18:cb:
90:bf:bb:17:9e:57:df:8a:ae:95:5b:d3:22:d0:35:
a4:c1:17:f7:70:d9:f9:2e:e6:c1:60:49:79:71:38:
a9:38:2b:ed:96:e1:a4:95:07:29:38:dd:9c:e8:9d:
ee:4d:cd:b8:93:54:e6:d4:fb:55:34:20:7c:1b:bb:
da:bf:25:d5:11:aa:48:82:27:c8:b5:de:7f:57:1b:
2d:58:c8:4d:45:85:d3:cc:0b:da:32:52:28:d2:ae:
0e:ab:aa:ed:61:54:87:75:be:0c:bf:7a:1c:9c:e7:
28:c6:f8:25:a4:ce:46:3c:ba:62:97:fe:9b:cf:36:
18:5a:05:0b:b0:94:1c:fe:97:62:a7:4d:9e:3c:57:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:3C:23:67:B9:51:E5:4A:4B:41:F2:46:71:92:1A:09:56:66:CD
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e7:c7:b5:d5:65:95:71:ff:e4:c9:e5:14:c8:40:96:7d:d5:
e8:80:98:6c:0a:7e:98:02:0b:fb:cd:46:6e:26:52:c0:7f:17:
5b:54:6a:7b:7f:48:15:ef:15:86:13:31:24:e3:40:d1:4e:4f:
f5:30:17:56:8e:0f:5a:2b:bf:dc:9b:48:78:a9:ff:6b:1e:2f:
71:39:bd:f9:2d:2a:69:9c:8d:32:5d:01:ed:2c:a9:ef:98:10:
f9:7e:90:1b:ef:4b:6b:26:18:16:ea:a6:72:e3:bc:5c:8c:4b:
16:65:ae:87:0c:e1:95:f4:4a:22:98:1e:c9:96:95:8f:fa:86:
4a:a6:58:d0:aa:19:56:fb:e2:97:71:fc:59:85:2b:63:06:6e:
35:2b:2f:18:b0:8a:57:8e:06:d7:b4:ad:68:4e:d0:ab:6b:fa:
75:e3:63:58:cf:a9:68:23:8a:44:c3:de:16:09:68:ad:49:80:
f7:7b:4e:11:8b:1b:a9:21:57:9a:c5:91:c2:44:2b:ec:a5:3d:
42:13:25:e6:69:a4:b4:e1:c0:ad:0b:2b:94:b5:30:93:32:97:
54:33:a4:ce:a2:98:eb:46:99:4e:0c:85:3f:93:f8:eb:94:5b:
c5:1a:ac:66:7a:e0:5d:4d:e5:04:25:b0:fa:50:91:74:ef:56:
f4:c3:b8:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjPpEcUXmC5sepwTow5SqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3
MGIxZmEwHhcNMjYwOTEwMDkwMTI5WhcNMjYwOTExMDkwMTI5WjAzMTEwLwYDVQQD
Eyg4NGNlM2MyMzY3Yjk1MWU1NGE0YjQxZjI0NjcxOTIxYTA5NTY2NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8IXBjQQbOEAuMU9u4mwQFH/UWLu
f4s6p90ZEWTeXsPvStjp75PvFUH6txi9F7CAf2mj8BzsuTX++GuagXBvGgb2EQFf
i36dLlKOgGVO753ycsdQhZM56cYiH9jtYLu7AKF/rXaE8iYm5ILoJRTSMJ1L1yK0
GMuQv7sXnlffiq6VW9Mi0DWkwRf3cNn5LubBYEl5cTipOCvtluGklQcpON2c6J3u
Tc24k1Tm1PtVNCB8G7vavyXVEapIgifItd5/VxstWMhNRYXTzAvaMlIo0q4Oq6rt
YVSHdb4Mv3ocnOcoxvglpM5GPLpil/6bzzYYWgULsJQc/pdip02ePFfX+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITOPCNnuVHlSktB8kZxkhoJVmbNMB8GA1UdIwQY
MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It
ODU0OTMwNDZlYzQ2LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2
LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARefHtdVl
lXH/5MnlFMhAln3V6ICYbAp+mAIL+81GbiZSwH8XW1Rqe39IFe8VhhMxJONA0U5P
9TAXVo4PWiu/3JtIeKn/ax4vcTm9+S0qaZyNMl0B7Syp75gQ+X6QG+9LayYYFuqm
cuO8XIxLFmWuhwzhlfRKIpgeyZaVj/qGSqZY0KoZVvvil3H8WYUrYwZuNSsvGLCK
V44G17StaE7Qq2v6deNjWM+paCOKRMPeFglorUmA93tOEYsbqSFXmsWRwkQr7KU9
QhMl5mmktOHArQsrlLUwkzKXVDOkzqKY60aZTgyFP5P465RbxRqsZnrgXU3lBCWw
+lCRdO9W9MO4ww==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:45:58 2026 by rpki-client