Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: H9yJP9IUoN6rOTWb9u0xlG4TrHX8wVqWGXncG7pRRgY=
Subject key identifier: 16:5C:E4:4C:8F:14:E1:7B:E9:D0:68:A9:5A:84:2A:61:5C:DF:75:D2
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 019CE3D9C0015D187B6D47BFBA665736857E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 21:00:24 +0000
Manifest this update: Thu 12 Mar 2026 21:00:24 +0000
Manifest next update: Fri 13 Mar 2026 21:00:24 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: KDM2rKgxZ1aLcu1xytbid5E3P7n5vGB3LGI8Qd0uyAU=)
2: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (hash: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:c0:01:5d:18:7b:6d:47:bf:ba:66:57:36:85:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Mar 12 21:00:24 2026 GMT
Not After : Mar 13 21:00:24 2026 GMT
Subject: CN=165ce44c8f14e17be9d068a95a842a615cdf75d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:f2:71:bd:47:d4:70:ba:73:ab:e1:6b:c4:
60:b0:cb:24:5f:29:b7:c1:cf:65:dc:35:8b:8d:b6:
eb:56:93:eb:f0:0f:8f:e3:0d:5c:c6:29:ea:d1:7d:
7c:52:99:c2:7b:42:ab:9f:46:33:c6:8b:d0:e1:db:
6e:7f:13:55:90:a7:65:7d:42:7b:6b:e6:48:70:62:
6a:6a:87:59:02:6e:61:f3:1b:4c:e6:5a:fe:fb:41:
af:fd:29:22:c7:e3:98:a1:be:85:a5:85:c4:b0:2e:
a3:76:09:ce:08:c0:20:09:94:26:75:d3:fb:95:cf:
3b:62:b9:4f:1e:fa:f9:c5:bb:7a:b8:ca:a4:1a:bf:
7b:14:c1:c4:62:b9:43:19:82:66:08:0b:49:4b:d9:
72:0d:18:07:94:bd:0c:bb:40:1f:85:16:e6:17:6d:
fa:13:97:0d:6f:5e:92:09:c0:6c:46:3d:cb:48:ba:
51:69:14:2c:41:a9:c8:ad:cc:2a:a0:32:7d:67:f1:
dc:41:0b:f7:11:fa:94:39:bb:dd:8a:9a:9d:24:6b:
89:e1:f8:78:8a:61:26:97:e6:e7:cb:35:fb:3e:ca:
37:6b:9b:16:a5:bd:c7:79:96:5d:7c:b4:90:cb:3a:
72:78:13:92:9e:ab:a6:f2:6a:ba:5f:c9:8e:60:dd:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:E4:4C:8F:14:E1:7B:E9:D0:68:A9:5A:84:2A:61:5C:DF:75:D2
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0e:c5:b3:f8:6a:bb:e4:bc:fa:f0:50:d5:81:fd:f6:9c:2a:
54:62:8c:e0:93:75:2d:ed:3a:71:77:a4:a4:23:aa:8d:2e:04:
e1:32:bd:23:61:93:92:f9:0c:e0:46:be:eb:bf:a3:18:ce:74:
e3:29:09:a9:d9:a2:24:48:4f:85:ca:41:84:6b:27:9d:ea:b0:
21:13:89:7d:c9:bb:e2:fe:0e:b5:68:e4:c9:80:bb:ce:a6:0f:
3f:d6:6c:38:7d:a7:ac:17:36:e5:9c:e3:2a:cb:05:8a:ed:66:
d2:22:53:67:4a:cc:be:f1:5f:41:cd:5b:9d:61:d1:06:00:80:
12:72:54:a7:64:50:1e:0f:56:1b:f1:89:62:6f:14:49:47:1e:
db:e3:ef:96:51:20:e0:d2:fb:5c:f7:55:e8:1f:b8:88:ed:f9:
6c:02:15:b5:37:c3:e1:7f:9a:b3:63:f0:fc:7c:90:c9:f2:87:
3a:52:14:cf:15:63:7f:11:3c:70:d7:0a:5d:9b:f2:ea:d5:6a:
a3:e2:72:ce:35:4b:30:fa:b2:e2:4b:28:04:00:2a:9b:a2:9e:
5a:10:b8:d7:a5:55:b7:e8:5a:aa:3f:6c:19:26:34:34:7a:0c:
e5:09:b1:9a:31:bd:fd:01:5f:fe:02:0a:67:34:f8:58:06:6c:
83:9e:bd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:53 2026 by rpki-client