Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: c109vEbv+LEebEhnMGHMXB5DXAMxrBblCmCb6AqQy+k=
Subject key identifier: 46:68:D3:45:8C:22:34:9A:D2:0D:BD:0A:80:16:29:F0:8D:07:CC:A6
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 019DCD8780AAFB27BBDC17C100DD25BE2B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 06:01:42 +0000
Manifest this update: Mon 27 Apr 2026 06:01:42 +0000
Manifest next update: Tue 28 Apr 2026 06:01:42 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: AKlemjFF9ty3K3ffZxK0jBdxKXrKRoc4FQdu0Bv11js=)
2: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (hash: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:80:aa:fb:27:bb:dc:17:c1:00:dd:25:be:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Apr 27 06:01:42 2026 GMT
Not After : Apr 28 06:01:42 2026 GMT
Subject: CN=4668d3458c22349ad20dbd0a801629f08d07cca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:79:50:3c:cf:4e:72:61:27:e9:9e:cd:a9:
67:a9:96:ee:fd:ef:5e:fc:b1:be:99:45:1d:62:11:
0b:58:a9:a7:18:b5:eb:5d:5b:d2:39:10:94:cf:bf:
27:fb:07:1d:80:e0:ce:07:67:5f:31:18:c0:e7:95:
b5:57:f4:c9:7a:f5:12:dc:c4:a0:b0:6e:21:14:75:
42:06:38:a4:5a:58:ac:3d:a4:7c:cd:e7:d6:6b:0b:
68:de:b8:96:e0:e0:0c:00:c5:e5:17:db:ff:df:b0:
0b:51:37:7f:8f:e5:20:4a:0a:74:89:88:9b:fc:34:
56:85:fe:6a:71:19:ec:c0:dd:d2:3c:b3:24:b2:8d:
6d:28:92:c8:b4:90:c4:43:5b:ea:c0:9b:64:1d:8e:
dd:62:df:5d:dc:7f:fc:55:fd:33:22:c3:36:da:e9:
0d:40:92:79:8f:d7:2d:7e:d9:f7:8c:ee:e9:d2:bf:
f1:28:8b:e3:50:c4:8e:3f:a9:7e:5c:c5:7c:6a:de:
f5:6f:e7:1f:e7:17:8b:0b:c1:b5:f2:de:6f:d9:04:
4f:7b:4c:56:ae:55:3d:c0:e0:45:bf:30:33:98:d0:
c1:8d:dd:24:cb:68:79:c4:0d:4f:62:22:3e:6c:8b:
6b:b4:14:cc:b4:df:ba:08:04:20:71:2c:fc:fb:2e:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:D3:45:8C:22:34:9A:D2:0D:BD:0A:80:16:29:F0:8D:07:CC:A6
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b1:bf:ac:a3:a1:db:56:50:96:5e:cb:f5:17:5d:0a:ae:e8:
47:9b:c4:3d:39:02:78:90:56:fe:23:ea:cb:b9:af:c0:6a:5e:
a7:cc:20:e3:a7:6d:f5:df:b7:b7:48:c7:98:09:96:56:5e:0b:
e9:19:b9:93:5d:98:36:0e:91:8a:07:3a:73:79:04:e7:df:a9:
52:3c:50:24:0b:ed:5b:29:71:75:b7:2c:eb:b8:82:50:55:7f:
58:79:59:6d:5d:d2:a5:81:d4:d0:98:5b:ff:e6:c6:de:ac:d1:
a8:9d:24:45:a3:01:6b:8a:e9:f9:b7:c7:cf:2d:a5:0f:86:b7:
cb:31:30:b2:ba:1e:5b:33:de:79:35:d0:20:f0:71:ed:91:eb:
b4:4f:24:6b:ae:f7:6b:1c:3c:b8:2f:5c:03:fd:7f:85:2d:3b:
8b:b3:c0:4f:32:e7:98:35:95:fe:38:ed:54:0e:53:a0:09:80:
a0:c9:53:39:d3:2c:f8:aa:78:03:da:08:af:c5:d7:f3:f7:89:
b6:c9:5a:db:7e:b6:ff:1d:cb:4a:60:e8:65:c7:22:a8:51:20:
9e:0d:fc:13:24:c1:c2:91:0e:6c:43:52:ef:b5:81:0a:14:a2:
e0:32:15:67:1d:d6:f7:fd:21:bf:9f:b7:9f:8c:a0:78:47:69:
d6:87:28:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Nh4Cq+ye73BfBAN0lvitmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3
MGIxZmEwHhcNMjYwNDI3MDYwMTQyWhcNMjYwNDI4MDYwMTQyWjAzMTEwLwYDVQQD
Eyg0NjY4ZDM0NThjMjIzNDlhZDIwZGJkMGE4MDE2MjlmMDhkMDdjY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHh5UDzPTnJhJ+mezalnqZbu/e9e
/LG+mUUdYhELWKmnGLXrXVvSORCUz78n+wcdgODOB2dfMRjA55W1V/TJevUS3MSg
sG4hFHVCBjikWlisPaR8zefWawto3riW4OAMAMXlF9v/37ALUTd/j+UgSgp0iYib
/DRWhf5qcRnswN3SPLMkso1tKJLItJDEQ1vqwJtkHY7dYt9d3H/8Vf0zIsM22ukN
QJJ5j9ctftn3jO7p0r/xKIvjUMSOP6l+XMV8at71b+cf5xeLC8G18t5v2QRPe0xW
rlU9wOBFvzAzmNDBjd0ky2h5xA1PYiI+bItrtBTMtN+6CAQgcSz8+y5gTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZo00WMIjSa0g29CoAWKfCNB8ymMB8GA1UdIwQY
MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It
ODU0OTMwNDZlYzQ2LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2
LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLG/rKOh
21ZQll7L9RddCq7oR5vEPTkCeJBW/iPqy7mvwGpep8wg46dt9d+3t0jHmAmWVl4L
6Rm5k12YNg6Rigc6c3kE59+pUjxQJAvtWylxdbcs67iCUFV/WHlZbV3SpYHU0Jhb
/+bG3qzRqJ0kRaMBa4rp+bfHzy2lD4a3yzEwsroeWzPeeTXQIPBx7ZHrtE8ka673
axw8uC9cA/1/hS07i7PATzLnmDWV/jjtVA5ToAmAoMlTOdMs+Kp4A9oIr8XX8/eJ
tsla2362/x3LSmDoZcciqFEgng38EyTBwpEObENS77WBChSi4DIVZx3W9/0hv5+3
n4ygeEdp1ocoPw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:14 2026 by rpki-client