Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json)
Hash identifier: osUTi7AwMQueb5X7U08PSegRH4QCsX3fc+YEiBRjzCI=
Subject key identifier: 8E:96:C0:70:2B:D2:D3:49:A9:2D:30:E1:57:84:3C:AF:47:49:D0:29
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 019D39E5673F5110386F6D77682538EA8CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
Manifest number: 0848
Signing time: Sun 29 Mar 2026 14:00:28 +0000
Manifest this update: Sun 29 Mar 2026 14:00:28 +0000
Manifest next update: Mon 30 Mar 2026 14:00:28 +0000
Files and hashes: 1: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: r5q1LcSmyaLmWQo8GWxK6QxThzJkWsyKEfG6poYEbhw=)
2: gKAUH3NhBegxnJoZ26FHTf-Ouv4.roa (hash: Y4dcQaDXyPAK+Bl2p4bGnOEjKSjqyIaeaExs7HHzXGs=)
3: xsQ8oOOW_FcrVFhboB2kGQU3HJc.asa (hash: QNXjyWn6lE7GMMmcUKsY6cXFAZGIY8GIMMUcGL7t6cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:67:3f:51:10:38:6f:6d:77:68:25:38:ea:8c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: Mar 29 14:00:28 2026 GMT
Not After : Mar 30 14:00:28 2026 GMT
Subject: CN=8e96c0702bd2d349a92d30e157843caf4749d029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:8b:27:5f:b6:31:12:e7:bf:e4:24:6b:65:
d4:b4:65:05:0c:82:7a:fc:17:02:5d:11:af:e2:6b:
49:f8:56:c6:70:10:33:1c:86:bb:f3:6a:55:e8:45:
c4:86:ad:33:8f:29:b9:ca:6f:e4:c8:91:3b:37:ce:
dd:b7:1c:79:33:43:34:1d:d1:ce:7e:c6:e1:7c:fc:
1f:f0:b1:39:26:46:7f:15:8a:30:3e:5a:ed:3c:b8:
91:16:a8:21:e7:76:ce:ab:59:99:f6:e5:ad:c9:0c:
69:47:7e:3d:e6:4e:35:de:7c:28:be:34:e8:56:ba:
2e:76:b4:76:90:82:18:6c:08:b0:49:8d:1b:01:66:
59:62:6b:3e:24:26:95:6c:c7:9e:62:4f:62:a8:92:
65:3b:40:92:20:37:95:34:cc:38:86:5d:cb:4e:f4:
b6:8f:20:e5:9f:3c:5b:11:4e:e0:eb:2e:ef:e6:39:
25:e1:e4:bd:17:40:33:67:e1:d7:fd:d0:06:ca:36:
a3:cd:13:c6:e1:ba:d2:d8:83:b1:70:90:6d:4a:52:
f3:b1:af:15:29:35:3a:9e:a9:5b:f2:45:5f:d0:89:
98:4b:05:51:fd:b9:eb:b4:f3:57:8f:63:18:fa:6d:
d7:90:05:8d:e4:a5:bb:96:65:5f:79:7a:95:bd:82:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:C0:70:2B:D2:D3:49:A9:2D:30:E1:57:84:3C:AF:47:49:D0:29
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:92:a7:ab:07:ef:b3:64:2d:42:ff:b9:ec:c4:d0:85:7f:ad:
a4:f3:76:d8:87:4a:b8:79:9d:5c:62:d0:f1:e0:2a:cf:c2:0c:
07:7e:51:56:34:d0:25:54:fb:97:7d:86:08:9c:73:e1:a9:52:
2a:60:30:d3:91:27:4b:11:56:51:41:a3:aa:66:54:58:c1:8a:
e5:fa:c5:e0:01:71:dd:b8:24:b8:0f:16:46:3d:be:bf:28:84:
10:c0:e6:a7:73:73:1c:f1:ad:87:16:1e:2c:3c:49:b6:48:61:
a6:4d:de:5b:91:19:1c:a0:66:ae:92:56:85:79:a1:5a:9c:a3:
c1:22:77:fb:77:7e:af:ca:43:ad:25:04:cf:08:f4:ef:76:96:
3e:4b:44:ef:9a:0c:a2:31:46:a5:f8:be:b4:34:8b:1d:ab:a1:
c6:7c:8a:76:e3:bf:04:0e:06:1b:c4:70:f9:b6:b5:a9:97:90:
9d:07:ef:09:72:90:30:2b:32:27:95:f1:31:0f:ea:b7:15:ca:
4b:25:23:56:6e:87:6f:0d:e4:ae:d6:eb:61:28:b7:f5:8e:02:
88:dc:64:c9:9e:c9:dd:55:64:c4:11:67:63:bc:cd:93:a6:66:
ee:84:be:cb:c2:33:8c:e2:12:34:38:d4:00:10:7d:a9:7f:9a:
21:76:c7:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055Wc/URA4b213aCU46ozGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDc3OTY5YThiNmE1NWM0NjFhZGRlMTA2YzAwNjQ4NmEy
NjM1OWYwHhcNMjYwMzI5MTQwMDI4WhcNMjYwMzMwMTQwMDI4WjAzMTEwLwYDVQQD
Eyg4ZTk2YzA3MDJiZDJkMzQ5YTkyZDMwZTE1Nzg0M2NhZjQ3NDlkMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPKLJ1+2MRLnv+Qka2XUtGUFDIJ6
/BcCXRGv4mtJ+FbGcBAzHIa782pV6EXEhq0zjym5ym/kyJE7N87dtxx5M0M0HdHO
fsbhfPwf8LE5JkZ/FYowPlrtPLiRFqgh53bOq1mZ9uWtyQxpR3495k413nwovjTo
VroudrR2kIIYbAiwSY0bAWZZYms+JCaVbMeeYk9iqJJlO0CSIDeVNMw4hl3LTvS2
jyDlnzxbEU7g6y7v5jkl4eS9F0AzZ+HX/dAGyjajzRPG4brS2IOxcJBtSlLzsa8V
KTU6nqlb8kVf0ImYSwVR/bnrtPNXj2MY+m3XkAWN5KW7lmVfeXqVvYLG3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6WwHAr0tNJqS0w4VeEPK9HSdApMB8GA1UdIwQY
MBaAFAcHeWmotqVcRhrd4QbABkhqJjWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yMzIwNDctYjJlOC00ZmJhLWJkZDUt
YzNmZWM0NWVkMDU2LzEvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yMzIwNDctYjJlOC00ZmJhLWJkZDUtYzNmZWM0NWVkMDU2
LzEvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJKnqwfv
s2QtQv+57MTQhX+tpPN22IdKuHmdXGLQ8eAqz8IMB35RVjTQJVT7l32GCJxz4alS
KmAw05EnSxFWUUGjqmZUWMGK5frF4AFx3bgkuA8WRj2+vyiEEMDmp3NzHPGthxYe
LDxJtkhhpk3eW5EZHKBmrpJWhXmhWpyjwSJ3+3d+r8pDrSUEzwj073aWPktE75oM
ojFGpfi+tDSLHauhxnyKduO/BA4GG8Rw+ba1qZeQnQfvCXKQMCsyJ5XxMQ/qtxXK
SyUjVm6Hbw3krtbrYSi39Y4CiNxkyZ7J3VVkxBFnY7zNk6Zm7oS+y8IzjOISNDjU
ABB9qX+aIXbHxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:38 2026 by rpki-client