Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
File: BWI7XxpkurkqlS0sw26EuDAXRis.mft (raw, json)
Hash identifier: KEztGj3/KSHrZf5j8oSATczKC0nAlJLxxCEFZOKElis=
Subject key identifier: 21:D0:57:97:5C:06:57:45:AA:66:B8:66:CA:FB:38:F3:48:09:D2:19
Authority key identifier: 05:62:3B:5F:1A:64:BA:B9:2A:95:2D:2C:C3:6E:84:B8:30:17:46:2B
Certificate issuer: /CN=05623b5f1a64bab92a952d2cc36e84b83017462b
Certificate serial: 01A160E9C3FEFA80B71B8CB06BF8BA79DFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWI7XxpkurkqlS0sw26EuDAXRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
Manifest number: 0130
Signing time: Thu 22 Oct 2026 00:01:35 +0000
Manifest this update: Thu 22 Oct 2026 00:01:35 +0000
Manifest next update: Fri 23 Oct 2026 00:01:35 +0000
Files and hashes: 1: BWI7XxpkurkqlS0sw26EuDAXRis.crl (hash: NK9F99sXK8+nkEcQOyxwyXgQqhpNSzw8XXXNwWgkVgM=)
2: JT-saWQFCpCIW-ieMRKXLLACWY0.roa (hash: oKK3L7+PDPyxkgEA4KB0NmXCZ5WOvuec1r4FwhGlfuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWI7XxpkurkqlS0sw26EuDAXRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e9:c3:fe:fa:80:b7:1b:8c:b0:6b:f8:ba:79:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05623b5f1a64bab92a952d2cc36e84b83017462b
Validity
Not Before: Oct 22 00:01:35 2026 GMT
Not After : Oct 23 00:01:35 2026 GMT
Subject: CN=21d057975c065745aa66b866cafb38f34809d219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:ff:0b:14:01:b0:f9:fa:65:da:ad:55:98:
10:3e:02:e9:58:8b:d6:32:92:33:43:a8:70:a8:2e:
9b:fb:b2:ce:53:40:ff:0f:64:83:fd:b2:e2:f7:68:
5c:19:a8:c3:9c:53:36:8b:ea:ec:c0:db:1a:20:9c:
58:b5:87:b8:d2:a2:45:4e:dc:67:63:5d:55:2e:5d:
b0:92:bc:5c:4a:13:23:d5:bd:18:cf:2c:11:d5:4d:
c2:56:64:c3:95:03:55:a9:0d:b7:4c:ad:ef:29:66:
59:df:af:1b:4c:e0:8d:a0:ac:fd:ef:90:0b:ab:84:
31:14:08:25:6e:d3:3c:06:b4:22:d5:22:ba:09:e5:
30:c5:8c:ac:e8:75:ae:d4:14:a6:8c:df:bb:7b:aa:
8e:b3:ad:51:78:a9:f0:89:88:0f:09:b4:bb:ed:6d:
30:e6:f3:99:68:d9:24:65:ac:6c:29:28:70:ac:ed:
af:24:58:22:94:c2:bd:38:6d:bf:e0:4d:8f:61:94:
e5:b7:92:64:a8:f9:45:b3:72:ba:96:67:93:a6:bf:
1f:fa:5d:8b:a7:73:76:ac:0a:f2:37:e2:e7:ab:65:
d9:64:b3:77:3a:1f:db:60:56:89:47:3b:a9:f8:67:
47:bf:88:a8:a4:5b:dd:6a:38:b8:9f:3b:15:0c:f2:
e6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:57:97:5C:06:57:45:AA:66:B8:66:CA:FB:38:F3:48:09:D2:19
X509v3 Authority Key Identifier:
keyid:05:62:3B:5F:1A:64:BA:B9:2A:95:2D:2C:C3:6E:84:B8:30:17:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWI7XxpkurkqlS0sw26EuDAXRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ef:f9:3d:a0:15:78:d9:62:23:83:86:fc:09:2f:59:04:e5:
28:40:10:4c:38:74:1f:f1:db:57:0f:c7:9f:d8:a0:d2:8e:8a:
2c:45:11:ec:a9:67:38:5a:6c:a6:2e:a9:53:37:27:e9:f7:03:
3b:f8:96:98:b9:a3:c6:2a:83:ac:d8:53:7b:a1:23:62:5e:57:
76:97:28:7c:4d:30:83:ba:ee:1f:40:63:9e:33:93:17:7d:fc:
5a:c0:e4:17:39:12:eb:8c:0b:fa:70:92:4f:fb:3a:56:05:ed:
a9:b8:d2:29:06:93:58:39:1a:75:f2:f8:17:3a:07:2b:d2:84:
43:ea:5c:cc:9d:f3:b4:08:86:37:09:1d:58:fe:07:7b:48:84:
87:12:7d:58:d9:2e:e4:09:8b:d6:5c:fd:aa:36:46:b3:98:d0:
1d:35:a1:88:38:c6:0c:c5:51:a6:bf:e5:60:d4:9e:c9:46:b3:
b0:b7:e8:b9:b0:55:dd:dc:40:d5:d2:8f:b4:8d:f4:b7:ed:67:
59:43:5f:07:89:6d:b4:4f:97:7b:e3:72:f2:f6:1b:d9:12:6a:
98:96:38:37:d5:fe:81:4c:50:89:ac:f1:a0:d1:2e:8e:1a:89:
8d:dc:fe:60:18:c7:41:29:f3:37:55:62:08:ab:aa:48:5d:ab:
94:ef:2c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:55:54 2026 by rpki-client