Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier: aZSmJHR9sh2n5OkDfdhRO+G3sMzl0HqY+7iXIBkcC0M=
Subject key identifier: 88:A0:37:1F:20:91:BF:49:3D:57:AF:2D:B3:F9:A4:67:14:4E:BA:46
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 01A17A7222A724168FB5350C1EFA61CA9838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number: 12F9
Signing time: Mon 26 Oct 2026 23:01:02 +0000
Manifest this update: Mon 26 Oct 2026 23:01:02 +0000
Manifest next update: Tue 27 Oct 2026 23:01:02 +0000
Files and hashes: 1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: +FWM8lEcyjf7zY/ttuQG9Dod658PYRoPkLb7nkHC2xU=)
5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:72:22:a7:24:16:8f:b5:35:0c:1e:fa:61:ca:98:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Oct 26 23:01:02 2026 GMT
Not After : Oct 27 23:01:02 2026 GMT
Subject: CN=88a0371f2091bf493d57af2db3f9a467144eba46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:8a:16:08:4d:e5:0a:4c:29:6f:87:9b:bd:
f4:7b:c1:73:df:9a:99:85:70:26:cd:ae:92:f1:54:
b0:af:11:c0:ab:4d:32:1b:9d:5f:93:56:db:bb:74:
41:71:68:03:f8:05:fd:4b:ff:ae:3d:f4:61:b3:7f:
62:7c:35:5f:c1:f1:51:79:37:fe:a4:12:6e:a6:06:
dc:42:e3:95:44:fa:ab:c3:f9:8e:70:16:83:5a:86:
2d:b1:36:37:a3:36:32:58:cb:46:c2:fd:63:3e:a7:
0f:32:20:64:cd:fa:84:24:a6:6f:93:88:28:a2:71:
5d:26:3d:d9:77:d1:fe:0b:5c:08:0d:05:d6:92:d0:
6e:4e:1a:c7:66:2a:d4:22:84:07:52:9a:a0:cd:70:
b8:45:ce:67:26:11:55:4e:e5:a4:e4:61:f9:b7:e1:
bf:95:d8:51:cd:34:40:07:34:39:79:97:1f:b4:4b:
54:86:dd:3c:f6:3d:29:d4:13:f4:d3:e2:27:9f:f8:
76:f0:0c:46:cd:99:12:2d:43:0d:4f:83:15:11:6c:
26:86:93:79:3a:46:06:88:56:be:51:25:76:77:5c:
bf:bb:a9:4d:88:62:fe:1e:2f:2e:bd:01:e7:55:71:
08:7c:c7:9d:60:56:3e:c4:3c:0d:80:41:e8:99:2d:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A0:37:1F:20:91:BF:49:3D:57:AF:2D:B3:F9:A4:67:14:4E:BA:46
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b1:c5:6d:25:f4:31:69:37:16:a4:1f:3b:d2:cc:b2:36:f8:
e3:ad:95:d8:f7:0a:1c:84:e6:28:2f:54:09:bf:d0:ff:54:c2:
7b:bc:1a:d5:64:c1:25:b5:2f:1e:ba:10:41:71:ae:83:26:2b:
40:73:8f:49:7f:8c:b7:0a:dc:80:a8:65:54:5a:a7:d7:af:06:
8c:b2:f8:db:dd:93:70:fd:f4:d5:fd:d5:f3:65:d2:5e:8f:c4:
d0:48:60:09:fa:ac:00:75:bc:55:43:87:ed:fe:48:e4:25:45:
f4:16:1a:d5:58:d5:81:32:4b:6d:81:be:cf:18:04:1b:61:7a:
e8:9f:3e:f7:c3:e9:c7:3b:9e:a8:64:5b:30:a4:5c:24:ea:72:
10:5d:8c:06:9d:f5:70:9f:b3:73:0b:df:bd:a9:d5:c9:a4:f6:
77:80:ee:99:23:19:59:96:55:96:a5:f4:2f:61:71:77:09:89:
2f:6d:df:29:e6:73:53:a8:b3:88:7f:07:7f:cf:96:f6:b4:a9:
96:d0:63:18:53:88:23:97:ba:db:e7:ac:2c:6f:22:70:40:72:
88:f7:62:cd:41:f7:e7:bc:47:51:9e:e4:cd:45:ef:28:3a:da:
c6:41:0d:18:e3:cf:78:70:c5:0e:ed:b1:0e:81:33:a3:6a:cd:
2e:c1:a0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:48:05 2026 by rpki-client