Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier: tNnuYAoQSZLF3bT5WR/Sp2FBRyXBg9iO3TAkdgoyW58=
Subject key identifier: 64:9F:63:8D:BA:C3:7B:03:D4:F1:DD:79:7F:F4:85:08:92:E4:DD:4C
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 01A03DBB56E77D7FD113CFEAEB94EBD8362B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number: 1255
Signing time: Wed 26 Aug 2026 11:01:22 +0000
Manifest this update: Wed 26 Aug 2026 11:01:22 +0000
Manifest next update: Thu 27 Aug 2026 11:01:22 +0000
Files and hashes: 1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: m1WCL/nH8BKIg1AlNnWdylkBoGhSqTWzCPiHozJmhNM=)
5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:bb:56:e7:7d:7f:d1:13:cf:ea:eb:94:eb:d8:36:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Aug 26 11:01:22 2026 GMT
Not After : Aug 27 11:01:22 2026 GMT
Subject: CN=649f638dbac37b03d4f1dd797ff4850892e4dd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:81:0a:de:b0:20:8c:b7:ee:c9:e7:ec:90:
a5:78:69:4c:33:7f:dd:c3:2d:f3:8b:33:e3:e8:34:
2f:1c:68:45:79:59:2a:58:cf:e6:f2:a4:e0:81:f7:
ee:a6:c9:a8:24:d0:15:0f:66:1d:55:5f:34:ac:e4:
90:3b:72:f6:d8:43:20:2f:69:5b:1b:8e:16:83:fd:
be:65:a3:a8:aa:22:8f:0e:17:13:42:2c:9f:83:cc:
99:4c:57:d0:1c:01:e2:7e:f9:47:18:04:29:e0:a7:
f9:ff:82:c4:22:d5:e6:7a:57:db:77:33:db:11:89:
78:ec:9d:ec:b6:c7:a3:2a:33:3f:70:48:cf:87:37:
a2:0a:29:f3:01:8f:55:bb:f2:ff:61:65:96:22:e5:
91:0e:25:fd:7e:46:f0:64:2a:27:17:0d:4f:68:04:
36:44:b0:87:a5:32:26:fd:de:33:2d:1a:39:91:86:
fa:d7:6a:5b:59:43:63:33:56:af:67:a2:27:3f:8a:
ae:f8:c8:f8:55:ee:20:2a:c5:5f:8d:f7:ba:a3:cd:
4e:b4:91:59:59:98:07:c5:36:fa:e8:3a:53:14:6b:
70:d8:00:86:aa:b3:90:e9:67:55:45:53:74:99:f2:
da:16:83:57:86:72:4a:3c:3b:87:86:7f:1e:7b:8c:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9F:63:8D:BA:C3:7B:03:D4:F1:DD:79:7F:F4:85:08:92:E4:DD:4C
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c9:7f:cd:03:e7:9c:04:a9:54:67:5e:28:ba:97:59:b2:20:
4a:4a:a6:34:89:52:ab:8d:a0:e8:87:7d:31:57:2b:bc:d8:cb:
34:2a:7c:2e:97:a4:ec:9b:e7:89:0b:41:c5:3e:08:ca:2b:7f:
43:e1:05:1f:1b:c7:f9:7b:62:37:3d:a7:30:a7:0c:60:25:7b:
0e:22:38:07:27:20:f3:6c:89:72:13:85:79:a0:a8:db:d2:f8:
0a:8c:4c:89:7d:fa:35:64:36:b4:c1:af:dc:43:be:95:fc:79:
73:95:d0:d7:ba:fa:ea:50:9d:a5:5f:40:57:ad:7f:ea:8c:a9:
03:7b:42:33:b3:23:73:8b:9f:f0:fd:0c:c4:83:6d:a7:4e:56:
05:ae:d4:48:59:3c:94:d7:30:02:a5:05:2f:8f:5f:2d:82:f5:
2b:a5:08:98:a6:e9:36:11:5f:52:11:4d:5c:cd:87:15:4e:16:
4c:19:9b:9a:50:11:44:60:b2:bc:0e:d2:6d:de:cc:65:ba:1b:
e1:90:9e:4b:64:63:0b:d4:04:58:83:89:d3:b0:e3:0c:49:e3:
b9:37:d2:85:84:c8:64:d6:55:ec:f5:a3:cf:47:9f:75:f0:3e:
6b:0c:d3:75:59:95:73:d8:b9:43:da:fc:8b:68:89:45:41:44:
9b:75:4f:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA9u1bnfX/RE8/q65Tr2DYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjYwODI2MTEwMTIyWhcNMjYwODI3MTEwMTIyWjAzMTEwLwYDVQQD
Eyg2NDlmNjM4ZGJhYzM3YjAzZDRmMWRkNzk3ZmY0ODUwODkyZTRkZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkeBCt6wIIy37snn7JCleGlMM3/d
wy3zizPj6DQvHGhFeVkqWM/m8qTggffupsmoJNAVD2YdVV80rOSQO3L22EMgL2lb
G44Wg/2+ZaOoqiKPDhcTQiyfg8yZTFfQHAHifvlHGAQp4Kf5/4LEItXmelfbdzPb
EYl47J3stsejKjM/cEjPhzeiCinzAY9Vu/L/YWWWIuWRDiX9fkbwZConFw1PaAQ2
RLCHpTIm/d4zLRo5kYb612pbWUNjM1avZ6InP4qu+Mj4Ve4gKsVfjfe6o81OtJFZ
WZgHxTb66DpTFGtw2ACGqrOQ6WdVRVN0mfLaFoNXhnJKPDuHhn8ee4xyQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSfY426w3sD1PHdeX/0hQiS5N1MMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8l/zQPn
nASpVGdeKLqXWbIgSkqmNIlSq42g6Id9MVcrvNjLNCp8Lpek7JvniQtBxT4Iyit/
Q+EFHxvH+XtiNz2nMKcMYCV7DiI4Bycg82yJchOFeaCo29L4CoxMiX36NWQ2tMGv
3EO+lfx5c5XQ17r66lCdpV9AV61/6oypA3tCM7Mjc4uf8P0MxINtp05WBa7USFk8
lNcwAqUFL49fLYL1K6UImKbpNhFfUhFNXM2HFU4WTBmbmlARRGCyvA7Sbd7MZbob
4ZCeS2RjC9QEWIOJ07DjDEnjuTfShYTIZNZV7PWjz0efdfA+awzTdVmVc9i5Q9r8
i2iJRUFEm3VPqQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:31:29 2026 by rpki-client