Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier: 9ZGbre2sjz9PI9gDvfDBDD2fZVpx3FIXPFIJxuUDu0g=
Subject key identifier: 32:82:B7:20:C3:AD:75:60:1A:F1:6D:EF:25:6B:6A:E6:7F:0B:FC:27
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 019E4B7B793285DDD950251DDC78439065C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number: 1153
Signing time: Thu 21 May 2026 17:00:43 +0000
Manifest this update: Thu 21 May 2026 17:00:43 +0000
Manifest next update: Fri 22 May 2026 17:00:43 +0000
Files and hashes: 1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 5O2w1aBXuJeTrcbHDorgAmKkUvfDI/LNiccEBTkC5KE=)
5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 14:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:7b:79:32:85:dd:d9:50:25:1d:dc:78:43:90:65:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: May 21 17:00:43 2026 GMT
Not After : May 22 17:00:43 2026 GMT
Subject: CN=3282b720c3ad75601af16def256b6ae67f0bfc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:70:d3:69:7a:ae:ce:aa:d3:3e:b0:a3:db:
f2:32:3f:29:95:bd:4a:91:c7:fd:d9:b4:35:3b:81:
da:39:78:07:95:c6:92:73:05:06:92:0a:17:28:13:
e6:96:8d:d1:f2:7b:48:b1:0c:67:1f:1d:96:aa:ef:
52:73:19:0d:47:9e:15:8e:cd:f9:39:0e:b1:f9:8a:
8a:80:72:76:f6:1d:72:33:da:71:1e:c6:d0:11:72:
b5:1e:22:b3:90:33:c5:5e:e5:24:51:31:8e:96:63:
1a:e0:fc:42:b4:c9:c9:08:99:00:6b:c6:45:03:33:
78:10:4e:58:a4:35:4d:27:c1:dc:4e:2f:c0:cc:2e:
ff:0f:29:11:3f:f1:9d:d0:a1:a7:45:02:57:f3:29:
97:0d:13:5d:2d:23:4e:71:d7:9a:cb:07:ad:c4:2d:
6a:60:bb:5f:55:c5:3d:8a:3b:64:8b:f9:f1:c0:37:
eb:3c:b0:85:ae:ec:05:e9:dd:43:79:37:14:54:f0:
35:1a:e1:b1:3b:8d:1f:51:ec:08:12:42:25:14:ac:
a7:2f:63:03:31:3a:a7:90:ef:13:fa:61:e4:67:e3:
8b:72:2c:77:f4:92:1e:91:a6:36:f9:22:ef:9d:d4:
76:eb:07:87:95:a8:77:ae:4d:85:2c:68:0a:0b:77:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:82:B7:20:C3:AD:75:60:1A:F1:6D:EF:25:6B:6A:E6:7F:0B:FC:27
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:af:04:dc:bc:2c:b8:17:c4:15:90:92:ae:53:da:81:84:1c:
73:76:37:04:a4:2f:b1:45:d9:c8:2a:88:c3:0d:34:48:dc:e4:
61:ee:96:3e:85:43:6a:3e:50:78:5e:66:49:bf:5e:55:89:ac:
9f:97:bb:0e:5c:83:98:02:36:d7:40:6c:c1:e4:c1:f3:73:da:
77:a0:14:31:80:95:d2:85:48:4e:8d:b9:d8:5c:08:38:41:06:
5f:50:3f:12:28:e1:d4:4d:05:39:21:3c:0f:eb:c6:ab:0d:56:
96:f1:1d:a1:a7:83:ba:e1:f3:b6:9c:e4:73:ea:d3:7e:9d:56:
b4:d4:06:67:9d:1d:70:95:5b:1a:db:2f:b5:7b:a2:11:c8:a1:
3f:10:ad:1c:e5:87:58:b9:47:f0:81:36:d7:32:54:51:6b:a9:
d0:6d:95:88:08:94:a0:e3:5d:d4:c4:85:6e:d6:de:f0:26:3b:
46:c4:b1:a0:f0:ed:41:24:27:c5:cf:98:0c:45:af:31:62:94:
78:83:39:34:aa:54:f7:34:c2:77:35:7c:b0:0d:89:43:df:cd:
b2:3f:94:e1:52:03:c6:19:ac:5c:27:f5:47:cc:fb:7f:de:d9:
47:18:c7:c7:1b:bd:ee:af:cd:14:86:1d:89:6d:84:f4:46:41:
7d:8d:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 19:16:27 2026 by rpki-client