Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier: hbmeAsHdIEd/XpZ4+5m+gyPpZSOvOlQVn8vctn4GkOA=
Subject key identifier: D3:20:3F:79:59:9C:E5:7A:84:F8:3F:65:2E:F9:94:A2:3A:8A:5B:BB
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 019E514751F43693535276BBD681E412154D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number: 1156
Signing time: Fri 22 May 2026 20:01:28 +0000
Manifest this update: Fri 22 May 2026 20:01:28 +0000
Manifest next update: Sat 23 May 2026 20:01:28 +0000
Files and hashes: 1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: jNMr0YdWj/aaxz2dLqzPI2Tc+5wi9XNn5tYNuQjl7S4=)
5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:47:51:f4:36:93:53:52:76:bb:d6:81:e4:12:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: May 22 20:01:28 2026 GMT
Not After : May 23 20:01:28 2026 GMT
Subject: CN=d3203f79599ce57a84f83f652ef994a23a8a5bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:1a:73:0b:2e:d1:a1:46:11:23:d8:09:af:
a9:c4:c9:17:38:e8:da:0e:6e:b9:b4:ad:20:c3:73:
e8:41:28:ee:3c:9a:6d:57:75:de:56:cb:29:6c:74:
1a:bc:eb:ef:25:79:93:75:d6:7f:9c:fb:35:4f:4d:
4e:80:39:b7:d2:8f:fd:b4:c2:25:36:99:f4:a9:45:
d0:b0:ab:0b:6d:6c:b6:a5:51:ac:68:1d:8d:d9:ee:
9b:b1:5e:3f:0d:b0:a9:a0:02:71:2f:4e:61:8e:66:
98:71:cb:75:b7:8b:5d:e4:f3:e2:b7:76:00:19:59:
9f:7b:b9:d3:cb:4e:01:ca:a1:67:bf:35:ae:c4:b6:
6e:d1:43:5f:b4:ae:3a:8e:1d:69:7f:2a:68:a3:09:
86:0e:6b:6b:0e:d0:ac:90:03:fd:f2:4f:12:e4:ed:
f7:91:ab:9b:2f:5f:2f:f7:eb:45:ef:f0:b8:e8:eb:
49:7b:bf:bd:6f:84:4e:00:e1:30:6f:cf:22:e5:0c:
c9:22:b5:62:ac:e7:d4:71:c5:cd:3f:45:72:46:bf:
ea:ca:8c:4f:a9:05:bc:72:67:c5:11:d6:21:56:73:
3e:75:cd:bb:fa:a8:3e:20:a3:e6:07:b6:22:7c:61:
51:3b:32:1a:5e:14:84:94:7e:c1:b1:62:a4:24:45:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:20:3F:79:59:9C:E5:7A:84:F8:3F:65:2E:F9:94:A2:3A:8A:5B:BB
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:04:d0:aa:36:e7:e1:11:49:f4:f3:bb:e8:21:19:5e:4b:56:
14:6f:03:8c:35:91:b6:b5:71:78:26:48:d7:31:fe:fa:54:cb:
3c:47:f7:79:fd:4d:4d:c5:5f:d5:cc:33:06:52:d8:84:5c:50:
8d:33:c6:1c:1c:54:f9:c0:c5:38:ca:eb:72:c5:f7:21:86:cc:
7e:8e:9a:9f:cd:60:1c:21:77:0d:6a:ee:22:0e:8e:32:cb:e6:
6c:13:04:dd:39:9b:3b:f3:79:6b:1f:e4:df:1e:d3:17:22:87:
96:cf:ba:c4:17:27:67:d6:4a:1c:f8:3f:66:04:2f:48:38:cb:
f7:cc:dd:06:15:01:2d:47:07:e4:52:9c:d7:73:6e:6f:01:88:
d4:87:51:c3:7f:c7:c2:a6:63:f5:6b:00:8e:7a:be:d4:d6:49:
45:e3:ed:9f:f1:65:48:94:9c:25:65:b4:73:e3:1a:62:b5:04:
a1:8c:c7:89:a2:57:aa:e8:f9:da:5f:1e:9f:0b:48:f0:0c:ee:
fe:cb:b9:3e:0d:f0:c0:a3:51:52:4c:1f:9a:1a:0d:9a:46:38:
29:91:a8:2f:1c:b8:dc:42:10:87:e0:e8:50:4d:40:9d:84:5c:
d0:0b:33:13:22:36:e6:80:1c:a5:8f:a8:94:77:c6:b1:0d:dd:
04:9b:e9:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5RR1H0NpNTUna71oHkEhVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjYwNTIyMjAwMTI4WhcNMjYwNTIzMjAwMTI4WjAzMTEwLwYDVQQD
EyhkMzIwM2Y3OTU5OWNlNTdhODRmODNmNjUyZWY5OTRhMjNhOGE1YmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJoacwsu0aFGESPYCa+pxMkXOOja
Dm65tK0gw3PoQSjuPJptV3XeVsspbHQavOvvJXmTddZ/nPs1T01OgDm30o/9tMIl
Npn0qUXQsKsLbWy2pVGsaB2N2e6bsV4/DbCpoAJxL05hjmaYcct1t4td5PPit3YA
GVmfe7nTy04ByqFnvzWuxLZu0UNftK46jh1pfypoowmGDmtrDtCskAP98k8S5O33
kaubL18v9+tF7/C46OtJe7+9b4ROAOEwb88i5QzJIrVirOfUccXNP0VyRr/qyoxP
qQW8cmfFEdYhVnM+dc27+qg+IKPmB7YifGFROzIaXhSElH7BsWKkJEXLYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMgP3lZnOV6hPg/ZS75lKI6ilu7MB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQTQqjbn
4RFJ9PO76CEZXktWFG8DjDWRtrVxeCZI1zH++lTLPEf3ef1NTcVf1cwzBlLYhFxQ
jTPGHBxU+cDFOMrrcsX3IYbMfo6an81gHCF3DWruIg6OMsvmbBME3TmbO/N5ax/k
3x7TFyKHls+6xBcnZ9ZKHPg/ZgQvSDjL98zdBhUBLUcH5FKc13NubwGI1IdRw3/H
wqZj9WsAjnq+1NZJRePtn/FlSJScJWW0c+MaYrUEoYzHiaJXquj52l8enwtI8Azu
/su5Pg3wwKNRUkwfmhoNmkY4KZGoLxy43EIQh+DoUE1AnYRc0AszEyI25oAcpY+o
lHfGsQ3dBJvpFQ==
-----END CERTIFICATE-----
Generated at Sat May 23 03:24:19 2026 by rpki-client