Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier: ny+acxlurYhUYwlSBzG0Y2zUdfzu2ytYz0JP7h9w9cI=
Subject key identifier: D4:F1:D3:8C:8A:5B:03:7D:79:4A:43:71:2D:D0:96:E9:5C:F4:E9:FA
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 019D382DEED3119241D820B2EC7353AD527D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number: 15A8
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: 4JooT1dtaJ-Oj9ZxTyi2WnEpKME.roa (hash: cyoCTuFn1vjpLgXxKEUMlZpj5yZCfKc5JRVXpWpJdPM=)
2: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: huiZzyl9sCadbxBfGTvAZ/F9IOdaJ/9SwoGdUQLyk3s=)
3: UGbEkxCpgIgbGLxk27Wm3SPCyJ4.roa (hash: 9BAJwC8dHNf7o1oGSFxTfLRm+0EXXChq88i9t5OvHD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ee:d3:11:92:41:d8:20:b2:ec:73:53:ad:52:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=d4f1d38c8a5b037d794a43712dd096e95cf4e9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:93:ac:55:24:e6:6d:6d:83:65:f9:56:18:1f:
78:fe:11:49:4c:42:0e:ae:5e:ec:9d:05:64:25:63:
74:c2:9d:22:9a:ed:68:69:49:03:c8:70:9d:5f:64:
e7:c7:dd:47:2b:33:e6:72:5f:1a:24:50:5d:7c:82:
74:36:26:61:2f:26:b2:d1:b7:da:9b:08:c6:e7:f7:
84:2c:8c:f8:bb:95:ba:b2:c3:78:f5:84:78:6e:6e:
14:39:8e:6c:59:4d:ff:6e:f5:ba:12:f8:ee:cd:4b:
17:3f:88:5b:49:dc:61:b4:43:d2:fd:1c:bf:fe:42:
17:c6:33:65:2c:eb:6d:26:88:e6:ca:b3:31:4a:6e:
4c:6b:78:5c:9b:b6:2a:3a:c4:6e:d3:8b:68:6c:98:
ad:01:be:dd:a7:b8:26:f9:ca:78:b7:b2:81:c2:60:
13:dd:2f:3c:4a:b1:72:0d:e4:7a:78:92:50:51:a3:
18:e5:33:85:fe:41:de:e7:7e:d0:5b:b5:94:c1:eb:
f7:52:01:29:b0:ff:e0:88:ef:33:53:41:55:46:1c:
05:b5:66:d5:4e:ec:82:06:e5:e4:f1:c9:b7:c0:a1:
c5:dd:8a:a7:26:3a:a8:4d:5e:1b:ac:19:de:d9:d4:
a3:41:26:97:0d:2c:ee:25:03:7b:e9:27:8d:fd:85:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F1:D3:8C:8A:5B:03:7D:79:4A:43:71:2D:D0:96:E9:5C:F4:E9:FA
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:97:fd:fc:79:cd:60:8a:78:66:75:75:72:94:66:e3:31:02:
e8:8a:7b:06:46:d9:43:31:77:ad:dc:eb:df:48:80:61:ac:54:
17:9a:c4:59:c2:5f:fa:51:49:b6:50:22:76:83:4d:f9:bd:5f:
98:5f:d5:12:e8:23:3a:b6:b3:7c:3b:c4:01:ab:fe:86:e6:c6:
fa:27:13:e5:60:8b:70:ef:d0:6d:d1:c3:ad:de:44:d6:da:f5:
a7:2d:d0:48:9c:2b:19:31:c1:12:ce:eb:ef:20:6b:08:8f:26:
d8:10:57:42:0e:68:81:9a:ef:47:60:47:c3:a6:97:0c:99:9a:
ef:c9:5a:47:50:e8:10:e1:49:18:48:f1:ca:46:f1:3b:96:c5:
1b:81:d1:7b:a5:7b:a3:a9:d5:27:1e:c2:e8:fe:3f:dc:5f:2b:
77:06:b4:36:d4:78:77:70:63:3c:fd:4f:90:7e:b8:0c:17:fe:
96:c1:14:6d:a0:9b:1a:56:49:56:e2:27:06:7d:1d:2a:83:10:
c5:d9:25:2b:bf:e1:73:6c:8a:25:18:82:61:76:5d:a7:0e:31:
e8:6e:4b:84:49:51:17:59:31:6d:b9:38:58:71:4f:3c:df:05:
a4:ba:85:2a:92:14:e1:b6:0d:7a:15:46:99:fa:71:b1:c5:70:
10:65:86:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:49 2026 by rpki-client