Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: DvrVDjeRYF8i6TtyNo0LgdAMUsbBdiNNxN/KFS+7ZXQ=
Subject key identifier: BF:EB:B0:A7:15:F2:FA:F4:40:35:A0:75:FF:59:1B:1E:4F:FF:5D:95
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 019E314E11D88562B970A97CC064FA63FEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 191A
Signing time: Sat 16 May 2026 15:01:00 +0000
Manifest this update: Sat 16 May 2026 15:01:00 +0000
Manifest next update: Sun 17 May 2026 15:01:00 +0000
Files and hashes: 1: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: z1MYkpi4typ0uzcUiV/Wm6+/yXUVjuHZ4ULUmhlNF5I=)
2: NaepKDUSFtPVzyjXT9VY683pv7k.roa (hash: ss+CQ2zxnFp/z8s24U9+WfPH3FxucLqO1Hzr/w2GZF4=)
3: tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa (hash: o/l+UfaRASye/WyLBJkfDvEuNMAWi4a+yJfDJFDSNrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:11:d8:85:62:b9:70:a9:7c:c0:64:fa:63:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: May 16 15:01:00 2026 GMT
Not After : May 17 15:01:00 2026 GMT
Subject: CN=bfebb0a715f2faf44035a075ff591b1e4fff5d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:58:8d:ef:3c:61:bf:06:9f:34:5e:7f:f7:
9c:2c:ab:9f:3e:b9:5f:af:ef:e0:54:6b:f8:3e:31:
fd:54:c6:14:29:9a:71:96:29:b7:16:ca:ca:e1:5c:
69:ca:c0:f7:90:b3:3f:28:84:78:68:62:a7:c8:45:
ec:b4:77:35:1f:43:cc:5c:41:ff:66:7d:25:6b:54:
49:58:f1:06:81:4e:d6:df:75:f9:aa:92:d7:83:f5:
d4:dc:bf:a0:4e:da:64:df:57:37:7d:d3:39:42:f1:
67:34:15:88:71:ae:d2:ab:62:c1:53:1a:9a:a6:4e:
6b:39:e7:5a:f9:e9:ea:dd:6c:70:a5:f4:d5:d1:d3:
ee:2e:fd:10:be:e9:0b:5d:eb:9a:e5:af:3c:a1:28:
bf:43:2b:de:c7:7f:be:b0:3e:b7:7f:62:34:f5:46:
01:dc:40:3c:91:5f:8f:0d:6e:8c:48:a4:1d:57:67:
57:3a:56:9c:30:b2:fb:12:f1:64:2a:0c:7d:5a:6f:
74:42:3b:c2:f3:49:b1:00:7b:80:ac:d5:b7:cb:3b:
7a:92:52:32:ac:a6:6b:83:2d:51:60:29:c0:73:21:
2d:e1:7f:ea:b5:f7:a4:3a:a0:03:a3:a1:d6:e4:7c:
b0:81:89:d0:60:37:33:09:81:b5:f0:f2:f9:9d:66:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EB:B0:A7:15:F2:FA:F4:40:35:A0:75:FF:59:1B:1E:4F:FF:5D:95
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:46:4f:86:b2:26:11:a7:01:43:f9:da:f2:b5:59:5b:4b:06:
f7:ae:90:e6:ba:9d:11:d7:bc:5f:db:33:77:91:1e:9d:cf:7c:
4d:77:e2:b1:e4:a5:86:71:09:a0:25:14:96:35:bb:46:1f:45:
78:cb:ac:6d:b4:da:79:a3:93:c4:67:d4:30:19:63:7d:ac:14:
27:ac:52:b1:a3:66:93:0f:2a:ce:16:b0:c6:03:ca:aa:a9:0b:
32:3c:08:3f:0e:a1:f5:1e:98:21:db:e6:70:80:ba:87:c5:d2:
8e:e0:e6:58:af:4d:c4:dc:0d:ef:8d:b0:83:3b:67:0d:97:c0:
54:be:51:fe:00:b3:e6:b0:46:4f:84:57:33:36:7a:88:a5:66:
65:8d:05:66:02:b8:53:33:8d:22:ad:60:ab:69:0b:14:7d:85:
93:d2:27:02:a2:12:07:d6:c4:2b:0a:f5:fa:c8:03:c3:98:98:
ca:7c:61:ba:a2:ff:d0:ee:27:ab:9f:01:c5:9e:2e:a7:62:ce:
f5:a5:de:01:bf:e0:da:a7:41:09:51:7d:3d:f9:89:36:31:c9:
ca:1a:02:89:57:79:16:da:3c:25:b5:48:fa:87:a9:05:49:9b:
a7:7d:0c:5a:b9:a4:68:96:c7:d5:70:51:9f:09:9f:07:6d:1b:
cb:04:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:46 2026 by rpki-client