Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: QZ6Tte7rtOFwYjjJUokXg3sXJfBDPn39kaVKBl0Ar5Q=
Subject key identifier: 9B:A6:2C:C3:BB:CF:93:80:38:71:7C:79:80:91:1A:13:D0:7F:92:4D
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 019D382E2816F7DBEBC721F61E516058438F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: 3CiF4USpmKXHL7joisyapYGhrNVIzh2+IBYfA1EZNVU=)
2: NaepKDUSFtPVzyjXT9VY683pv7k.roa (hash: ss+CQ2zxnFp/z8s24U9+WfPH3FxucLqO1Hzr/w2GZF4=)
3: tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa (hash: o/l+UfaRASye/WyLBJkfDvEuNMAWi4a+yJfDJFDSNrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:28:16:f7:db:eb:c7:21:f6:1e:51:60:58:43:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=9ba62cc3bbcf938038717c7980911a13d07f924d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:42:93:22:6f:db:21:2b:44:3f:2f:0f:56:
fb:dd:d0:d4:38:35:46:3e:cf:86:d1:93:23:ed:64:
7a:8d:f3:fd:7c:c8:11:74:b4:dd:0a:ca:e4:75:0a:
b3:70:75:48:8f:c0:51:53:61:7e:01:71:4f:fd:a3:
5b:67:73:b2:4a:93:e1:91:41:4f:c0:e8:0d:7f:2e:
9f:8f:df:a3:f8:43:10:7d:1c:7d:c7:41:3f:67:77:
fb:6c:42:62:d2:3d:50:98:d0:2d:96:94:87:fa:d9:
cf:60:32:33:ad:06:e2:4a:88:3d:23:3f:ef:bc:5d:
cb:53:65:c1:f0:40:65:c2:74:cf:0e:47:ac:a8:b7:
4f:ca:66:7e:01:12:cc:23:3d:e9:32:3a:58:01:9c:
6e:15:6a:55:78:6c:5e:f5:c3:3d:ca:82:ee:c8:54:
b4:5c:c4:49:c9:a3:8b:dd:c0:df:54:e9:c5:7a:b1:
12:1b:ad:af:ed:8c:35:b6:0b:e3:c1:6c:b1:b7:22:
1f:e9:e2:6a:23:11:a3:5b:ce:19:6a:75:03:d3:ce:
73:75:ea:7d:9a:fb:47:8a:2f:33:ae:43:7d:b9:1e:
ec:fc:7d:36:55:d0:63:d2:d4:1c:df:44:22:90:b1:
76:8a:d2:92:b1:da:31:19:8f:f8:db:d9:c0:ce:8e:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A6:2C:C3:BB:CF:93:80:38:71:7C:79:80:91:1A:13:D0:7F:92:4D
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ff:9d:6b:d6:be:2d:2f:fa:ee:d8:c7:fb:9c:42:43:e7:2e:
02:a0:76:1e:66:c1:30:9d:96:06:26:81:57:d0:3f:a2:4b:9e:
65:55:39:57:e7:f1:fd:dd:9e:ed:b5:c2:8b:eb:05:74:61:ec:
85:fb:da:c1:7a:86:14:63:98:93:9e:e0:82:5b:e1:9b:27:3c:
7f:b2:6e:21:0e:bf:25:aa:ee:03:55:8d:87:6d:0d:65:3e:02:
97:fc:03:fc:e4:ba:bd:d9:3d:de:03:89:fe:46:71:74:c5:d9:
6e:ae:1c:a1:be:22:7e:92:46:a8:59:13:a7:cb:2d:04:24:4f:
8b:24:d1:a6:de:ca:57:c1:64:1f:68:fa:5d:9c:f7:a9:35:b0:
3b:4a:a1:bb:67:54:58:e8:c8:81:f5:b5:f5:31:23:27:cb:be:
66:3f:e0:f1:18:53:bf:af:00:bb:bb:40:72:9b:24:1a:ae:bd:
74:4a:95:ba:b5:61:dc:6d:d2:48:cc:d2:44:63:4e:12:e0:81:
5a:d5:07:c4:52:1e:a0:d5:99:3a:c9:7d:c6:e0:d5:d3:c2:8b:
c2:9d:dd:7c:a9:5b:d4:a2:9e:15:d1:87:7b:16:b2:be:c9:a4:
6a:f0:13:07:26:fc:4f:7d:96:78:9d:85:83:8e:f8:20:e2:ee:
3d:bb:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:12 2026 by rpki-client