Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: ab8zePoJbIiYyyPNgQBOy/YRvPrn/xwBbTwFhXCMFG0=
Subject key identifier: 35:3A:54:3B:AA:1E:4A:60:D7:6E:75:EA:E8:C5:02:2E:6E:47:B2:5F
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 01A13D80DCC6A7BAC966749356DA98E94FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 1AAE
Signing time: Thu 15 Oct 2026 03:00:17 +0000
Manifest this update: Thu 15 Oct 2026 03:00:17 +0000
Manifest next update: Fri 16 Oct 2026 03:00:17 +0000
Files and hashes: 1: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: 9r4+asdvwi7cPqhSsDnkZXcTtEcBpWl8iH4NH7BBEyk=)
2: NaepKDUSFtPVzyjXT9VY683pv7k.roa (hash: ss+CQ2zxnFp/z8s24U9+WfPH3FxucLqO1Hzr/w2GZF4=)
3: tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa (hash: o/l+UfaRASye/WyLBJkfDvEuNMAWi4a+yJfDJFDSNrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:dc:c6:a7:ba:c9:66:74:93:56:da:98:e9:4f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Oct 15 03:00:17 2026 GMT
Not After : Oct 16 03:00:17 2026 GMT
Subject: CN=353a543baa1e4a60d76e75eae8c5022e6e47b25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:c3:36:b6:4f:af:af:a4:f3:77:3f:cc:d4:
aa:86:8d:c1:90:f8:f1:01:03:d1:ba:79:67:fe:a9:
1e:f4:56:71:41:43:35:fe:97:ef:f3:02:54:6c:3b:
a9:3e:c1:03:16:3f:7b:ca:b8:49:00:40:01:ad:f9:
36:5f:cd:60:87:b0:e3:fc:04:18:20:e0:0c:9e:bf:
d5:a0:ed:b1:2b:8c:25:43:d4:a9:3f:ec:87:6f:f0:
1c:ab:c2:6e:a1:0c:49:81:c0:40:0d:47:ed:35:1e:
9a:f5:db:f7:70:73:04:99:4c:9d:31:5a:c0:de:2e:
66:e2:75:ee:fe:60:f1:b9:d7:47:81:6f:f9:3d:1d:
8b:f3:65:f5:4e:b1:1a:d4:18:74:d7:20:c0:74:b4:
58:da:f0:a2:05:d7:11:51:f1:cb:1d:a3:69:77:38:
fc:5d:81:cf:fe:7c:5b:96:47:13:50:10:60:f6:df:
6d:ed:ca:41:9b:16:48:ea:e9:25:5f:1b:2d:25:9a:
9e:6f:71:7e:d6:dd:25:6a:85:e1:dd:24:2f:27:12:
93:d0:3a:11:22:b1:40:56:97:fd:96:87:74:c1:be:
38:8a:3d:6d:81:2f:7b:c5:5f:87:b1:f8:a1:81:63:
f4:38:2d:3f:cb:df:68:db:43:99:5f:cf:a0:4e:b3:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3A:54:3B:AA:1E:4A:60:D7:6E:75:EA:E8:C5:02:2E:6E:47:B2:5F
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:09:65:ca:29:b2:4e:5b:6e:d6:ce:9e:8c:8d:81:2f:cf:b1:
3c:bc:4a:e7:71:2a:1b:c8:a9:8e:53:06:43:85:b9:60:f9:97:
7a:47:47:a1:d1:3e:a8:f9:7b:11:42:14:4d:0a:b6:01:3c:b3:
ec:45:fe:bf:50:8b:04:76:f2:8c:ff:14:27:cc:c9:ec:c9:11:
9b:7c:2f:fe:ca:fe:0f:55:73:a9:c1:46:be:09:80:cc:46:03:
3f:5e:54:9f:ff:89:92:46:a7:4c:98:8c:a5:e8:f1:ca:f6:6e:
5d:d7:d6:11:f2:74:44:b7:af:fc:31:fb:d8:13:61:ec:ab:d2:
eb:69:00:85:90:d7:e9:d4:2c:59:ee:05:3e:ba:3b:b7:48:b4:
4c:08:00:9d:8c:e5:a6:7a:59:80:51:6c:b7:e3:a5:e7:88:06:
89:19:05:a7:ff:10:98:6e:dc:81:dc:f1:2c:82:70:23:cd:84:
d4:35:cf:01:00:2e:da:75:ae:04:32:74:5e:9f:a4:70:e4:87:
a0:8a:9d:fc:be:82:3c:8b:4b:e8:54:f2:ee:b6:57:41:82:14:
f6:05:01:1c:01:df:5a:7f:83:e3:d7:15:64:7d:fd:6c:5b:59:
94:12:d3:a1:bb:fb:9f:a3:bb:42:f0:95:43:9a:23:2d:05:b6:
d0:7a:06:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:41 2026 by rpki-client