Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: pVg9YlXtL2SYjiv+GtKLp79qGxduLYCbJ0LWtFfuDNU=
Subject key identifier: 77:ED:42:05:65:88:75:7B:72:19:D7:CA:BF:2B:85:DA:E6:0D:83:6A
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 019D3909828AF29FE730C7C2DE3FC15E81B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:17 +0000
Manifest this update: Sun 29 Mar 2026 10:00:17 +0000
Manifest next update: Mon 30 Mar 2026 10:00:17 +0000
Files and hashes: 1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=)
2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: 6G6dQHJdBpnI9kJ1ud7XYlaTlvx3cY0MkVwijkVt5TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:82:8a:f2:9f:e7:30:c7:c2:de:3f:c1:5e:81:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Mar 29 10:00:17 2026 GMT
Not After : Mar 30 10:00:17 2026 GMT
Subject: CN=77ed42056588757b7219d7cabf2b85dae60d836a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:a1:f6:d5:9a:0c:e5:75:1a:82:b5:28:35:
3d:72:14:b3:8e:7b:68:cf:3e:d1:46:ad:3f:74:35:
ab:53:d4:dc:73:60:61:59:af:a3:4c:28:b0:b4:8e:
e5:02:e4:ff:74:79:36:ed:f4:e6:2b:6f:87:17:7d:
44:31:f3:56:96:ba:8e:ad:92:e4:2a:e9:4f:e7:8c:
56:44:11:52:40:43:5d:55:30:43:4f:38:8a:44:27:
c9:4a:f1:a3:3e:cd:14:48:e4:e8:7d:22:95:15:fd:
83:11:ea:57:e4:41:37:64:20:69:91:94:4e:da:d8:
e8:93:db:fd:62:c8:ac:6e:32:dd:89:03:71:17:f8:
d0:8b:a1:e7:03:25:b0:aa:d3:b3:c5:8e:f8:f6:2c:
95:ee:07:c9:d0:ed:d9:f9:da:8d:60:6c:5e:97:5e:
d7:7d:bf:4b:e9:9a:2f:f4:3a:6f:e2:e0:0f:fb:06:
03:0b:04:26:70:06:f8:fc:bc:53:6a:f5:7f:26:d8:
2c:20:e4:8f:7f:0c:76:e9:4c:58:c1:aa:1a:bd:84:
7e:20:e1:4f:26:0c:6c:bb:e5:f1:6f:dd:59:7a:f1:
01:78:5a:09:d6:a8:9f:a3:28:f1:08:58:82:4e:25:
93:be:7c:9e:60:6f:ee:39:a2:cc:a7:80:6b:fc:42:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:42:05:65:88:75:7B:72:19:D7:CA:BF:2B:85:DA:E6:0D:83:6A
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:00:f8:d5:83:f5:51:14:be:ae:67:4b:26:74:e4:21:91:5d:
3c:1b:20:43:7f:60:86:43:6e:11:20:91:e1:72:a7:35:af:85:
7d:38:81:75:92:3d:9b:cc:78:5d:60:85:17:0f:6a:24:24:54:
3a:34:44:41:2c:59:44:9a:e9:fb:97:f3:47:ca:21:91:1c:c3:
5f:80:e5:9a:18:88:d4:7b:92:71:07:7a:f2:29:16:df:dc:9f:
d6:03:73:5d:6c:06:e7:c6:c6:25:37:43:3d:9c:32:e4:60:5a:
b2:bc:80:27:83:a0:dc:2e:0f:7d:1f:0e:84:81:8c:57:dc:cc:
54:99:2c:a6:76:6d:fa:96:1b:68:97:e6:5b:cb:76:8d:ff:3c:
85:48:2c:d1:66:0f:e9:38:7a:4f:dd:1c:7e:65:fe:d5:00:76:
e1:a2:0d:43:0a:e6:e4:36:56:fa:23:c9:c0:df:8a:e3:f7:17:
3d:59:0f:4f:30:3f:27:54:8e:a3:7d:6f:02:43:cd:23:a8:00:
09:15:76:9d:51:82:9c:da:f2:44:b5:24:23:64:d2:63:51:c2:
63:8d:99:fe:72:a9:85:fe:c0:eb:5b:50:f7:b8:ef:17:a6:c8:
63:6f:94:f0:4f:34:9b:c3:ae:f0:69:52:b7:2e:0f:43:01:5a:
19:3f:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:38 2026 by rpki-client