Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: EL/5tpCCXAq+iewCB6TKyl1x3An+UBoJBanCRl8LmHA=
Subject key identifier: 99:3D:7C:C1:9B:79:35:53:2A:B3:EB:DB:A7:2F:BA:AC:F3:0D:00:93
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 01A13E9529A1E379A44FBBF5942F24D5B090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 08:02:05 +0000
Manifest this update: Thu 15 Oct 2026 08:02:05 +0000
Manifest next update: Fri 16 Oct 2026 08:02:05 +0000
Files and hashes: 1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=)
2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: dilJbynPkL00V6vN1uLBMPacSk5KJMJ95yiv20MlTOU=)
3: IrgZXbsjh204onicFzimaq0fKao.asa (hash: 9uFvP0C57royCY6ILUpJIJN8Q/WGwEUztAWeXpOyUhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:29:a1:e3:79:a4:4f:bb:f5:94:2f:24:d5:b0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Oct 15 08:02:05 2026 GMT
Not After : Oct 16 08:02:05 2026 GMT
Subject: CN=993d7cc19b7935532ab3ebdba72fbaacf30d0093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:43:90:fb:4a:d2:8d:6d:07:da:03:3c:b7:
0d:36:18:fe:7d:02:3f:20:af:b5:85:58:8d:e1:c6:
6d:0e:a5:81:f5:40:8c:3c:7e:3e:6f:e4:86:45:a3:
c7:0b:01:62:1b:51:1f:4e:36:a3:0d:a2:71:24:5e:
e4:7d:74:5b:0d:dd:7a:6a:88:39:8b:e8:ed:36:97:
13:c0:02:7d:ac:4c:e4:98:3c:42:4e:ee:9d:dc:bb:
c6:32:9c:2e:67:84:2a:60:ad:7c:50:ff:17:8d:c8:
07:85:ab:60:3e:de:bc:65:4b:0f:fa:4f:99:37:a0:
86:d7:fa:5a:f5:5e:d8:3c:4c:97:14:a6:da:b6:bf:
8b:c3:cb:ac:a3:1b:94:20:87:ce:20:5e:61:50:10:
2d:12:de:da:dd:83:01:04:f1:01:12:57:8d:3f:85:
2d:d8:81:d3:09:b9:1e:9a:36:38:28:0f:bc:93:2b:
23:4e:c5:d5:0a:b0:aa:3d:05:19:86:db:5e:f3:03:
29:58:3d:d7:aa:61:d9:e3:4c:87:fe:43:dd:76:3c:
0a:d2:bd:97:10:ab:cc:42:00:0c:3d:30:ae:4f:d5:
83:49:c8:47:cd:49:9e:9e:6b:c1:65:19:16:68:51:
f2:08:1e:cb:2b:3f:f0:99:15:7a:5f:20:4a:cc:68:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3D:7C:C1:9B:79:35:53:2A:B3:EB:DB:A7:2F:BA:AC:F3:0D:00:93
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:46:31:f0:8d:59:37:c7:ab:91:b9:01:97:f7:77:ef:0d:27:
ab:55:44:64:e9:14:75:a5:2c:01:65:47:40:64:5e:fa:15:d4:
c6:82:81:6a:2d:cf:a2:bb:4e:15:52:10:0e:ef:83:de:3a:4f:
86:d8:71:c6:3a:1c:94:6d:86:42:0e:d9:13:7a:85:23:1f:a4:
f8:de:ad:62:3a:7c:e2:28:3c:0a:f4:a5:69:65:c8:e3:4b:da:
d6:dc:7a:32:ae:d2:0d:20:13:8c:db:39:95:54:08:40:86:0b:
7e:d0:ec:39:38:c5:33:1f:6e:6e:5d:45:41:b1:c8:30:e6:84:
d1:e0:16:a3:15:9f:b9:3c:61:94:2e:cc:52:d4:34:e9:5f:22:
7e:a5:17:e3:d5:23:5d:4f:76:88:6d:dd:08:59:cc:86:66:1e:
10:1c:66:a9:78:bb:59:a9:b0:f3:47:5e:a1:b2:8a:90:ef:0c:
87:d4:92:ae:09:fe:97:89:5b:c2:51:27:92:67:76:06:43:fd:
2d:97:37:67:22:80:01:89:5d:bc:b6:91:8b:22:08:17:fa:6d:
eb:5a:6a:0e:8e:c7:b2:02:aa:36:17:76:12:34:c2:c6:60:62:
e6:2b:e4:df:e6:6c:b5:61:b7:47:ac:89:91:c0:25:e3:39:16:
3d:78:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:44 2026 by rpki-client