Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
File: BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft (raw, json)
Hash identifier: hlI3us3elbssSCoAzmMDzItP6N2s3x6JKJAJkbxl5Ww=
Subject key identifier: 3C:51:CF:CA:53:CF:25:B6:29:BD:30:72:B9:C9:52:B6:ED:49:45:4A
Authority key identifier: 05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
Certificate issuer: /CN=056c66d45fe7e2f35599572a776b12764dc69a01
Certificate serial: 019D3909BE717A9BFEB7D7FECF01ED459C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
Manifest number: 0295
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl (hash: tN6o56ByVB9SGR5H6YkgPi0wOXkyPhvvRbbhfq8nw1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:be:71:7a:9b:fe:b7:d7:fe:cf:01:ed:45:9c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056c66d45fe7e2f35599572a776b12764dc69a01
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=3c51cfca53cf25b629bd3072b9c952b6ed49454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:eb:04:1d:25:21:b6:6d:1b:b6:bb:fc:1e:
6b:91:0e:e8:94:3d:2e:7a:1c:24:f4:b2:f9:22:45:
90:9d:9b:f1:ca:f7:ec:aa:ef:67:28:83:54:68:29:
14:0b:18:79:17:30:28:fa:d5:ca:9d:eb:ef:c6:c7:
df:fd:51:c4:25:29:65:d7:16:76:a1:7e:1f:e5:36:
05:58:98:99:9e:dc:d8:75:ba:dd:0a:9b:4d:c8:d0:
f7:60:74:86:3e:43:91:ea:bf:89:29:f3:23:12:7c:
16:10:2f:f5:91:aa:80:dd:0b:c3:56:05:e5:d7:d5:
fe:43:36:77:be:6a:4c:51:51:73:0a:f2:1f:ae:3b:
7f:98:07:1f:f8:0b:a6:88:bb:c0:76:93:dd:f9:8e:
a3:d1:39:73:ae:36:89:be:0a:fd:25:27:40:df:39:
4f:97:6c:4e:e6:73:fe:95:70:d3:58:d5:47:c6:28:
e5:d2:f0:58:c9:6d:65:17:a6:60:87:d1:75:06:24:
a0:31:73:71:db:33:f4:5a:de:6f:e9:ce:93:64:5e:
4f:17:80:62:5c:89:73:6c:13:83:70:d2:d2:1a:ea:
0b:e0:13:5a:da:5c:a4:b1:c2:0b:ed:5e:c6:d5:31:
1e:7b:c1:ca:ad:66:6a:08:a4:4b:71:70:1c:ed:37:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:51:CF:CA:53:CF:25:B6:29:BD:30:72:B9:C9:52:B6:ED:49:45:4A
X509v3 Authority Key Identifier:
keyid:05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:48:eb:88:7b:f9:c3:d0:50:3c:18:09:b7:6b:8f:f4:03:1d:
3c:61:c2:94:aa:af:b7:8d:97:7d:51:16:31:c4:25:2f:8a:e9:
67:24:05:95:28:8a:25:1e:c4:37:47:98:8d:81:7c:47:05:7f:
88:8a:fe:89:48:8f:3c:9d:e8:be:82:9f:9b:1e:82:2a:76:3d:
fc:47:9f:26:ba:fb:74:37:7f:84:14:40:90:0c:02:53:b2:ff:
cb:00:48:d3:91:b8:c5:2b:33:ec:73:e8:85:35:28:ea:a8:fd:
ff:56:df:d0:ac:76:db:27:41:68:fa:e1:52:59:2b:9c:bb:af:
62:44:5c:4c:50:c5:3a:e3:d8:f8:0c:53:bd:17:9a:44:b2:b8:
a5:95:e6:1f:78:44:c6:45:9c:fd:ed:30:b6:e2:d5:9d:11:2a:
be:d2:bf:41:57:7a:e9:e5:a0:33:aa:1b:58:ff:5b:00:8d:80:
bb:07:5b:69:e3:76:40:e5:e0:69:0a:87:41:5d:ee:80:e4:3b:
aa:b8:ba:51:7c:1d:76:c7:e1:c7:ed:82:62:02:a8:95:5a:a5:
fc:db:82:a0:14:10:d4:59:c3:3b:79:17:a2:da:26:da:5e:c3:
6c:b5:ab:51:3d:c2:74:39:76:d1:7d:ed:5e:6d:71:4a:a5:08:
ac:51:bc:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cb5xepv+t9f+zwHtRZxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmM2NmQ0NWZlN2UyZjM1NTk5NTcyYTc3NmIxMjc2NGRj
NjlhMDEwHhcNMjYwMzI5MTAwMDMzWhcNMjYwMzMwMTAwMDMzWjAzMTEwLwYDVQQD
EygzYzUxY2ZjYTUzY2YyNWI2MjliZDMwNzJiOWM5NTJiNmVkNDk0NTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHLrBB0lIbZtG7a7/B5rkQ7olD0u
ehwk9LL5IkWQnZvxyvfsqu9nKINUaCkUCxh5FzAo+tXKnevvxsff/VHEJSll1xZ2
oX4f5TYFWJiZntzYdbrdCptNyND3YHSGPkOR6r+JKfMjEnwWEC/1kaqA3QvDVgXl
19X+QzZ3vmpMUVFzCvIfrjt/mAcf+AumiLvAdpPd+Y6j0TlzrjaJvgr9JSdA3zlP
l2xO5nP+lXDTWNVHxijl0vBYyW1lF6Zgh9F1BiSgMXNx2zP0Wt5v6c6TZF5PF4Bi
XIlzbBODcNLSGuoL4BNa2lykscIL7V7G1TEee8HKrWZqCKRLcXAc7TeQOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxRz8pTzyW2Kb0wcrnJUrbtSUVKMB8GA1UdIwQY
MBaAFAVsZtRf5+LzVZlXKndrEnZNxpoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQld4bTFGX240dk5WbVZjcWQyc1NkazNHbWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMDJjNWMtZWExNy00ODkzLTg1ZTAt
MDIwNTQ2MGU4OTkwLzEvQld4bTFGX240dk5WbVZjcWQyc1NkazNHbWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jMDJjNWMtZWExNy00ODkzLTg1ZTAtMDIwNTQ2MGU4OTkw
LzEvQld4bTFGX240dk5WbVZjcWQyc1NkazNHbWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkjriHv5
w9BQPBgJt2uP9AMdPGHClKqvt42XfVEWMcQlL4rpZyQFlSiKJR7EN0eYjYF8RwV/
iIr+iUiPPJ3ovoKfmx6CKnY9/EefJrr7dDd/hBRAkAwCU7L/ywBI05G4xSsz7HPo
hTUo6qj9/1bf0Kx22ydBaPrhUlkrnLuvYkRcTFDFOuPY+AxTvReaRLK4pZXmH3hE
xkWc/e0wtuLVnREqvtK/QVd66eWgM6obWP9bAI2AuwdbaeN2QOXgaQqHQV3ugOQ7
qri6UXwddsfhx+2CYgKolVql/NuCoBQQ1FnDO3kXotom2l7DbLWrUT3CdDl20X3t
Xm1xSqUIrFG8Pw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:51 2026 by rpki-client