Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
File: BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft (raw, json)
Hash identifier: BlL4BzrCTIoOxt8en61qO4dQYFZ0dbBo/OYgZh9cAqA=
Subject key identifier: C9:D7:BF:02:4B:53:7C:C0:4E:4F:9E:E1:DB:C3:20:5E:A0:A9:E7:D8
Authority key identifier: 05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
Certificate issuer: /CN=056c66d45fe7e2f35599572a776b12764dc69a01
Certificate serial: 01A041610E782A9B214E938793C146DEDBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
Manifest number: 0427
Signing time: Thu 27 Aug 2026 04:01:14 +0000
Manifest this update: Thu 27 Aug 2026 04:01:14 +0000
Manifest next update: Fri 28 Aug 2026 04:01:14 +0000
Files and hashes: 1: BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl (hash: zyA/HMXrijGKT5eRctDy5avd3AKD4TZgNhAjKu9p44c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:61:0e:78:2a:9b:21:4e:93:87:93:c1:46:de:db:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056c66d45fe7e2f35599572a776b12764dc69a01
Validity
Not Before: Aug 27 04:01:14 2026 GMT
Not After : Aug 28 04:01:14 2026 GMT
Subject: CN=c9d7bf024b537cc04e4f9ee1dbc3205ea0a9e7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:73:8f:6e:90:f4:e6:22:ae:c9:90:cc:16:8e:
81:ab:f0:03:84:46:6f:2f:58:91:6c:87:52:82:c7:
07:3c:29:3c:9a:9e:55:4a:eb:0e:bc:79:92:bc:f1:
bf:d6:d4:fa:5e:93:c8:b3:08:d8:75:fd:77:f0:04:
3b:6d:46:42:39:67:c7:cd:ae:b5:9c:df:e1:e2:6b:
61:9c:0c:5d:50:74:70:54:a2:b9:9a:a0:a5:20:a7:
f5:36:08:95:9e:56:02:54:fb:0a:69:07:4f:4a:07:
86:ac:54:35:f2:2c:4b:e0:d6:53:d8:72:bb:ae:38:
c4:0c:f7:65:d4:d9:21:4f:0b:4f:5c:74:9e:e0:bd:
da:d0:4f:30:b4:0e:ea:0d:05:bc:61:f8:60:23:6f:
59:fd:f7:50:50:fa:12:28:72:74:ba:b3:2b:4e:38:
11:4f:45:a2:cf:36:48:b2:66:f8:95:e8:c8:e1:5f:
be:71:04:f8:bb:3b:28:5b:36:f5:d9:03:45:4b:82:
f6:be:bb:ee:17:79:bd:05:92:38:09:ec:7c:57:e7:
e7:d6:fd:82:a9:c7:be:65:9f:10:48:04:3a:b2:33:
a5:a4:bf:25:79:52:5f:05:cd:c1:ce:1e:68:45:01:
23:ef:2e:66:ee:cc:5a:4e:d1:4d:d3:1f:6e:26:d5:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:BF:02:4B:53:7C:C0:4E:4F:9E:E1:DB:C3:20:5E:A0:A9:E7:D8
X509v3 Authority Key Identifier:
keyid:05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6f:bc:b2:eb:22:26:4c:da:bf:81:08:ef:99:fc:06:27:39:
b7:03:58:f0:76:60:56:0a:49:f4:54:03:63:70:ec:91:e2:a1:
35:47:f4:76:f0:f4:55:ef:04:c8:2e:aa:30:2d:42:f9:a8:ac:
f2:7b:db:1c:3b:2b:77:12:26:1c:ad:d7:4a:2c:a0:b6:44:ea:
cb:f2:bd:f1:fb:22:de:c4:66:61:d4:c7:50:5d:a3:f6:6d:4b:
bf:51:c6:19:cb:6b:b9:13:24:2c:94:ba:89:03:87:c0:c3:5b:
9b:6f:e2:58:c8:2c:01:1d:4f:03:55:d6:1f:54:49:04:c5:30:
cf:f1:43:d6:09:13:28:0c:83:7e:25:bb:ae:79:ca:48:31:79:
7b:93:7b:4d:ea:37:55:ec:e9:b5:dc:d2:a6:8c:01:a4:be:c7:
b3:24:50:14:cb:3b:4d:8d:8d:fd:71:2a:86:55:2f:ca:fd:ab:
1c:42:8a:45:61:1c:4d:0e:7c:76:85:f1:8d:ef:86:dc:dd:65:
90:b2:b1:b3:9a:7c:d5:17:67:8d:de:ec:2c:cd:24:60:00:56:
47:59:28:fa:ce:cf:9f:af:79:02:57:06:53:3c:01:a1:15:1b:
b1:e7:b8:f6:55:40:fc:4c:55:b7:f7:89:16:00:93:e4:16:7b:
ec:f7:e4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:34 2026 by rpki-client