Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: QaUjgQl6vtlVVS0qZwDqnNVUQBwRHinIFJFGZoOJwdw=
Subject key identifier: B3:60:93:EE:CE:78:BE:1B:55:46:5F:B4:C0:AC:A3:33:B1:96:6E:59
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 01A1404C7884C66D331D00F31AEEDF3AB313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 16:01:55 +0000
Manifest this update: Thu 15 Oct 2026 16:01:55 +0000
Manifest next update: Fri 16 Oct 2026 16:01:55 +0000
Files and hashes: 1: 2h4xI3Z9i2TeCjfdLwk7IRmZOzc.roa (hash: mTKUoeR1D0ra95Q17JeglPwLy4xwDPEBszuUsaOUHPE=)
2: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: O6SbtxC0eeYlMY76dXyUDZjLxjkQ8BTAbbS6cw+ZMrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:78:84:c6:6d:33:1d:00:f3:1a:ee:df:3a:b3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Oct 15 16:01:55 2026 GMT
Not After : Oct 16 16:01:55 2026 GMT
Subject: CN=b36093eece78be1b55465fb4c0aca333b1966e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:10:ce:57:2c:53:e6:35:8e:9c:fc:3a:b6:
9e:b1:de:4c:e5:85:b3:8d:f2:1d:69:83:0b:0a:af:
13:e6:90:51:92:13:43:ac:c0:30:a6:a5:f9:bd:5b:
9a:92:e4:5b:45:ba:73:01:7e:30:d3:19:fb:b1:b4:
00:a2:37:72:83:08:ad:1f:a7:e4:a7:3d:59:85:0b:
76:70:81:7f:72:c5:24:a9:4d:6c:56:e5:31:73:83:
05:b5:a1:e1:ac:3c:2a:d0:3d:69:66:b3:a2:cb:74:
ea:68:02:68:b5:4c:28:55:26:63:47:72:13:24:54:
33:e5:bf:ae:dd:39:1a:90:b0:85:82:33:6a:39:9c:
94:79:cf:f0:93:da:93:4f:b9:39:1c:38:ff:57:dc:
3f:c9:5c:62:2b:0d:8a:07:c6:94:03:3c:a8:ef:8e:
0f:d8:e8:9a:b0:e0:ee:3c:3b:7b:1f:aa:19:26:27:
c5:14:6e:4a:1e:cb:8e:c7:4f:f7:c4:a6:c1:30:66:
98:e2:c9:78:1e:7d:6a:48:6b:52:19:3c:cf:50:51:
95:d4:b3:a7:03:fc:aa:df:d4:cb:50:ee:56:05:09:
6e:2b:ce:b6:8e:2c:3b:52:c1:d1:ba:1e:1e:ae:78:
c2:2d:eb:61:5b:21:30:72:fe:4b:35:f3:db:04:2e:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:60:93:EE:CE:78:BE:1B:55:46:5F:B4:C0:AC:A3:33:B1:96:6E:59
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:00:7c:0a:2c:88:23:5c:70:1f:5e:ae:3a:d7:51:db:80:46:
4f:1a:1a:73:5c:03:4c:00:8a:c6:d9:73:e9:0d:01:8d:87:00:
8a:64:2a:e1:6e:d4:cf:a5:f8:66:d0:09:33:75:9f:be:c3:7d:
8b:c5:3a:ce:f6:75:78:23:bb:f9:3c:4c:ca:36:3d:9d:c5:25:
c0:27:5e:c0:82:23:f5:ba:f9:32:05:3e:1a:91:8a:ab:f2:58:
04:70:7d:68:1e:15:b6:b7:38:0b:ab:c0:17:a9:92:69:e6:7f:
9a:6a:b2:b3:a3:8d:9f:79:9c:fd:89:c0:f8:f8:6e:11:3c:7d:
33:01:24:1e:6f:bd:ff:71:7b:cb:a1:65:e7:45:f5:8f:86:c8:
0f:7a:00:f8:52:fd:17:8b:14:5c:69:52:c3:8f:27:37:f8:37:
fc:90:44:b2:f3:82:12:27:49:cd:60:43:13:7a:46:72:db:ce:
e4:6d:4d:37:72:71:15:b8:df:77:ab:62:ad:fc:b6:5e:f4:10:
97:0f:a6:55:e3:a2:a7:59:ce:97:b3:3d:6c:e4:5f:23:9f:c6:
f0:39:8b:6d:84:e4:a1:c8:68:0c:20:63:ab:01:77:2c:80:9f:
f0:51:65:ef:19:f5:09:c2:fc:48:0e:97:3c:9b:4d:f8:9b:4d:
81:9e:27:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFATHiExm0zHQDzGu7fOrMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDkwZmJhNjYzYjA3MmJiNTRjYzdkNDllODhhMDM4MDM3
NGNiNmUwHhcNMjYxMDE1MTYwMTU1WhcNMjYxMDE2MTYwMTU1WjAzMTEwLwYDVQQD
EyhiMzYwOTNlZWNlNzhiZTFiNTU0NjVmYjRjMGFjYTMzM2IxOTY2ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcIQzlcsU+Y1jpz8Oraesd5M5YWz
jfIdaYMLCq8T5pBRkhNDrMAwpqX5vVuakuRbRbpzAX4w0xn7sbQAojdygwitH6fk
pz1ZhQt2cIF/csUkqU1sVuUxc4MFtaHhrDwq0D1pZrOiy3TqaAJotUwoVSZjR3IT
JFQz5b+u3TkakLCFgjNqOZyUec/wk9qTT7k5HDj/V9w/yVxiKw2KB8aUAzyo744P
2OiasODuPDt7H6oZJifFFG5KHsuOx0/3xKbBMGaY4sl4Hn1qSGtSGTzPUFGV1LOn
A/yq39TLUO5WBQluK862jiw7UsHRuh4ernjCLethWyEwcv5LNfPbBC5XTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNgk+7OeL4bVUZftMCsozOxlm5ZMB8GA1UdIwQY
MBaAFAcJD7pmOwcrtUzH1J6IoDgDdMtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzct
MDFhMjhhNzZjY2Y0LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzctMDFhMjhhNzZjY2Y0
LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQB8CiyI
I1xwH16uOtdR24BGTxoac1wDTACKxtlz6Q0BjYcAimQq4W7Uz6X4ZtAJM3WfvsN9
i8U6zvZ1eCO7+TxMyjY9ncUlwCdewIIj9br5MgU+GpGKq/JYBHB9aB4Vtrc4C6vA
F6mSaeZ/mmqys6ONn3mc/YnA+PhuETx9MwEkHm+9/3F7y6Fl50X1j4bID3oA+FL9
F4sUXGlSw48nN/g3/JBEsvOCEidJzWBDE3pGctvO5G1NN3JxFbjfd6tirfy2XvQQ
lw+mVeOip1nOl7M9bORfI5/G8DmLbYTkochoDCBjqwF3LICf8FFl7xn1CcL8SA6X
PJtN+JtNgZ4n4g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:32 2026 by rpki-client