Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: G3kketjbrLPLc9PnR6Gstq3sgggX4UQe38NVbl6AafA=
Subject key identifier: 70:4C:7A:F1:C3:5A:36:3A:A5:49:0F:33:E6:77:31:91:CD:98:7C:44
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019E2F29691E914605BC3F0F8F722D85E6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 05:01:43 +0000
Manifest this update: Sat 16 May 2026 05:01:43 +0000
Manifest next update: Sun 17 May 2026 05:01:43 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: 44LBJdXER7Ez7x72l9ojUjLawNkGsI+yM9OONxp6WVo=)
2: WHq-HnXpka6rpneJHgIs142O010.roa (hash: vIU6EqtRsEPuNd3qk5b/5wKThF8xlpJsgvmp83AjeXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:29:69:1e:91:46:05:bc:3f:0f:8f:72:2d:85:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: May 16 05:01:43 2026 GMT
Not After : May 17 05:01:43 2026 GMT
Subject: CN=704c7af1c35a363aa5490f33e6773191cd987c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:90:03:45:46:93:a2:a1:fd:ac:6e:63:f9:
fb:27:36:ee:8b:6b:6c:f5:72:90:24:ee:be:ec:44:
76:da:4d:8a:a9:c5:0f:83:32:41:69:c3:ea:82:48:
3a:ba:b6:76:96:ec:f9:22:8d:47:04:39:47:b6:7a:
54:b6:60:c0:1d:df:90:19:00:04:90:da:30:f6:20:
d5:5f:3b:99:0c:77:49:65:91:df:ee:cc:96:15:48:
ef:ae:dd:7d:4d:31:9d:4c:0b:ee:55:b1:11:81:84:
41:ab:28:b3:e1:c8:ec:33:d9:25:04:3e:f3:50:a8:
8f:35:95:98:f0:7e:ee:7f:d5:25:61:21:c9:05:c6:
7d:8c:82:03:09:17:db:d5:56:79:22:02:05:d0:a2:
4a:91:68:dd:8d:fb:48:cc:6e:22:3a:db:58:93:6e:
b8:2a:f1:01:f1:17:a1:76:2b:ae:6b:1d:c2:e9:02:
79:a2:fa:51:e9:a0:1e:94:8d:6e:f6:62:c5:fc:db:
ed:20:8d:72:46:5c:4f:95:26:ae:50:6c:75:ed:da:
07:c9:2c:fc:45:f9:ba:f1:f8:5b:c4:71:fe:4b:08:
d9:3c:51:e8:2e:c6:90:2b:00:35:b7:bd:52:17:24:
76:fd:74:57:b5:3c:16:a3:b2:a7:ae:b0:25:6a:d9:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4C:7A:F1:C3:5A:36:3A:A5:49:0F:33:E6:77:31:91:CD:98:7C:44
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:e3:66:91:c4:f4:00:c0:3e:46:2a:a9:22:6f:71:6e:06:
f8:5c:4e:56:86:64:a6:d6:54:13:80:c2:e5:36:49:30:52:84:
fc:54:a6:80:19:4b:15:dd:6b:1f:aa:f4:2b:9a:6f:4e:6e:a5:
6a:7e:4d:5a:a2:35:e3:73:ff:29:09:49:8e:bc:8f:f4:e6:37:
57:db:66:38:af:02:4a:0a:e0:29:94:aa:b3:a0:7b:69:70:a4:
9a:b6:1b:8f:c4:9c:38:40:40:1c:d5:1c:5a:5c:bd:29:9e:be:
9c:ad:02:de:18:1b:36:5f:b0:10:70:2a:93:53:5c:b2:df:2e:
59:8c:7b:12:4d:7d:5f:85:06:64:08:d1:e7:df:c3:5a:b6:4b:
29:ec:61:1b:b0:71:98:ca:55:49:bd:8f:80:b2:c8:62:e2:e6:
dc:04:cb:8e:0d:b9:ef:a5:bc:b6:0d:89:f2:78:8c:2e:43:25:
14:4f:29:2f:38:fc:a8:ab:e9:c8:63:30:cd:22:3e:d8:23:07:
60:26:94:cb:36:6b:06:bf:e0:7e:26:bd:bf:b0:46:69:74:e0:
83:eb:3c:47:23:0f:97:78:ed:9e:2e:cf:93:50:c4:5f:d6:9f:
a2:86:29:05:e4:e4:39:c8:6f:8e:4b:59:f9:e8:c3:00:14:77:
1d:c2:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:51 2026 by rpki-client