Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: GZZUdemKIEoXgXWw8mkuEgDTiEtBDQs/VjdTpgpXk3Q=
Subject key identifier: 87:E1:E5:B3:D7:3F:E7:24:3E:44:76:2B:9E:30:58:B1:EC:B8:87:47
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019F18D63AA376D70F02ED3B3EDD6AF81ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 14:02:00 +0000
Manifest this update: Tue 30 Jun 2026 14:02:00 +0000
Manifest next update: Wed 01 Jul 2026 14:02:00 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: XBCHaNo9a+oQW+h1HrPIOHL8z6ZdPro6luQMud/ig5U=)
2: WHq-HnXpka6rpneJHgIs142O010.roa (hash: vIU6EqtRsEPuNd3qk5b/5wKThF8xlpJsgvmp83AjeXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:3a:a3:76:d7:0f:02:ed:3b:3e:dd:6a:f8:1e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Jun 30 14:02:00 2026 GMT
Not After : Jul 1 14:02:00 2026 GMT
Subject: CN=87e1e5b3d73fe7243e44762b9e3058b1ecb88747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:08:02:9a:08:ac:0d:7f:f4:ad:1c:34:55:
cc:6a:93:b3:12:9a:37:9e:7e:5a:d4:04:ad:17:6f:
60:38:13:10:7c:9a:d2:57:98:bb:6e:fb:48:eb:8d:
92:16:d6:46:67:f2:27:b1:e9:32:9f:5e:18:08:6b:
79:a1:ae:ed:9e:07:04:6c:45:5e:46:e2:c4:c6:88:
2b:d1:59:4d:a7:a7:1e:6c:92:83:ca:f8:b8:b3:f9:
f5:cb:14:39:14:64:5b:5f:41:08:03:ed:5e:6d:3d:
1a:0e:c8:13:8f:04:1c:51:db:31:6b:71:d0:26:f6:
06:fd:cd:b8:2b:b8:d2:7b:36:ed:51:30:2a:54:53:
03:de:fd:04:8f:c0:6e:84:5f:9e:88:89:8f:c6:bc:
f5:9a:b4:0f:f0:27:f9:6b:e0:fe:ec:90:4f:32:3a:
59:fd:51:f5:d3:0d:86:4d:c3:f2:7a:7c:63:ec:23:
3f:b1:63:a5:e9:65:91:fd:5b:c9:21:c5:2e:ff:6a:
ff:75:c1:96:c6:0c:92:45:af:e7:9d:95:3f:d2:69:
4a:7d:a4:9f:98:9a:60:e3:ab:69:fa:6a:80:c6:5e:
5c:09:40:57:a1:32:c0:aa:e1:24:40:c1:98:be:ff:
59:e6:ce:5a:c6:22:a2:02:18:48:b0:3c:d0:b4:e1:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E1:E5:B3:D7:3F:E7:24:3E:44:76:2B:9E:30:58:B1:EC:B8:87:47
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:71:88:2e:d5:59:51:19:89:eb:62:43:a5:34:ce:01:7e:80:
58:da:db:e0:de:4f:89:76:a0:b8:0a:ed:d8:24:82:ec:3f:98:
c2:12:18:a6:b3:bd:d0:30:dd:54:fa:35:e0:49:86:52:87:45:
04:e9:12:bf:b8:5c:1d:39:04:4b:2e:16:f9:45:ec:d3:37:c4:
b5:2e:91:77:66:1f:6b:c0:5e:33:a6:ea:f6:fb:a6:40:d5:e7:
5c:e7:20:7e:e7:da:07:db:b6:23:ea:f7:40:d2:36:25:d5:05:
33:4c:57:0a:81:82:67:e2:6e:1f:49:07:25:14:90:68:00:f8:
13:5a:01:d3:96:d4:5d:23:bd:92:c8:25:ca:c1:ab:af:4a:3b:
cb:33:e7:f5:62:89:e8:cd:a1:fd:4c:06:1a:9a:7c:c7:93:a0:
77:ca:c3:0f:d7:85:c9:26:33:c1:08:b9:0e:94:35:4f:8c:4d:
b9:57:1c:ce:af:de:25:09:6a:55:a0:68:a3:ed:8f:20:68:9e:
af:d3:00:78:13:5b:65:cc:70:94:89:2b:ec:0b:11:21:14:f4:
8c:da:3d:35:f2:3b:5d:d0:b7:31:57:10:dd:cb:e1:9f:20:a3:
23:24:da:e8:ff:08:bc:7b:db:f1:0e:d8:fd:7e:00:2f:7b:fc:
5d:50:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:29 2026 by rpki-client