Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: SWK0QB6zuITCqjKjowsoaF1lf/v2QVTGwftV5AQAnDM=
Subject key identifier: 75:4B:0A:7F:F5:27:1D:0B:DC:A7:E0:05:29:8E:E4:B2:49:D5:E5:95
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019D37F75426BFCA80BA46A3DBB00C3F435F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 05:00:48 +0000
Manifest this update: Sun 29 Mar 2026 05:00:48 +0000
Manifest next update: Mon 30 Mar 2026 05:00:48 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: RjmX5OCupjjqrYpFrv5totQ5qdIH4DOZh54ji1swgls=)
2: WHq-HnXpka6rpneJHgIs142O010.roa (hash: vIU6EqtRsEPuNd3qk5b/5wKThF8xlpJsgvmp83AjeXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:54:26:bf:ca:80:ba:46:a3:db:b0:0c:3f:43:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Mar 29 05:00:48 2026 GMT
Not After : Mar 30 05:00:48 2026 GMT
Subject: CN=754b0a7ff5271d0bdca7e005298ee4b249d5e595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:b5:90:15:4b:67:55:56:22:13:33:2e:e0:
2b:f6:ab:d8:f1:f4:16:a2:07:5e:ca:6f:cd:4a:84:
aa:e5:69:2e:24:b4:9b:f1:7d:c9:62:8c:fd:f8:8a:
6d:45:08:5c:bb:3f:28:db:47:03:ea:a5:6c:93:1a:
5b:4d:b5:bd:56:d1:c0:d2:3e:97:97:60:8d:1b:96:
07:e9:6d:78:00:28:a6:a0:39:e7:b9:3d:c7:73:82:
85:37:8c:3c:1c:7d:0d:18:7b:0a:be:53:f1:88:3b:
5b:a0:7b:b1:9b:d8:a6:73:9b:c9:e0:71:f0:30:69:
f7:05:bf:a1:ea:f8:af:03:c8:e0:48:47:3a:45:c1:
36:1b:68:bb:bc:64:75:6a:ff:eb:9a:0d:e5:2b:fd:
05:5c:8a:8d:52:ae:aa:fd:e5:bb:57:b2:cb:59:91:
ad:a2:32:68:c9:7a:77:28:07:0c:b1:27:3e:2b:18:
65:2a:d9:39:3c:80:a8:5b:f6:f1:32:10:d4:1a:84:
44:3d:5d:54:b0:31:81:75:6e:78:62:a4:22:b5:6d:
3c:c7:73:c5:3b:82:34:4d:91:2d:28:9f:8e:71:64:
da:89:86:70:cc:f4:c6:fa:1f:29:86:fe:a6:76:42:
2e:a0:2e:d5:e2:65:75:9b:a6:65:d1:b5:f8:e9:44:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4B:0A:7F:F5:27:1D:0B:DC:A7:E0:05:29:8E:E4:B2:49:D5:E5:95
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a5:f2:8b:c1:64:17:ce:10:e3:a9:49:b4:93:c8:64:82:da:
64:fc:93:28:d6:f5:5d:a6:02:61:83:fd:d2:ce:73:85:2d:c9:
98:4f:bf:71:f0:58:c8:a4:c4:81:da:83:db:2e:99:71:de:59:
14:65:8b:e8:ec:2a:a7:d0:89:0a:12:e9:ba:6c:fc:43:45:b9:
32:5d:8e:91:70:66:d2:5c:da:14:1a:a1:c3:d9:d8:96:ce:19:
92:77:b5:ab:11:ff:e6:20:8c:d9:87:f2:8e:7c:1a:0c:c5:3a:
e9:7a:54:35:60:73:97:8d:b4:69:4c:a4:11:40:85:3f:48:b3:
68:39:c4:d7:89:62:24:b0:51:18:de:0a:87:85:c8:7a:e8:04:
df:b5:e8:ca:7d:97:50:05:65:f7:ca:66:f1:63:0e:d2:2e:c7:
26:07:46:5d:aa:03:93:ed:48:1b:3a:b6:b4:f1:a8:0d:b5:a1:
3c:80:2a:97:82:f2:58:fb:1a:f3:e1:fc:87:83:f5:72:b0:72:
3a:b2:46:46:6b:5a:b4:8a:0b:35:f9:c8:31:d2:fe:d5:3d:ab:
1f:e0:17:ba:d3:e3:81:8c:23:01:19:eb:c4:22:94:94:5c:3d:
4b:ed:50:bd:90:58:e4:61:d3:ac:1c:f6:7d:63:94:08:60:1f:
20:f0:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:16 2026 by rpki-client