Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: zGaueIi/Kl/GwPux6sq0YXyhPNGH1x0CaHa4OEuxzpI=
Subject key identifier: 3F:6E:23:B0:2B:65:7F:87:46:E3:D8:93:46:A2:DD:C4:FD:BB:E7:A5
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 01A18676269E1D18559F7CACC926B2996055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 0BB1
Signing time: Thu 29 Oct 2026 07:00:52 +0000
Manifest this update: Thu 29 Oct 2026 07:00:52 +0000
Manifest next update: Fri 30 Oct 2026 07:00:52 +0000
Files and hashes: 1: IfGCpj85Q4o-UGyQ31NliYn-gNM.roa (hash: x5pzaYdpKRd4mBuwlpRlCZ/BZdgSlAglcVpLNOFR9GU=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: sxXioFiIfQNUTQ4GWGTzjeseSGrRBdEde1nkNBSAh0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:26:9e:1d:18:55:9f:7c:ac:c9:26:b2:99:60:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Oct 29 07:00:52 2026 GMT
Not After : Oct 30 07:00:52 2026 GMT
Subject: CN=3f6e23b02b657f8746e3d89346a2ddc4fdbbe7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:e3:21:0f:7d:a1:38:88:c7:6c:f0:e6:17:
b4:42:77:a7:1c:df:1c:50:f0:98:09:4b:95:b0:12:
88:ca:7e:90:bf:c6:53:df:8b:1b:50:5a:29:45:15:
a6:07:0c:2f:65:f1:b7:ac:b0:d7:34:67:87:d0:f3:
10:1f:b1:aa:02:dd:c6:81:2a:39:e0:88:29:dc:eb:
f3:61:ce:ee:bc:55:ee:4f:8f:76:d6:9b:84:3f:11:
db:f5:db:19:77:c1:ee:27:79:a8:73:4f:24:ed:08:
20:ce:f0:eb:4d:bd:d1:c1:c9:17:2d:98:10:8f:5a:
80:2d:05:53:e2:27:03:3f:4f:93:9f:86:7d:5b:a9:
00:ce:c3:45:32:66:44:b8:9d:ee:8d:b3:49:2b:6e:
a9:b2:d7:38:6d:8d:00:10:ee:99:0e:d4:53:82:57:
25:c2:0f:8d:94:ff:30:13:d3:a8:8e:1c:0a:06:a0:
98:f6:35:64:88:1b:6b:40:9a:1a:ff:d1:26:b0:10:
a5:be:80:65:92:3c:36:66:bf:5c:42:4b:15:e7:d0:
ad:a1:2a:79:49:fa:75:b3:44:d8:0e:8d:c2:20:b4:
f8:1e:8a:9b:f9:4d:7f:ae:67:fc:8c:bc:c9:ad:2b:
a6:85:61:88:93:47:d7:6b:5a:10:34:cc:25:74:90:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:23:B0:2B:65:7F:87:46:E3:D8:93:46:A2:DD:C4:FD:BB:E7:A5
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9c:db:ce:b3:a0:12:2e:88:60:aa:4a:98:1b:d6:0b:8c:d7:
90:50:d2:c9:a4:bb:1a:7b:4f:47:41:1f:f4:b7:40:5d:3d:7a:
73:8b:b4:2d:ca:c9:4e:cc:14:f0:aa:94:71:ab:2c:bb:ea:a2:
42:51:9d:ea:29:3c:1b:b3:1a:b9:79:11:20:0a:d5:4c:5c:3b:
ff:0b:eb:25:00:fd:b1:93:09:6a:da:b5:77:4a:c3:99:d6:e3:
45:ff:d0:37:30:62:3e:aa:8f:7f:20:df:30:77:ac:af:d6:3d:
71:2e:43:eb:48:bb:e8:b3:b3:8b:3a:45:c8:79:2b:28:5e:b0:
71:c0:1e:01:57:df:8f:b2:ee:d4:7e:0a:9d:f7:13:34:5b:cd:
20:fc:00:b2:73:a9:91:7d:89:79:e1:da:a6:36:5e:df:38:18:
57:3f:e2:6c:4e:f8:db:ca:b3:d8:05:28:4a:c1:f9:bc:e0:cb:
e6:b9:23:d3:c7:41:6c:05:c2:2c:57:80:91:af:84:63:4e:5c:
9c:c0:2b:40:de:94:a8:ea:e8:87:4f:07:18:29:bd:e6:d0:71:
a1:0c:d2:fe:7f:cb:85:51:1b:c7:c7:b9:8d:5a:5d:f5:1a:41:
6d:10:0b:91:5a:70:eb:36:4b:f2:11:e5:f0:02:c6:92:84:04:
13:e6:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:51:26 2026 by rpki-client