Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: 4SBcuy7VdlcDZC3UuQYvWk3AMFg577k9Bs28fAGbbjk=
Subject key identifier: 2F:FD:73:8D:90:63:B7:03:F8:4C:21:40:95:E0:C0:5D:8D:C5:18:FA
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 019D2703C642DA99B863B839CD2AB89DE9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 0B45
Signing time: Wed 25 Mar 2026 22:00:51 +0000
Manifest this update: Wed 25 Mar 2026 22:00:51 +0000
Manifest next update: Thu 26 Mar 2026 22:00:51 +0000
Files and hashes: 1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: u/R4wlUa319j4RjCIhTTYUjZk/KimI0MfCBgDozoxYU=)
2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c6:42:da:99:b8:63:b8:39:cd:2a:b8:9d:e9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Mar 25 22:00:51 2026 GMT
Not After : Mar 26 22:00:51 2026 GMT
Subject: CN=2ffd738d9063b703f84c214095e0c05d8dc518fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:80:e9:f4:df:84:12:18:22:48:91:ca:f8:
30:e5:9c:65:d4:42:5d:62:2d:b8:ca:ac:86:03:e7:
c0:49:61:cb:3c:f9:74:74:94:e6:09:0d:12:a7:d6:
49:66:43:a1:b7:3b:5f:d6:a8:d9:21:ff:39:b0:b1:
44:26:29:2a:53:5d:78:c6:6a:7d:47:06:38:98:60:
d8:fb:9c:94:ca:73:98:6b:84:58:12:79:e0:08:89:
d8:b4:f2:a6:8f:30:c5:29:da:8f:85:a0:b7:4f:9a:
19:d6:4c:49:be:7a:47:f4:0a:d0:19:21:c6:c2:da:
a2:ac:73:f3:b1:f2:b3:0d:c0:79:17:d7:ac:8f:56:
21:ac:67:12:64:71:20:01:7e:7a:a5:d3:3c:69:3d:
d4:09:65:8b:ee:89:c2:7c:60:69:bb:37:6c:b6:2d:
f1:f0:0e:46:9a:41:b4:3e:1c:fb:26:b2:00:97:ed:
76:e6:18:65:00:83:8e:92:92:3e:02:6d:ef:71:44:
ee:b4:47:84:e8:52:57:26:3d:04:ad:40:6a:eb:3f:
18:60:7e:f0:03:a7:fe:36:ea:de:ed:5f:a8:b9:09:
cf:1b:3e:a1:b0:81:c4:30:ad:06:df:8e:29:57:ea:
88:83:6b:9b:3d:6f:38:3b:c8:80:33:10:28:06:e4:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FD:73:8D:90:63:B7:03:F8:4C:21:40:95:E0:C0:5D:8D:C5:18:FA
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ee:28:6e:76:e8:de:32:e3:3a:53:54:92:d8:52:62:88:33:
83:aa:2c:a6:6f:32:3d:89:be:1f:ae:8c:1a:52:ca:d0:d0:27:
4d:4c:a0:21:e0:37:d0:36:7f:d2:33:64:47:c2:83:db:fa:01:
f8:02:32:fc:be:41:0c:7c:10:b2:32:79:fa:c5:a5:fb:dd:79:
3c:c5:01:b1:bd:0b:dc:52:12:32:5c:57:b9:8e:48:cd:6f:94:
9c:4b:61:39:a0:18:9e:78:81:8f:f5:7c:b5:07:b3:b3:0d:55:
05:a8:0f:ed:c6:30:93:f0:a3:46:77:8a:44:8c:1c:70:56:25:
fe:bb:5a:2f:b3:f2:04:8e:bc:62:38:8a:16:9e:72:b3:9a:cd:
ad:e9:3b:fa:0e:a0:42:f3:9e:88:48:04:74:02:58:f5:69:f8:
a4:05:32:d3:8b:1d:aa:36:7e:8e:2a:a2:8d:de:1b:3b:31:fc:
41:87:9a:86:67:a0:68:5a:ec:e0:d2:de:11:18:6d:b8:2a:f9:
b1:e9:d4:64:47:25:25:7f:e0:1d:04:70:b1:3f:46:d5:33:45:
c3:63:ae:ed:fb:96:2c:b0:f6:f3:c2:cb:0b:7f:43:d4:1f:58:
d0:d2:a2:45:73:fb:24:2c:64:1c:86:94:68:ad:aa:48:f0:66:
f7:82:fb:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA8ZC2pm4Y7g5zSq4nen7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm
MGMzNzYwHhcNMjYwMzI1MjIwMDUxWhcNMjYwMzI2MjIwMDUxWjAzMTEwLwYDVQQD
EygyZmZkNzM4ZDkwNjNiNzAzZjg0YzIxNDA5NWUwYzA1ZDhkYzUxOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvruA6fTfhBIYIkiRyvgw5Zxl1EJd
Yi24yqyGA+fASWHLPPl0dJTmCQ0Sp9ZJZkOhtztf1qjZIf85sLFEJikqU114xmp9
RwY4mGDY+5yUynOYa4RYEnngCInYtPKmjzDFKdqPhaC3T5oZ1kxJvnpH9ArQGSHG
wtqirHPzsfKzDcB5F9esj1YhrGcSZHEgAX56pdM8aT3UCWWL7onCfGBpuzdsti3x
8A5GmkG0Phz7JrIAl+125hhlAIOOkpI+Am3vcUTutEeE6FJXJj0ErUBq6z8YYH7w
A6f+Nure7V+ouQnPGz6hsIHEMK0G344pV+qIg2ubPW84O8iAMxAoBuSXaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/9c42QY7cD+EwhQJXgwF2NxRj6MB8GA1UdIwQY
MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct
ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk
LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+4obnbo
3jLjOlNUkthSYogzg6ospm8yPYm+H66MGlLK0NAnTUygIeA30DZ/0jNkR8KD2/oB
+AIy/L5BDHwQsjJ5+sWl+915PMUBsb0L3FISMlxXuY5IzW+UnEthOaAYnniBj/V8
tQezsw1VBagP7cYwk/CjRneKRIwccFYl/rtaL7PyBI68YjiKFp5ys5rNrek7+g6g
QvOeiEgEdAJY9Wn4pAUy04sdqjZ+jiqijd4bOzH8QYeahmegaFrs4NLeERhtuCr5
senUZEclJX/gHQRwsT9G1TNFw2Ou7fuWLLD288LLC39D1B9Y0NKiRXP7JCxkHIaU
aK2qSPBm94L7/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:57 2026 by rpki-client