Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: 1jHNyZliJ0vrBLKQcBOCr3+a9E7pDfQUaUmoB/L7t4Y=
Subject key identifier: 2F:7E:11:46:DB:14:5A:4B:F9:0D:20:E4:A9:41:1A:26:AA:77:96:59
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 019E1C46D063BF97126EFBCEED2626220501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 0BC4
Signing time: Tue 12 May 2026 13:01:03 +0000
Manifest this update: Tue 12 May 2026 13:01:03 +0000
Manifest next update: Wed 13 May 2026 13:01:03 +0000
Files and hashes: 1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: NFsJJWafM8VVnWOe0haguXHRuG0ythjgTgZmZvML/Mw=)
2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:d0:63:bf:97:12:6e:fb:ce:ed:26:26:22:05:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: May 12 13:01:03 2026 GMT
Not After : May 13 13:01:03 2026 GMT
Subject: CN=2f7e1146db145a4bf90d20e4a9411a26aa779659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:12:e3:43:0c:df:6a:46:49:cc:b3:42:56:
16:43:9e:1d:b9:f7:81:c7:ba:8b:1e:78:1d:ae:16:
27:6f:19:eb:fc:35:51:e2:bb:a5:e4:c2:d0:8e:57:
19:b2:09:19:41:22:1f:5b:f1:bd:71:9d:c6:40:fb:
cb:4a:d6:9a:8e:28:59:b9:6b:62:50:2a:25:00:53:
9e:dd:93:81:0e:31:5d:70:3e:9c:12:e0:fb:2e:d6:
96:2e:95:ef:cd:f1:39:a7:1d:93:5a:fd:52:87:75:
df:87:5c:fc:82:59:ae:9e:5f:a2:3d:21:a1:d8:ae:
63:7b:3d:87:2a:e1:ff:bd:23:cb:9f:d0:87:19:68:
f4:20:c3:58:ea:e3:db:57:51:b7:af:11:0b:cb:f0:
8a:04:f0:21:4f:b5:3a:87:b9:dc:f5:28:44:ea:5d:
54:62:7a:bb:3f:e6:b2:a6:c0:8b:34:05:ff:fb:03:
c4:9e:2f:bc:7e:b2:5c:f0:cf:b1:65:70:1c:85:26:
c8:5f:e5:f3:bd:e2:0d:ec:7d:e3:1b:a2:1b:33:82:
4c:f7:91:58:7f:93:f5:0c:27:e7:02:4a:39:a5:eb:
5f:b3:a0:83:f9:99:69:8e:1f:76:d8:b4:b3:09:6c:
56:11:60:31:c7:3f:92:be:9b:b4:63:2b:b5:14:7f:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7E:11:46:DB:14:5A:4B:F9:0D:20:E4:A9:41:1A:26:AA:77:96:59
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a3:00:23:f6:8f:ba:8a:94:1e:2b:af:a2:e8:07:02:8b:9c:
c8:b5:6e:6c:5e:6b:fe:28:52:6c:c8:52:17:17:e0:9d:51:7c:
dd:8c:12:0a:8d:be:9d:d9:e6:a2:ba:b5:4a:37:2f:21:f3:fb:
ed:41:6b:33:73:7a:c9:bd:00:63:52:00:d5:5e:5e:07:84:5b:
ff:62:2d:bc:5f:b3:73:d4:c7:3e:ce:ef:6e:85:da:aa:0d:95:
bf:b7:c4:c3:27:40:db:80:41:2f:7a:1a:aa:ad:ac:3b:fd:43:
c6:99:ac:75:41:3a:5c:6c:4f:42:a8:5c:13:44:5d:07:c5:dc:
8d:b8:97:a8:25:e6:42:6b:68:8a:9f:df:ce:69:89:79:41:69:
26:a6:42:c6:89:d3:52:8d:6b:4c:f2:ce:1b:31:38:b8:c5:37:
0d:44:5f:3e:6b:5c:7e:c7:0c:74:04:c1:fc:8d:9b:58:f1:14:
60:5f:8e:87:45:49:c7:2d:17:67:65:db:12:54:32:33:2a:77:
a4:82:ff:2e:8f:02:dd:15:3d:09:37:87:2c:b6:86:41:43:3d:
14:c5:ea:13:33:83:e4:eb:67:0f:ac:66:61:6f:f9:4c:60:e1:
95:66:cb:82:35:cd:7d:4a:16:e8:52:7f:c3:89:d4:77:81:3e:
e6:74:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:21 2026 by rpki-client