Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: kWFiblq+PTL1w5BNwK4RwERl0vloiPL+H7iyc4RwTp8=
Subject key identifier: E1:B8:E5:26:39:4C:F5:1A:33:86:CF:74:ED:BB:BB:F5:C2:20:B5:09
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 01A0CF6CD9274C670D809935FCB004F27994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0CAA
Signing time: Wed 23 Sep 2026 18:00:12 +0000
Manifest this update: Wed 23 Sep 2026 18:00:12 +0000
Manifest next update: Thu 24 Sep 2026 18:00:12 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: ZgvQq3Hpcrj0zM58gupAMWmjEWDYOpiFxNPQRmF1Fz8=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:d9:27:4c:67:0d:80:99:35:fc:b0:04:f2:79:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Sep 23 18:00:12 2026 GMT
Not After : Sep 24 18:00:12 2026 GMT
Subject: CN=e1b8e526394cf51a3386cf74edbbbbf5c220b509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:0e:ad:81:3c:06:a4:7c:77:1c:60:4e:76:
c6:98:ea:18:90:85:a9:a1:e4:79:79:78:ec:65:09:
e0:10:6a:5f:2d:34:b4:7b:64:d3:c9:15:c2:12:d0:
6e:5c:d1:66:87:3b:e7:ca:cf:32:f4:1e:e7:e4:d6:
9f:01:fe:0c:42:04:b2:84:e7:70:ae:3b:80:81:8d:
d4:64:16:f5:3f:70:4c:cf:02:f9:ee:0c:e1:07:9c:
ee:db:85:da:37:d8:f8:98:af:a4:f2:53:dc:31:ce:
29:60:1b:28:15:56:bd:52:13:97:ac:08:9c:a8:79:
b8:21:e7:70:29:f2:d4:80:9d:06:81:90:85:85:2d:
c0:e3:32:c3:76:ec:ff:53:66:5e:98:ae:cc:8f:48:
1d:ca:39:1f:75:4d:ba:12:3a:1d:81:06:d9:4b:e7:
15:34:64:de:03:8e:af:03:81:e7:94:b1:a4:08:2d:
8a:d5:46:06:13:44:85:c5:49:77:76:67:00:1b:c0:
53:f0:4e:e5:d0:f9:0c:3d:2f:d2:38:b9:f4:3b:66:
1b:0a:4e:b6:89:46:9a:2d:36:24:d6:b5:a0:37:de:
c0:07:92:66:78:c9:64:06:5e:f9:60:f8:d8:54:b5:
0b:5b:51:0f:ca:12:08:a2:38:4f:94:52:28:c9:b4:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:E5:26:39:4C:F5:1A:33:86:CF:74:ED:BB:BB:F5:C2:20:B5:09
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f4:5a:e1:ff:25:35:0d:0f:6f:a1:b6:6b:fd:db:2e:6c:a0:
84:4f:58:91:1e:00:85:88:06:30:9a:f7:f8:9e:c2:aa:02:bd:
7a:d7:f4:c6:0b:06:dc:a8:63:e7:2a:da:c8:5d:13:17:22:8f:
73:eb:34:bf:92:68:78:bc:0d:78:a1:64:55:d8:70:3f:4b:38:
9b:5b:ab:1d:2c:f2:8c:f2:a1:5f:3a:d3:df:69:1e:ed:c9:cb:
bb:c4:95:7b:f4:bb:c6:c3:7a:86:83:1a:f1:14:ab:6c:2e:bf:
44:87:56:53:f9:2d:c2:dd:a4:25:67:2d:d9:10:3c:c0:20:9a:
70:34:a8:92:80:f3:bf:7c:46:7c:4c:ef:54:80:75:b7:09:db:
ee:33:80:b2:52:b9:39:42:a2:89:e4:f3:b4:b5:a6:57:d2:6b:
25:72:18:5e:bd:0c:20:b0:51:f5:7b:34:b2:af:0a:69:0a:70:
85:93:0d:ea:2c:d8:9d:6b:bc:af:3b:8a:e5:fb:66:a4:07:a4:
56:c4:f1:90:b1:26:20:fc:31:92:d0:11:90:89:94:c2:f4:26:
8c:a2:2f:1e:fb:4c:6f:dd:38:79:93:14:88:f6:ea:1f:f0:ac:
3d:d4:a2:f2:c9:06:80:9b:6e:be:1b:72:ca:06:3d:cf:cd:32:
00:31:85:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbNknTGcNgJk1/LAE8nmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjAwNmYyYTE4NDA5MDBjNzUzNjI4MTIxYjNmYjdlYzVi
ZDg5ZTkwHhcNMjYwOTIzMTgwMDEyWhcNMjYwOTI0MTgwMDEyWjAzMTEwLwYDVQQD
EyhlMWI4ZTUyNjM5NGNmNTFhMzM4NmNmNzRlZGJiYmJmNWMyMjBiNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8IOrYE8BqR8dxxgTnbGmOoYkIWp
oeR5eXjsZQngEGpfLTS0e2TTyRXCEtBuXNFmhzvnys8y9B7n5NafAf4MQgSyhOdw
rjuAgY3UZBb1P3BMzwL57gzhB5zu24XaN9j4mK+k8lPcMc4pYBsoFVa9UhOXrAic
qHm4IedwKfLUgJ0GgZCFhS3A4zLDduz/U2ZemK7Mj0gdyjkfdU26EjodgQbZS+cV
NGTeA46vA4HnlLGkCC2K1UYGE0SFxUl3dmcAG8BT8E7l0PkMPS/SOLn0O2YbCk62
iUaaLTYk1rWgN97AB5JmeMlkBl75YPjYVLULW1EPyhIIojhPlFIoybSK2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG45SY5TPUaM4bPdO27u/XCILUJMB8GA1UdIwQY
MBaAFAVgBvKhhAkAx1NigSGz+37FvYnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMt
NTViM2U2NDc2YTdiLzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMtNTViM2U2NDc2YTdi
LzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPRa4f8l
NQ0Pb6G2a/3bLmyghE9YkR4AhYgGMJr3+J7CqgK9etf0xgsG3Khj5yrayF0TFyKP
c+s0v5JoeLwNeKFkVdhwP0s4m1urHSzyjPKhXzrT32ke7cnLu8SVe/S7xsN6hoMa
8RSrbC6/RIdWU/ktwt2kJWct2RA8wCCacDSokoDzv3xGfEzvVIB1twnb7jOAslK5
OUKiieTztLWmV9JrJXIYXr0MILBR9Xs0sq8KaQpwhZMN6izYnWu8rzuK5ftmpAek
VsTxkLEmIPwxktARkImUwvQmjKIvHvtMb904eZMUiPbqH/CsPdSi8skGgJtuvhty
ygY9z80yADGFyw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:47:12 2026 by rpki-client