Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: 5W9EcVVzCOJOZbqDNqAx3mBJuzFqI2WLvCW7JgVv7/Y=
Subject key identifier: 62:FA:E2:27:42:73:25:7A:3B:FC:F9:A5:A7:34:85:09:02:F1:1E:24
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019D28BBA4FA29F453C6C56DB37948B6F4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0AC6
Signing time: Thu 26 Mar 2026 06:01:19 +0000
Manifest this update: Thu 26 Mar 2026 06:01:19 +0000
Manifest next update: Fri 27 Mar 2026 06:01:19 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: 33EHKUOciGogHabonGNiA4DOZj+p2VboGjO9OqY4J9Q=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a4:fa:29:f4:53:c6:c5:6d:b3:79:48:b6:f4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Mar 26 06:01:19 2026 GMT
Not After : Mar 27 06:01:19 2026 GMT
Subject: CN=62fae2274273257a3bfcf9a5a734850902f11e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:f1:2e:4d:cc:ca:e9:3e:35:c7:c3:a9:af:
36:c8:77:b4:ac:92:f3:23:1b:13:d6:fb:ad:2e:3d:
7d:09:de:21:b2:30:e2:96:08:d1:eb:da:41:a0:18:
fe:90:c3:f8:2e:b3:48:d2:20:94:62:e9:5d:40:2f:
5d:2d:63:2b:92:54:c4:7d:48:f8:a5:e4:47:50:2d:
95:61:bb:2d:00:80:8c:fd:9d:97:46:89:94:6f:80:
93:a4:e7:14:78:c4:0d:56:92:b8:8e:78:24:d8:82:
55:89:d2:fa:d0:1a:c8:0f:39:58:0a:bf:7f:1b:f0:
af:17:a2:e1:53:d2:4c:d2:5d:04:f6:ff:43:85:1b:
f7:cd:5a:ff:0a:29:0b:d9:68:c8:a0:b5:0a:5e:66:
c3:1e:19:e4:5f:46:c8:b8:64:db:2a:6d:bd:f3:52:
dc:3a:a9:19:70:33:7e:83:2e:5e:33:db:d6:d0:93:
fa:5a:d7:27:c6:79:38:0e:0b:dc:e5:3f:02:c5:16:
23:f8:9d:a1:21:98:cc:0d:34:fe:91:af:e7:16:10:
1b:6e:a0:81:fd:f2:47:6d:82:ec:2e:d7:57:49:81:
e7:eb:2e:8b:04:96:c3:3d:67:c6:ab:9d:3c:5c:16:
3a:5f:ec:a2:fe:1c:14:3a:6a:f9:6d:1e:ff:a2:99:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FA:E2:27:42:73:25:7A:3B:FC:F9:A5:A7:34:85:09:02:F1:1E:24
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:25:82:60:f8:1a:83:57:b7:32:74:97:9b:02:22:c9:dd:ba:
12:51:18:09:da:b3:2a:81:c7:aa:98:57:ec:4e:79:9b:5d:e7:
6e:fb:fd:5c:16:23:6b:0c:65:0e:6d:89:5a:c4:90:e8:98:20:
54:97:f3:42:b9:a3:60:a6:5d:a7:79:1c:f0:be:04:2a:1f:b9:
2e:c8:fc:5a:76:8a:78:44:1e:e1:81:ba:71:f7:07:c5:7a:47:
88:0b:6b:16:56:6e:f6:da:58:5a:a9:f8:a7:8e:30:6e:ef:1b:
14:d8:3a:d0:ff:6f:9d:60:97:1b:9f:2a:35:83:9e:88:72:65:
30:7b:99:9e:fe:d9:1c:af:36:c8:a1:4d:6e:63:96:e8:24:e9:
8e:87:99:63:9a:87:6a:1a:cd:8d:cc:a7:f6:0a:fc:58:36:01:
29:01:ab:a7:f6:6b:b1:b8:b6:6d:21:cb:44:d5:09:c3:ab:9b:
22:56:fa:99:46:86:53:1a:36:bc:c3:c4:fe:36:2e:0e:d4:33:
7a:c1:fc:b7:f3:1a:f8:ee:ce:66:bc:16:65:df:ad:06:8d:7f:
f9:5f:b4:ee:57:6a:20:62:67:67:49:06:95:8c:9b:e7:6e:94:
b6:ef:77:39:c7:78:84:b1:29:ee:4b:82:4e:75:cb:7c:21:8a:
c1:c5:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:32 2026 by rpki-client