Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: 6LajGnHI/UgZ29tQURKbp536HVgjtKfbKLgyaduX/cE=
Subject key identifier: 1A:38:70:A6:A7:07:4A:2C:13:1D:10:CB:7A:74:FF:C0:C6:AB:00:AE
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019E1DFE1FBE6E43ADAEDA67B5B447654EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0B45
Signing time: Tue 12 May 2026 21:00:54 +0000
Manifest this update: Tue 12 May 2026 21:00:54 +0000
Manifest next update: Wed 13 May 2026 21:00:54 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: 0wk8uEVBC0hrktL729Um2i93disOdGBwlKIghjKx2do=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:1f:be:6e:43:ad:ae:da:67:b5:b4:47:65:4e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: May 12 21:00:54 2026 GMT
Not After : May 13 21:00:54 2026 GMT
Subject: CN=1a3870a6a7074a2c131d10cb7a74ffc0c6ab00ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:5e:97:d9:22:98:41:95:af:80:e2:05:4d:
82:4f:22:af:0c:cd:7d:b0:0c:7a:c3:8b:25:9d:7c:
6c:a7:3b:38:b5:11:fd:8d:8c:c6:40:5c:b1:cd:09:
28:d3:ca:3c:77:28:02:df:cd:b1:13:06:a0:6f:31:
39:3f:f7:b9:94:0a:39:f5:bd:8f:3d:ac:41:80:18:
e7:e3:70:0f:9a:56:c5:08:1f:15:37:2e:3f:34:2b:
d5:61:39:ef:a4:a9:d8:eb:99:83:57:34:7e:36:f4:
49:78:e4:87:15:4c:23:d0:ac:04:28:d0:2c:b2:f7:
b3:1e:5d:2c:15:cb:1a:a9:5e:1f:90:4b:88:25:72:
52:60:a9:7c:4a:c0:51:84:b7:30:94:9a:a5:0a:6e:
cd:b9:a3:94:ed:34:70:23:62:ed:5c:01:08:a9:f9:
06:12:6c:41:80:ab:9f:97:b1:2c:e7:49:1e:b1:c1:
28:6c:f0:8c:fb:16:b7:78:64:f5:85:f5:1b:dc:30:
6d:74:77:0b:4b:5c:47:aa:3f:74:dd:70:b6:03:d7:
a2:d4:2a:6c:53:77:6f:b7:9b:01:a3:eb:31:6c:ae:
06:31:71:7c:25:79:09:23:13:30:f5:4c:e2:72:3b:
b6:f8:a9:bc:af:6c:33:79:87:70:01:d9:f2:97:ad:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:38:70:A6:A7:07:4A:2C:13:1D:10:CB:7A:74:FF:C0:C6:AB:00:AE
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5f:4e:ba:2d:5d:cb:5c:c9:4c:18:78:e6:3c:49:6f:0c:0f:
f5:cc:50:db:47:b1:05:42:ee:a5:25:94:56:6c:0a:29:6e:64:
68:31:32:38:05:c0:0d:39:1e:1d:56:9d:9c:3d:22:73:7d:39:
51:19:3e:07:be:f8:9a:39:b2:9a:60:fa:3f:2d:8d:0b:fd:83:
a2:bd:47:e7:6e:d6:e5:73:ad:3a:b1:2b:96:f9:72:f4:47:77:
9e:c3:08:3f:48:03:7e:31:8f:b3:a5:f9:58:d4:2f:51:bc:87:
20:12:22:84:67:ca:55:86:03:3b:c2:65:df:c7:87:81:ea:dc:
2e:e5:13:c7:27:52:9e:ac:24:07:d3:47:a8:a7:bd:7a:ca:e5:
d7:30:b4:12:d5:19:98:94:30:61:38:05:10:7a:cf:f8:56:c4:
01:1e:6b:bf:43:ed:e4:91:b2:20:09:e8:42:ff:67:2c:82:ec:
f7:2d:80:71:b3:5b:60:64:c4:b6:db:3a:6e:67:d2:bb:ad:9c:
90:2b:63:a3:ba:6a:e6:24:63:7e:99:0f:2e:bb:d3:b3:3b:30:
85:28:7a:b2:58:82:e6:33:18:6f:55:57:8d:3f:83:7e:86:2f:
c9:24:34:6c:4b:24:d5:5d:fb:f7:9d:0e:4b:01:cd:86:e8:be:
34:4e:b7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:53 2026 by rpki-client