Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: VGImi6MqSullk2W/FCPmwUBdMP2MOHZ0I85i+o0aUR4=
Subject key identifier: E2:40:AB:CB:1D:DA:9B:84:62:44:FE:29:94:7E:CC:05:D7:DF:33:9E
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019D2AA99E31F8C134FF373BDD1299E2DF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0AC7
Signing time: Thu 26 Mar 2026 15:00:52 +0000
Manifest this update: Thu 26 Mar 2026 15:00:52 +0000
Manifest next update: Fri 27 Mar 2026 15:00:52 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: h+Vmoco0s8A+1yWvpbK5WIssl+BgOyNpkYn9urrol+o=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:9e:31:f8:c1:34:ff:37:3b:dd:12:99:e2:df:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Mar 26 15:00:52 2026 GMT
Not After : Mar 27 15:00:52 2026 GMT
Subject: CN=e240abcb1dda9b846244fe29947ecc05d7df339e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:1b:99:95:e0:be:79:82:fc:39:36:51:35:
b2:6d:d7:d2:3f:02:88:82:43:9d:cf:f0:4d:b5:c3:
05:5d:7e:96:93:ad:2b:cf:7a:ed:40:6d:f2:56:36:
21:60:8a:db:c3:d6:fa:d6:92:86:8e:50:a8:22:82:
56:2f:9a:f9:e8:8c:d8:27:ef:0e:48:7e:2e:cb:97:
24:ac:55:0f:c0:8c:e9:15:73:41:64:77:e4:d8:a8:
17:da:f3:2d:24:ca:d3:bc:24:64:c9:d0:7c:44:70:
95:ed:db:bb:b3:90:d9:77:5c:4a:e1:0b:c0:57:2a:
c4:6e:be:f7:2a:70:a1:cb:78:76:0c:ce:78:48:2d:
61:9b:0a:ea:9e:31:47:e9:65:05:56:d2:aa:fc:87:
8f:f6:85:a2:0d:0c:c7:e8:04:2e:d3:15:1c:60:4b:
7a:7c:ea:73:3c:a8:98:5d:eb:3a:bf:21:02:1a:66:
5f:7c:41:68:bf:94:3e:d0:92:bd:5b:5a:7c:11:aa:
52:49:48:59:16:9b:0f:21:a4:2f:98:d9:18:f0:4a:
55:49:f7:21:2e:ca:ad:84:a1:bd:f0:a0:cf:11:6d:
64:38:6f:cd:57:e8:be:d8:18:be:6e:44:19:a8:f6:
c4:a2:c2:0d:0e:c5:dc:36:a5:2a:93:23:20:eb:2d:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:AB:CB:1D:DA:9B:84:62:44:FE:29:94:7E:CC:05:D7:DF:33:9E
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:eb:24:8e:53:1b:01:52:d9:ae:98:e4:41:41:1f:8e:0c:02:
ad:18:96:27:9d:b8:7c:3e:50:ff:6a:23:67:12:90:50:00:bc:
81:76:ed:52:95:81:37:aa:c1:18:94:33:1e:a7:37:26:0c:a5:
3e:eb:c3:3b:a5:db:4b:cd:7d:b6:90:24:40:3b:ee:ad:f3:1d:
3e:1c:66:fb:0f:e1:1f:d5:b7:0e:58:ae:35:43:5b:fb:83:c6:
7e:83:0a:b1:5a:c9:c7:93:26:9e:a1:a7:d8:3c:a9:94:59:39:
dd:e8:50:89:a8:2b:5e:06:90:8b:63:4a:3e:a2:39:e9:d2:9f:
43:d0:48:21:dc:36:c9:31:fd:0f:99:e4:49:ce:22:58:8e:e2:
f8:cd:41:a4:03:88:b3:df:71:54:12:08:24:42:b7:07:67:74:
64:ff:aa:2c:c5:07:c3:09:c4:d3:90:6a:21:42:5b:5a:f4:85:
b5:42:9b:97:3b:7b:b5:16:2a:d6:5a:2e:35:ec:1e:a9:3c:56:
c2:f6:be:9e:14:cc:93:c6:90:d2:50:d6:e7:09:18:27:31:b4:
1e:bf:39:72:2f:90:e9:28:a9:d2:53:57:4e:25:a0:7f:6e:4f:
53:c2:4c:c6:d8:16:c7:45:0d:41:d5:d7:9c:2a:6e:7f:b6:db:
30:50:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:47 2026 by rpki-client