Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: G/2CMrk68+c7tRZGD0hirTIum9Fz6qHgMxPeXoEe7qg=
Subject key identifier: B3:19:1F:33:E5:54:B6:32:C1:80:AD:CA:B7:CE:D6:74:EC:99:E9:29
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019F90C7F689799321BEBFFA91BD3F91B88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0C05
Signing time: Thu 23 Jul 2026 21:00:51 +0000
Manifest this update: Thu 23 Jul 2026 21:00:51 +0000
Manifest next update: Fri 24 Jul 2026 21:00:51 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: O3WDwmVSrkpfDa1YanSXWCSg6qkspaNr9+h/oY3NzLQ=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:f6:89:79:93:21:be:bf:fa:91:bd:3f:91:b8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Jul 23 21:00:51 2026 GMT
Not After : Jul 24 21:00:51 2026 GMT
Subject: CN=b3191f33e554b632c180adcab7ced674ec99e929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:0c:a0:87:39:51:56:16:bf:8a:7e:c5:97:
cc:6e:5d:c8:d6:bc:98:52:4e:e3:f7:1f:3d:46:96:
20:85:76:f4:47:8a:fc:e9:49:cd:a1:23:09:3c:2f:
a0:25:da:c7:ed:49:e3:0e:ef:78:2d:42:31:0e:3c:
df:cf:7c:9b:fd:6a:7d:38:a6:2f:79:e4:34:c2:1c:
b3:5b:ff:08:d0:8f:d4:51:ab:eb:a4:e3:85:42:ec:
f0:ff:b0:27:3f:1c:66:66:9c:9d:c4:61:cb:0e:e7:
4c:a7:f9:e5:93:ee:54:c9:18:82:7c:42:7a:8f:a5:
08:d4:61:c1:d1:e9:62:50:62:dc:1c:5e:1f:b3:1b:
c8:02:c6:03:bc:98:ce:a5:30:0e:e7:b2:8b:76:6a:
f8:76:08:c4:ef:0c:6d:6d:f7:03:bc:b1:2f:16:a2:
de:77:97:af:e8:ae:72:57:0b:47:a5:63:2a:b0:7a:
e9:a1:30:c0:19:52:f8:7d:58:6f:8b:ba:05:52:42:
31:37:70:42:66:75:01:66:77:3a:d4:26:8d:a3:93:
62:e7:ab:a6:e4:67:38:5e:bd:af:ac:8f:1e:75:65:
b0:8a:50:df:c3:80:dd:d5:26:bd:0f:03:cd:2f:2d:
da:0a:27:7b:95:0b:15:66:e7:a3:2a:dd:1c:f4:f3:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:19:1F:33:E5:54:B6:32:C1:80:AD:CA:B7:CE:D6:74:EC:99:E9:29
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ee:62:9b:e6:16:ab:16:84:a8:03:d1:5b:aa:50:0c:fe:d6:
b7:a1:6d:a0:d2:be:49:c5:e3:36:9e:98:39:b2:7e:ec:97:9b:
12:e5:44:54:e9:da:31:8c:d5:82:cf:eb:6a:3f:dd:7c:2d:ad:
b5:8b:72:a6:4f:27:14:35:d2:87:a0:ea:c5:7e:a5:c8:fb:1f:
b1:02:26:74:7c:33:a3:36:62:7c:74:46:6f:21:59:8b:d3:f0:
8c:c2:4a:d7:ce:cb:48:c1:91:d2:39:a8:a3:82:71:83:bf:72:
12:ad:28:75:80:08:ea:f1:40:58:e3:57:dd:e6:4c:bc:b5:48:
fa:be:1f:d2:5f:8f:52:4b:73:c5:5f:b3:ac:0b:9f:a2:9f:95:
12:a9:2a:56:62:fb:7d:9e:f2:38:c9:36:90:f6:43:60:c8:07:
10:b9:fd:0d:43:b9:5b:b0:5f:25:51:ee:26:e9:59:fc:95:a5:
40:cf:82:e1:88:b1:f8:8d:56:4e:e0:4f:f1:ff:a1:65:9b:5e:
b5:12:ae:05:91:c5:ac:9a:dd:c9:be:2e:7c:77:f9:96:9c:8a:
f7:2d:df:62:c8:72:7d:82:7a:37:75:02:53:f2:37:b8:65:68:
56:52:78:de:0b:d8:cb:36:68:42:99:eb:bf:70:9e:6b:b1:3c:
e3:5b:41:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:49 2026 by rpki-client