Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: htJmm24L5BRrQAIDAxv1NBtzTOo0pp+zYUKx8QfVXPQ=
Subject key identifier: 42:93:7E:B7:C9:D5:4B:48:48:D9:50:5F:FD:E4:FE:20:E6:2D:CD:75
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 019E1E6C7372AE57A8BB15680156BD866375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 117A
Signing time: Tue 12 May 2026 23:01:24 +0000
Manifest this update: Tue 12 May 2026 23:01:24 +0000
Manifest next update: Wed 13 May 2026 23:01:24 +0000
Files and hashes: 1: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: CfbgN2vzgbSGrDPpWQoExZMIE/Aj8IlCcM7ZAAQ+Jqg=)
2: egKdfoe4jr_OcoA2zw7t88jvhNw.roa (hash: Rm9ZrDiXC3MyZptxhCKpvW8pxI8d9wrZAzUEIDnaY8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:73:72:ae:57:a8:bb:15:68:01:56:bd:86:63:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: May 12 23:01:24 2026 GMT
Not After : May 13 23:01:24 2026 GMT
Subject: CN=42937eb7c9d54b4848d9505ffde4fe20e62dcd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:b7:19:18:fa:e5:79:b8:48:4c:1c:3c:c1:
31:c1:a0:30:b1:87:ed:61:10:1d:12:83:64:e7:10:
51:80:d0:be:3e:e3:4f:29:7d:b7:88:9b:d8:45:59:
10:86:8e:cc:ff:c5:5d:5a:bb:d3:8f:06:07:3f:7f:
39:61:04:25:87:8c:16:01:29:a3:f9:cc:a1:f9:32:
60:0f:ef:b9:05:d2:90:ba:64:fa:60:58:1a:8f:ec:
68:a8:f9:00:01:86:c6:73:1a:59:be:fd:d6:cf:4b:
7f:4a:57:a6:41:71:e9:c8:65:25:94:ad:a5:40:b5:
5e:30:41:65:e3:94:6a:fd:f7:5b:8c:56:6c:a1:cc:
cd:0e:d4:75:a4:99:0b:43:f1:69:b9:c5:00:a2:13:
d8:63:20:18:79:fc:d0:1d:38:fe:fe:ee:39:23:6a:
22:a0:e0:39:c5:ff:82:1f:13:c0:98:8a:25:59:65:
b9:9e:6c:74:4f:ec:37:c6:27:38:a7:f3:63:22:50:
80:37:ce:55:90:27:09:77:aa:44:5a:55:e5:95:9d:
5e:e3:76:fe:2f:d4:61:df:40:bb:f9:79:57:1f:aa:
0a:23:6e:be:11:30:47:a8:44:d6:1d:c2:d7:ec:65:
a1:f6:43:d2:e7:fb:6f:24:2b:ea:77:6a:53:9b:8b:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:93:7E:B7:C9:D5:4B:48:48:D9:50:5F:FD:E4:FE:20:E6:2D:CD:75
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5a:46:3d:6a:e7:c4:b4:0a:0d:79:20:af:69:eb:a3:53:2e:
0f:cd:37:76:3c:1a:00:1a:ab:ff:77:32:c6:c5:2d:a1:fd:b1:
a0:d8:7d:d6:92:e3:ba:a9:8d:cf:05:ec:f5:85:8e:e5:e8:a9:
59:32:2f:f5:0f:ba:6f:fb:49:d0:66:45:b4:b0:f5:76:93:f2:
1b:e2:00:c6:79:f0:d2:8b:6e:22:0e:a0:ed:d0:8c:ea:22:ba:
22:b9:ca:5c:fc:53:c8:5b:bf:c7:41:ea:6a:39:6c:b6:e5:6f:
01:cd:54:af:0c:40:1f:33:e9:ff:84:f0:40:70:f8:d6:9e:64:
14:89:7b:9e:4c:da:10:5a:25:a5:d0:44:6c:b4:8e:b1:f9:ef:
d6:06:bd:86:d4:eb:92:0b:40:24:5f:62:56:e1:4a:98:b5:b8:
e4:81:99:ae:2b:7d:34:06:4c:fc:95:2d:93:a6:34:d4:f3:94:
8a:9f:e4:83:28:f6:4c:05:e4:d6:ff:dc:e4:0a:f3:b8:0b:79:
87:e8:65:6f:1e:6b:a1:37:45:1a:3d:65:3f:74:a8:eb:23:c4:
7e:1d:ec:5b:db:dd:fa:d4:01:2e:81:18:3e:8f:68:c6:16:2f:
da:7e:45:ff:a1:4b:98:0e:8c:44:da:45:55:eb:d4:e7:68:60:
c3:9c:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:01:07 2026 by rpki-client