Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: Sb/FnpVWVwz60rheiUhba3eAeAK9i8EmdBV5UShl5uA=
Subject key identifier: 3E:DE:09:79:A7:F1:68:ED:70:E4:99:4A:41:B8:39:21:DB:5D:85:40
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 01A1DE39C0C0AA2224191E08EF709E14E411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 136B
Signing time: Sun 15 Nov 2026 08:01:29 +0000
Manifest this update: Sun 15 Nov 2026 08:01:29 +0000
Manifest next update: Mon 16 Nov 2026 08:01:29 +0000
Files and hashes: 1: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: So17J2/11+2GEVGyEiBLf+iDtrxI6oJQ3SEaP8EVFdQ=)
2: egKdfoe4jr_OcoA2zw7t88jvhNw.roa (hash: Rm9ZrDiXC3MyZptxhCKpvW8pxI8d9wrZAzUEIDnaY8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:c0:c0:aa:22:24:19:1e:08:ef:70:9e:14:e4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Nov 15 08:01:29 2026 GMT
Not After : Nov 16 08:01:29 2026 GMT
Subject: CN=3ede0979a7f168ed70e4994a41b83921db5d8540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:70:15:ff:59:74:f4:d0:db:68:ea:9f:84:13:
84:96:78:28:cf:ef:bf:a9:c0:6f:bc:64:ab:a1:2e:
26:62:14:36:94:ac:dc:93:62:71:88:6f:b2:19:c2:
9f:23:6c:e0:9a:82:e0:a2:f7:76:8c:7a:91:32:07:
a8:fa:c2:ba:d5:70:80:d1:38:6c:f8:a8:04:a2:e0:
9b:4c:90:db:bc:84:7d:ed:62:82:4f:23:a5:f8:21:
5e:98:59:20:ec:25:b7:83:e8:5a:62:9d:7a:48:9e:
7d:94:9e:7b:95:2a:1c:ec:62:84:a8:22:7c:86:17:
d7:a6:e9:03:b0:33:80:b2:4b:60:77:8c:b9:2e:07:
5d:88:12:98:7d:dd:f4:52:3d:72:d2:53:25:2b:8e:
1f:e5:45:29:14:cd:83:4d:8a:5b:9a:df:ba:09:fd:
c6:ac:ca:99:de:ba:6f:99:e2:ae:65:3c:44:f6:45:
03:ff:c7:af:3b:00:bd:e5:2b:c8:f1:ca:28:09:71:
a8:07:2f:f2:ae:0e:48:61:d7:d1:4f:18:22:49:a3:
6b:c9:ce:8c:49:a5:43:da:ab:29:3b:c9:73:18:10:
ff:d8:a2:ac:f7:2f:db:ea:8b:da:a7:78:ac:01:29:
6a:25:bc:9e:b1:7b:55:cc:fe:0f:90:d3:4f:09:eb:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DE:09:79:A7:F1:68:ED:70:E4:99:4A:41:B8:39:21:DB:5D:85:40
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:31:4d:5a:8d:f4:cc:d6:af:2b:c9:3d:41:05:92:2e:50:8d:
6d:c7:5d:55:47:0a:3d:49:63:f0:16:5e:70:b4:6c:1d:46:58:
79:ab:12:0f:9d:c9:4f:ca:ba:1d:ea:36:18:b7:dd:1f:92:aa:
29:0e:64:d6:b0:84:e7:85:73:31:1b:14:a8:da:1e:d4:03:a8:
84:a9:b2:ba:6c:2c:8c:18:84:10:32:58:2f:97:0c:ba:86:ad:
a8:89:28:27:96:84:18:a4:ef:c1:b9:b1:73:08:f3:f2:c1:0e:
f8:4b:28:6c:8a:78:41:2b:23:5d:d7:b0:96:c7:13:56:bd:8b:
46:06:b7:ad:f1:26:96:1a:d7:1e:98:75:4c:84:0b:f4:03:33:
06:8b:53:60:10:8d:6e:6a:48:52:db:86:67:37:de:da:a3:a4:
51:6f:03:d5:90:b1:f0:8c:56:f5:b7:1f:9f:47:58:4e:54:72:
b9:f5:75:4c:d8:a1:1b:ef:d2:5a:df:12:b8:68:26:c3:34:10:
40:74:9e:d6:50:13:0a:e0:80:a3:57:4b:8d:08:de:5a:e7:6b:
a2:0c:fb:53:98:48:1d:50:34:cb:16:ec:ba:45:d2:4c:72:ad:
f1:11:eb:63:e7:80:b9:d0:b9:5e:a9:8f:74:7a:57:b8:f7:d6:
be:2a:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:49:05 2026 by rpki-client