Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: 4YOWIxuXk6zFlwOP7nA4OaBO3Hvik9YyCYpsi6IMABM=
Subject key identifier: 69:E7:06:AA:DB:34:CC:32:DF:47:6A:22:80:26:73:8A:46:D3:9C:6E
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 019F93240DD9BDACBA8FFBAA9AFE0E278F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 123B
Signing time: Fri 24 Jul 2026 08:00:41 +0000
Manifest this update: Fri 24 Jul 2026 08:00:41 +0000
Manifest next update: Sat 25 Jul 2026 08:00:41 +0000
Files and hashes: 1: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: JMkgcgRypQpIqjNEToOG0e9EraG7RJSryihA9HIEoEs=)
2: egKdfoe4jr_OcoA2zw7t88jvhNw.roa (hash: Rm9ZrDiXC3MyZptxhCKpvW8pxI8d9wrZAzUEIDnaY8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:0d:d9:bd:ac:ba:8f:fb:aa:9a:fe:0e:27:8f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Jul 24 08:00:41 2026 GMT
Not After : Jul 25 08:00:41 2026 GMT
Subject: CN=69e706aadb34cc32df476a228026738a46d39c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:64:fd:5e:a4:3d:00:c5:b5:a6:3e:33:f3:
a5:27:83:14:03:d1:e6:08:38:b3:f7:a4:b0:f5:6e:
86:9b:90:6e:e9:b1:83:e8:30:d1:c9:1c:5d:71:ef:
86:32:5b:a7:2a:a9:2d:e6:64:c7:55:05:60:14:25:
2e:8b:ea:1b:a8:9e:6f:cd:38:8c:67:7f:be:d5:ea:
27:47:2f:b5:c4:ad:4c:29:f1:dc:0e:4f:28:a4:c9:
7f:92:53:96:48:43:3a:c6:80:06:a4:a6:e1:62:35:
3b:a8:b6:82:1a:2b:1b:bc:6f:e5:a9:0e:dc:62:46:
d1:31:e5:36:08:2f:f6:ba:e6:91:80:d3:ac:8a:25:
09:98:e1:f0:84:ab:db:5e:a5:f6:13:74:09:1c:4f:
1c:92:40:90:36:2d:c0:81:85:1a:e1:33:48:f4:71:
24:c0:0c:a0:ae:eb:f2:54:d8:14:a3:ed:93:44:53:
35:76:68:15:7b:df:c3:eb:0b:c1:69:58:7f:fa:a3:
ad:7e:6a:a7:7b:d6:e5:f5:5c:8d:08:ad:9a:f9:61:
c5:6a:e0:98:8a:e3:e3:55:2f:ce:48:88:18:fb:a0:
34:3f:b6:7a:6c:ae:60:6a:d5:d7:d1:96:71:ae:a0:
85:66:23:b9:d1:d0:94:47:1e:05:28:9c:26:e2:46:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E7:06:AA:DB:34:CC:32:DF:47:6A:22:80:26:73:8A:46:D3:9C:6E
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:15:1c:b9:87:fd:b6:80:0b:02:dd:46:c6:a0:fb:d4:14:d1:
27:21:76:70:78:b9:7a:f0:be:86:19:2e:88:f6:43:0e:c0:43:
c0:87:40:4b:1a:77:58:26:eb:0f:cc:c2:f6:9e:e3:55:4d:f1:
29:14:31:c0:47:3e:25:c6:e2:a7:ec:19:61:a1:5b:6c:25:d3:
70:e8:08:b8:18:ca:fb:84:1f:e9:e5:c8:b3:8d:2d:21:ca:88:
fe:8e:49:f5:dd:d6:5a:87:44:cf:93:38:b8:17:6a:16:98:12:
8a:72:0b:bb:5b:75:b8:3d:a5:6c:84:80:f2:ea:5a:07:ac:6f:
37:27:be:94:8d:04:44:94:c6:66:52:96:1b:23:e0:3b:ae:2b:
17:45:1a:e3:ce:3f:38:5d:da:96:cd:2e:4d:d5:cc:11:17:c2:
a2:68:f9:16:c7:b6:75:39:ff:2b:24:2e:de:36:41:9e:4b:f8:
08:15:c1:76:f8:e0:22:7c:af:e3:d8:19:09:cd:83:72:a1:21:
58:17:71:c4:09:6b:b8:86:78:da:54:2b:90:28:ad:24:d2:25:
aa:a7:81:72:f8:8d:fa:17:ee:75:17:2a:65:ee:01:13:e0:05:
26:3a:67:4d:c4:14:21:89:db:fa:62:cf:5f:ee:1e:d6:69:93:
55:bb:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:41 2026 by rpki-client