Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: Guo50dOF/wUNVVJK+v+eq0jIYRCAJ+um28aVhdzaFhY=
Subject key identifier: 7A:F2:A7:4A:AC:93:3B:B6:5D:1B:6A:E2:33:53:CE:A8:62:72:1C:4E
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 019D29291D3D5E15A22F2691585738FE5F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 10FB
Signing time: Thu 26 Mar 2026 08:00:53 +0000
Manifest this update: Thu 26 Mar 2026 08:00:53 +0000
Manifest next update: Fri 27 Mar 2026 08:00:53 +0000
Files and hashes: 1: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: hQWbPcEUdlTk3Sihu9/9WlE2jFEOp1KRXCnKngWBQOo=)
2: egKdfoe4jr_OcoA2zw7t88jvhNw.roa (hash: Rm9ZrDiXC3MyZptxhCKpvW8pxI8d9wrZAzUEIDnaY8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1d:3d:5e:15:a2:2f:26:91:58:57:38:fe:5f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Mar 26 08:00:53 2026 GMT
Not After : Mar 27 08:00:53 2026 GMT
Subject: CN=7af2a74aac933bb65d1b6ae23353cea862721c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:f5:e9:37:02:67:d7:ec:b9:92:43:9b:24:
45:15:95:56:bb:80:0f:73:af:bc:06:20:49:b2:9f:
d1:01:9b:4f:36:38:d6:a1:49:ce:45:07:10:ab:2b:
78:c8:4c:58:ae:05:4c:b6:88:cc:a4:29:73:47:85:
e3:dc:f6:f5:c4:f2:8f:55:2f:b4:8a:db:17:86:13:
0a:ff:35:43:3a:2d:5e:89:9d:79:87:72:35:f1:a5:
70:7b:62:a3:db:67:c8:6c:df:f9:48:22:a4:0e:87:
e6:d7:17:3f:64:fd:5b:85:c6:cf:3b:f4:93:3a:94:
c1:fe:06:ff:3e:e0:e5:4e:f5:ea:fb:87:4e:da:aa:
4e:bd:7c:1c:bb:cc:ef:09:bd:b9:34:22:06:fb:b1:
11:6b:14:87:ed:3b:d7:ca:97:46:e2:64:de:2d:97:
31:20:e7:a2:03:ab:e1:3b:4e:aa:eb:7f:da:92:6e:
60:a3:3d:bf:bb:b1:f9:92:d7:48:8b:16:ed:31:40:
72:7f:ff:11:7e:86:8f:43:86:ee:55:84:0a:e8:08:
76:91:6a:c7:ee:4b:f9:3b:3d:a5:30:f3:7b:23:99:
20:b7:73:37:3d:62:e5:03:48:59:e5:4e:c3:4f:55:
84:05:36:7e:05:63:ef:90:90:30:63:0c:0c:64:1e:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F2:A7:4A:AC:93:3B:B6:5D:1B:6A:E2:33:53:CE:A8:62:72:1C:4E
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:93:60:18:1a:67:28:d1:f7:d1:b9:77:d2:ba:db:aa:f3:69:
db:a8:35:ea:9a:a4:f9:59:1c:6e:6a:b5:b8:ad:5b:cf:a8:df:
ce:f9:8d:8b:46:2b:6e:e7:3a:5f:17:ee:0d:d7:48:ec:47:2b:
38:2c:d4:37:49:3f:87:21:25:1e:ea:1f:de:c3:64:1d:eb:9b:
db:4e:54:13:44:7b:7f:be:1b:d1:2c:31:76:40:51:67:98:aa:
26:de:93:98:3f:47:a0:16:14:bc:94:a0:47:c4:1f:0e:98:61:
87:4d:1d:96:5e:7b:9a:1e:c5:a5:10:e8:ae:9c:b0:9a:1a:9d:
66:ed:7d:f1:28:33:67:88:08:19:6a:da:46:da:d7:84:27:ee:
b1:6a:17:90:2c:fa:5c:9a:77:9b:c9:91:ab:e2:b8:d4:3a:67:
bc:e3:ba:bb:47:d5:7e:11:82:82:77:63:03:27:ab:aa:78:86:
4a:b6:8d:aa:cf:68:73:16:34:8e:09:b5:e9:89:79:51:e1:2f:
b5:af:75:d1:ed:81:2d:4a:0f:32:f2:d0:63:4a:14:a2:00:47:
2a:7e:f0:91:79:16:e0:77:09:bf:ef:c4:1a:0a:2c:bf:e7:f6:
96:39:0a:25:09:9f:c9:b0:85:d1:08:06:a2:14:74:a1:a1:b7:
27:e9:85:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKR09XhWiLyaRWFc4/l94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIzNjZhMTM2ZjhmY2M1ZGY1MjNjOGQ0NmY3OTA3OTFj
MWIzYmIwHhcNMjYwMzI2MDgwMDUzWhcNMjYwMzI3MDgwMDUzWjAzMTEwLwYDVQQD
Eyg3YWYyYTc0YWFjOTMzYmI2NWQxYjZhZTIzMzUzY2VhODYyNzIxYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+716TcCZ9fsuZJDmyRFFZVWu4AP
c6+8BiBJsp/RAZtPNjjWoUnORQcQqyt4yExYrgVMtojMpClzR4Xj3Pb1xPKPVS+0
itsXhhMK/zVDOi1eiZ15h3I18aVwe2Kj22fIbN/5SCKkDofm1xc/ZP1bhcbPO/ST
OpTB/gb/PuDlTvXq+4dO2qpOvXwcu8zvCb25NCIG+7ERaxSH7TvXypdG4mTeLZcx
IOeiA6vhO06q63/akm5goz2/u7H5ktdIixbtMUByf/8RfoaPQ4buVYQK6Ah2kWrH
7kv5Oz2lMPN7I5kgt3M3PWLlA0hZ5U7DT1WEBTZ+BWPvkJAwYwwMZB7z/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHryp0qskzu2XRtq4jNTzqhichxOMB8GA1UdIwQY
MBaAFG8LNmoTb4/MXfUjyNRveQeRwbO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2Ut
ZWVmNmMyZjQ1MTc2LzEvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2UtZWVmNmMyZjQ1MTc2
LzEvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1pNgGBpn
KNH30bl30rrbqvNp26g16pqk+Vkcbmq1uK1bz6jfzvmNi0Yrbuc6XxfuDddI7Ecr
OCzUN0k/hyElHuof3sNkHeub205UE0R7f74b0SwxdkBRZ5iqJt6TmD9HoBYUvJSg
R8QfDphhh00dll57mh7FpRDorpywmhqdZu198SgzZ4gIGWraRtrXhCfusWoXkCz6
XJp3m8mRq+K41DpnvOO6u0fVfhGCgndjAyerqniGSraNqs9ocxY0jgm16Yl5UeEv
ta910e2BLUoPMvLQY0oUogBHKn7wkXkW4HcJv+/EGgosv+f2ljkKJQmfybCF0QgG
ohR0oaG3J+mF1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:15 2026 by rpki-client