Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: MlCXmkP135gWU1SNVW/80FKXIMAg1B9ifoppdO1BwK8=
Subject key identifier: 2A:B8:6C:0E:33:61:2A:D3:53:1F:17:E8:3B:54:FC:FC:8B:5E:1E:87
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019E20C867D35305DE1E7B97C8C9C72D4CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0FE8
Signing time: Wed 13 May 2026 10:01:04 +0000
Manifest this update: Wed 13 May 2026 10:01:04 +0000
Manifest next update: Thu 14 May 2026 10:01:04 +0000
Files and hashes: 1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: oj01GIL2EMIHAK++9HDQG6FCRUtROLj/K1tSIuXSegQ=)
2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:67:d3:53:05:de:1e:7b:97:c8:c9:c7:2d:4c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: May 13 10:01:04 2026 GMT
Not After : May 14 10:01:04 2026 GMT
Subject: CN=2ab86c0e33612ad3531f17e83b54fcfc8b5e1e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:66:90:42:3d:3c:83:9e:80:fa:65:42:2d:
6c:d3:bc:c7:87:ed:8e:26:79:80:7e:f6:e0:a3:07:
c7:10:c1:84:25:90:58:b4:f6:11:88:5c:89:7e:b9:
61:5d:08:0d:02:8a:b0:05:d0:23:2d:22:75:a9:8d:
f8:cb:cf:33:6f:8d:5b:6d:6a:68:48:16:eb:80:a0:
77:00:f1:73:fa:b8:08:6e:f4:6d:b0:0a:24:ca:e1:
07:41:a5:47:69:7c:6d:45:5d:63:78:0f:e4:c5:b5:
dc:26:66:f2:4c:4e:0c:ab:13:82:64:88:78:97:82:
0e:a2:e9:7e:ff:86:1e:1a:9c:ff:51:76:88:fa:2f:
ce:c2:10:b7:ca:28:75:25:4d:5c:c4:da:99:9f:01:
ee:4c:9b:7b:4b:c3:b3:c5:47:61:02:82:4d:fa:29:
fd:5b:5b:c3:40:e2:26:11:35:3e:ca:0b:f6:9d:e3:
03:0a:ec:bb:05:1d:55:86:6a:07:e9:0f:17:bc:c9:
1e:7f:32:ee:f7:d2:90:7d:5f:a8:79:e1:17:42:cf:
5a:4f:98:c1:92:fa:dd:d0:3b:44:34:2b:2b:f8:2d:
db:61:e7:89:b2:1d:b1:11:3f:40:ba:0c:26:59:1d:
4e:25:5f:c2:b2:27:a6:e5:15:c6:61:6f:2f:1b:3d:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B8:6C:0E:33:61:2A:D3:53:1F:17:E8:3B:54:FC:FC:8B:5E:1E:87
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:83:d7:d4:8f:60:b7:7a:1d:ea:30:68:6d:0b:06:87:55:94:
57:e5:8d:f0:ca:59:5f:ba:cf:a9:a2:b1:dd:97:2c:4d:ab:6e:
3b:1a:7d:11:ec:25:8e:2b:55:11:d4:6c:71:67:1b:e0:b1:05:
78:cd:94:33:e8:fe:92:26:38:43:a9:a4:4c:19:1c:0b:19:4c:
53:18:02:05:64:b0:d4:39:52:23:fb:8a:5d:79:4f:7d:d1:c3:
25:3d:31:42:a3:2f:4b:a7:d1:b7:00:42:6a:07:2e:a8:f2:c2:
3e:17:62:3f:b8:55:b2:e6:98:1e:80:93:b0:ae:a8:f8:b3:6e:
97:67:7c:03:a1:1d:78:35:3f:6d:52:45:5c:fa:58:7c:e6:3d:
60:ea:8b:42:63:7a:b4:72:3a:d1:af:cb:66:ef:b8:9d:50:e9:
c9:9f:41:0d:a4:bf:c8:2e:f0:42:31:45:66:3d:12:cf:19:1c:
07:60:80:20:bb:ec:20:58:1f:b5:62:88:99:7e:6a:5b:fd:f8:
ac:c3:ec:72:9e:5b:0c:5c:06:02:52:57:82:65:7a:49:9b:d9:
20:06:ff:30:ef:ba:d4:2c:d4:c1:51:ed:d8:66:10:0d:0a:9c:
0a:08:cb:4a:43:5e:28:c7:65:8b:47:16:09:79:89:a0:d5:0a:
13:63:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:38 2026 by rpki-client