Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: g3DLBO1vMrzCd/LjhSOU5NeYgMUKU+OFfKTrTeELDAk=
Subject key identifier: 27:68:89:E7:91:EF:E9:50:36:7B:66:1A:5A:BB:65:1F:F3:9F:E3:58
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019F93922EBD8A68FAEB27621667728B7182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 10A8
Signing time: Fri 24 Jul 2026 10:00:58 +0000
Manifest this update: Fri 24 Jul 2026 10:00:58 +0000
Manifest next update: Sat 25 Jul 2026 10:00:58 +0000
Files and hashes: 1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: HKVi5AwB1RYt+vgsxC3tPhzUlW6UtMeikMyDidMTXro=)
2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:2e:bd:8a:68:fa:eb:27:62:16:67:72:8b:71:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Jul 24 10:00:58 2026 GMT
Not After : Jul 25 10:00:58 2026 GMT
Subject: CN=276889e791efe950367b661a5abb651ff39fe358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:20:da:e4:cb:04:e7:94:0d:f6:97:b7:bc:
b6:28:0a:d4:5d:ee:e4:e1:40:6e:a0:ad:1d:7f:4c:
02:a5:95:2d:94:e6:e9:c2:53:f1:31:60:ce:14:59:
2a:6f:f4:f4:bc:b7:42:62:4e:02:5a:73:35:a8:cc:
c7:36:0e:95:73:ba:08:5a:e2:46:a0:78:d5:e5:98:
51:62:a5:0a:de:7e:4d:9e:65:66:db:cc:cf:b5:23:
ca:16:5e:5f:09:19:4a:00:c6:a6:11:e1:0b:64:2d:
d0:35:41:2d:fc:44:28:24:c4:4f:84:09:9f:62:43:
51:95:60:90:e6:e2:0b:81:63:ed:09:41:3e:c8:c3:
5b:37:43:de:a2:7d:20:17:3b:cf:53:12:ca:1d:d4:
62:f4:7b:e0:7e:b9:c9:ef:36:c2:0a:37:f2:55:46:
8b:0d:c1:46:72:07:47:34:fb:84:6b:da:7b:e1:29:
5e:0d:31:5f:0d:4e:33:7a:e5:33:13:f6:f3:d5:50:
58:07:30:8f:13:82:d6:18:82:fc:38:0a:61:ce:74:
bc:c4:86:df:91:fa:28:5e:96:d6:7f:f2:2e:81:f9:
75:4d:0b:43:f2:4a:c2:67:13:4d:7e:ef:f6:07:85:
77:27:25:eb:c0:28:9d:19:30:17:98:fb:d5:8c:a5:
42:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:68:89:E7:91:EF:E9:50:36:7B:66:1A:5A:BB:65:1F:F3:9F:E3:58
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b3:76:be:97:6f:bd:77:c2:83:6e:a1:4b:97:2e:b4:59:b6:
4e:12:6c:64:86:70:25:e0:c2:36:b3:c4:39:af:25:74:fc:7a:
bd:bf:5a:2f:54:4b:0e:a6:c0:14:50:28:4b:db:75:41:81:d4:
41:25:08:ed:74:47:a9:7f:39:94:8e:83:8a:45:48:f1:0a:7e:
91:e5:1f:1b:c6:36:a3:3d:ba:f3:2d:b1:31:67:a0:f6:b9:10:
87:4f:9c:be:2d:a0:5c:e6:33:ce:18:50:92:ac:10:e6:05:46:
0f:06:09:38:bd:21:3a:3d:0b:12:09:1c:67:f1:25:a7:12:2e:
b2:66:1f:58:ea:ee:86:d0:ab:8a:6d:f4:a7:db:7d:8d:d8:cb:
01:78:dd:31:20:38:ac:b9:7b:59:54:85:4c:d1:5f:e3:ee:83:
90:80:41:40:6f:b0:ac:e8:3c:dc:f1:cd:02:a7:fc:c8:4f:88:
89:30:bc:15:5c:dd:aa:3c:50:50:ee:ec:c2:86:01:9d:e1:7f:
91:54:6a:e4:f8:74:70:1f:d7:cf:c4:dd:de:58:bb:dc:5c:92:
73:b3:68:e3:44:f2:41:97:8b:92:e7:dd:2e:5a:93:ec:35:6a:
43:57:92:5f:7e:cd:26:f8:54:c9:43:29:30:cb:65:06:8b:77:
3d:5a:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:05 2026 by rpki-client