Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: COe5MJJThMvGhBbZMSjyMH3zVHV5T98dTQCJhBEph0E=
Subject key identifier: 7E:42:CA:04:CC:E6:40:CA:A2:7D:92:38:2D:DB:47:EA:A2:62:DE:C9
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019D25BA4A267220AA483839B6F4FEA0EA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0F66
Signing time: Wed 25 Mar 2026 16:00:58 +0000
Manifest this update: Wed 25 Mar 2026 16:00:58 +0000
Manifest next update: Thu 26 Mar 2026 16:00:58 +0000
Files and hashes: 1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: HOd+bKsbuJ7mQUzS5DFQZPVNGJuZub0w4N/b8cICdAI=)
2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:4a:26:72:20:aa:48:38:39:b6:f4:fe:a0:ea:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Mar 25 16:00:58 2026 GMT
Not After : Mar 26 16:00:58 2026 GMT
Subject: CN=7e42ca04cce640caa27d92382ddb47eaa262dec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:60:6e:31:5b:ff:bc:e4:7a:63:ce:54:43:
29:e8:4a:43:b8:9d:0f:8c:cb:b4:8b:e4:f9:9f:01:
a4:81:c0:c8:a9:48:a8:df:a8:73:7a:c2:14:c3:44:
78:ce:96:15:26:fd:52:43:4f:1d:8d:b0:48:17:55:
e4:5e:1a:b8:bd:f5:a6:62:d8:a0:07:81:06:f7:84:
3d:b2:ad:47:4c:ed:76:1f:a7:e5:d1:84:b4:1d:fc:
30:48:5e:1b:41:7e:61:ed:67:6f:25:f6:2e:2d:1b:
b5:40:0b:45:9d:bf:fe:1f:7a:00:f1:41:7e:9f:e2:
c1:ed:cc:a0:b6:2e:3a:5b:53:b4:db:17:2b:44:0c:
0b:ef:7c:64:a0:f2:1e:ab:dc:b7:71:1c:be:21:7b:
2f:a4:01:63:71:cc:a9:dd:eb:23:e0:56:ad:54:ce:
7c:f5:16:73:06:09:ea:61:c2:94:5b:0b:28:63:ad:
1c:36:57:8a:0a:dc:1e:af:f8:bc:ac:f7:08:b3:a4:
d8:00:5d:25:24:db:24:fa:c1:92:49:69:77:5f:64:
e5:62:57:15:c5:32:2e:7d:b7:0e:c3:3e:91:b2:15:
73:f8:be:95:a5:a5:45:bb:04:c7:85:86:b8:8c:6e:
5c:9f:52:c7:3b:e8:d4:e9:3e:07:34:ab:03:dc:7e:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:CA:04:CC:E6:40:CA:A2:7D:92:38:2D:DB:47:EA:A2:62:DE:C9
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:08:04:7d:bb:a5:ce:c7:40:7c:1a:bf:a5:c6:ce:8f:a4:14:
c6:ce:6e:f1:94:20:4f:a3:05:ca:71:17:5a:41:ac:2c:2f:bf:
c8:40:5c:60:d4:fa:7d:b2:fc:80:df:99:d5:a6:1f:98:77:7b:
77:61:4d:1f:1a:c1:71:31:e1:02:99:94:b2:46:d2:56:88:ae:
f0:02:5b:7c:7e:12:a9:67:81:3c:77:97:38:18:01:42:6b:6a:
51:b9:ec:d9:3a:75:82:12:93:22:8f:a4:a2:c0:cc:98:12:e2:
41:1c:08:ac:cd:b8:d1:e4:01:3d:3c:c9:22:89:63:91:b7:9e:
f1:2c:e9:f0:4a:db:a0:4c:73:9f:e5:da:4d:12:2a:7b:55:b4:
64:89:92:2d:4c:9a:6b:3d:6e:bd:6f:98:7a:28:44:3f:c8:cc:
a7:e9:96:7e:d8:7a:64:72:f5:2e:c8:33:d2:58:5f:41:2e:b4:
18:07:62:4d:82:86:ef:fb:63:6f:c2:87:77:e9:cf:b5:90:6b:
3a:9c:a5:6e:c5:68:24:89:67:39:ff:28:19:f3:ea:2e:88:ee:
6a:d5:fa:52:b0:3d:58:9c:50:fa:03:ef:e5:cc:55:ca:15:19:
b0:a9:9d:67:f1:1d:a2:fb:d8:0c:d7:38:1d:87:99:40:57:de:
fb:8a:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:33 2026 by rpki-client