Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
File: BMWTwzo9oilIzOIyis8F2YoB8aU.mft (raw, json)
Hash identifier: UFAVGhnJRyquFgxptQscOCFwEmA/3BhvgSHCw33FR3k=
Subject key identifier: 43:D8:93:B1:83:83:1B:6A:8C:C6:EE:87:24:E2:C2:45:3C:F2:5C:8E
Authority key identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
Certificate issuer: /CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Certificate serial: 019E1C0F89DBECFACE55111A5CAD46FE2AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
Manifest number: 0A36
Signing time: Tue 12 May 2026 12:00:40 +0000
Manifest this update: Tue 12 May 2026 12:00:40 +0000
Manifest next update: Wed 13 May 2026 12:00:40 +0000
Files and hashes: 1: BMWTwzo9oilIzOIyis8F2YoB8aU.crl (hash: YZQGQ/9a7BdzKa7OJYpAkdOpFj2FjQvmTfHWu+zNuJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:89:db:ec:fa:ce:55:11:1a:5c:ad:46:fe:2a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Validity
Not Before: May 12 12:00:40 2026 GMT
Not After : May 13 12:00:40 2026 GMT
Subject: CN=43d893b183831b6a8cc6ee8724e2c2453cf25c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:9c:4f:b9:49:9a:9b:e5:19:3d:04:26:89:
d1:44:cf:33:3e:86:26:1f:e7:51:e0:8f:d5:77:53:
a0:e2:98:8f:25:83:1a:64:3b:2a:87:71:a0:d9:46:
6c:10:88:fc:86:bb:09:68:65:3b:b6:d1:be:19:e5:
19:5b:67:91:9c:91:99:80:94:80:e4:e1:9e:47:03:
a7:c2:67:a9:6d:ef:47:6c:91:08:8a:0b:8c:ee:f7:
b4:90:4d:c4:6d:47:20:ef:85:f2:1f:dd:bf:b7:c1:
1f:08:b5:83:41:6e:b4:c5:9f:51:5f:f9:cf:94:97:
8c:d8:04:bf:4c:32:dd:7d:80:ae:8c:99:ac:18:ff:
ca:a6:3b:9d:e9:dc:fc:69:de:48:6b:d9:c0:cf:82:
1b:c6:2e:cb:17:e5:31:4a:53:97:9d:63:5e:3a:4a:
ef:c4:88:31:8b:8e:e5:c7:fe:0a:79:9f:1c:f3:a2:
8c:24:0e:59:c3:ef:8a:2c:8c:14:b5:0b:c5:7b:20:
10:c8:47:92:85:c0:b7:d1:9f:0c:46:93:d8:5a:c2:
f0:ed:d4:7e:04:a1:50:45:a6:42:49:cc:c6:20:a7:
bb:ed:0e:48:60:a5:5a:42:dc:2f:96:17:53:1a:93:
2a:34:56:5d:37:13:4a:ff:33:ce:ca:62:f3:04:fb:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:93:B1:83:83:1B:6A:8C:C6:EE:87:24:E2:C2:45:3C:F2:5C:8E
X509v3 Authority Key Identifier:
keyid:04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:57:ba:2f:68:ea:7a:22:7e:cc:94:1e:39:84:49:4e:8e:85:
07:b6:70:4e:a3:89:0b:f4:f9:71:c9:4d:52:39:7d:d3:6d:e9:
9c:22:f4:6a:c5:6a:3c:a6:6a:0e:d0:05:48:c3:8c:d9:b4:e7:
73:16:cd:c5:fc:22:8b:70:bb:74:f5:46:b0:33:25:6f:7c:3a:
3c:ac:59:d1:35:98:dd:e2:84:57:68:9c:f4:78:f2:ce:0c:d5:
ba:ba:58:34:52:19:cf:fe:5f:4b:02:b6:93:fe:e9:b0:d1:61:
24:00:4d:c1:29:1f:c1:b8:76:78:0d:ba:87:19:e6:52:0b:50:
fa:25:3e:e6:d4:22:7c:60:21:07:79:bc:08:8c:93:16:88:3e:
e4:4f:0c:c4:45:4a:71:ad:d8:0f:af:f0:6b:12:07:e5:83:4a:
5b:45:92:65:9e:63:02:63:21:3d:8f:3a:f4:70:e3:cf:83:f2:
23:c9:2e:c7:b3:60:65:8b:be:14:ba:49:fb:b5:36:42:06:58:
dd:25:e3:d4:56:49:2f:0f:db:1c:39:02:c1:1f:50:55:4a:7c:
c7:0c:a9:b6:73:05:eb:2e:af:e2:58:7d:d0:d3:43:64:b8:09:
df:2e:46:79:90:bd:b1:f5:d0:23:9a:65:aa:8e:e9:0c:19:e1:
00:ec:97:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:35 2026 by rpki-client