Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft
File: bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft (raw, json)
Hash identifier: Vpob4FqgHMoX8dovEh5aRTYrrDpHTxiItlsmT389+S8=
Subject key identifier: B4:22:88:F2:96:96:1E:40:03:E9:7B:DD:3A:F6:A6:69:CA:5F:BD:80
Authority key identifier: 6D:64:A8:67:F4:5C:48:F2:02:7B:00:B8:3C:77:79:6F:BB:BE:03:28
Certificate issuer: /CN=6d64a867f45c48f2027b00b83c77796fbbbe0328
Certificate serial: 019D26960933AA9B96BBF76BC5B2480B5D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft
Manifest number: 0431
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: _kQKugUbFDKzjAHcApu2141cq6c.roa (hash: /1a50vxH9IeUabW9ZG6RdtEES2xJ9jyKfKc7dsU4ebc=)
2: bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl (hash: ehKpixHKStD3YkUIqSnQC7kzg76SxnAc1aMOA7G82+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:09:33:aa:9b:96:bb:f7:6b:c5:b2:48:0b:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d64a867f45c48f2027b00b83c77796fbbbe0328
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=b42288f296961e4003e97bdd3af6a669ca5fbd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:88:af:44:fa:ef:90:14:fb:b8:7f:fe:d4:
d6:26:c5:33:c0:58:76:03:e0:bf:2c:cb:1f:46:bf:
d7:c9:a5:0f:52:77:5a:3c:f1:64:b1:39:7f:54:f5:
ff:4a:32:67:10:a6:d5:ae:10:9e:e5:66:67:e9:c9:
8c:65:49:0a:fc:33:03:38:47:0c:ed:24:86:96:d2:
78:30:f6:c6:1f:c7:5b:22:37:a5:c4:d0:54:7a:c7:
cc:29:94:83:83:60:62:02:40:e5:4c:34:5f:d4:80:
6b:b4:3e:d9:de:35:9c:d5:7e:a9:e0:85:38:74:1c:
b7:4b:bb:6e:7a:aa:a1:f7:62:59:00:4e:23:2e:d6:
a8:cb:d4:dd:e7:8c:9e:f8:52:e3:06:ed:37:77:be:
fc:8d:55:a5:b1:73:d4:16:2e:12:99:31:1e:dc:67:
64:6e:41:5c:0c:43:a3:ee:fb:37:02:fc:ef:ce:f8:
bb:de:82:10:2c:4d:e6:48:05:31:64:9e:13:c5:f8:
45:f3:64:cf:b2:40:54:f3:b5:ba:f7:fc:84:ad:a7:
94:e7:85:6c:d7:d6:42:81:3a:da:e0:fc:73:8c:7d:
39:a6:7f:55:2f:ea:5b:c0:02:31:14:95:0c:e8:37:
37:93:0a:b0:51:5c:25:ae:87:bc:e2:64:01:e7:ef:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:88:F2:96:96:1E:40:03:E9:7B:DD:3A:F6:A6:69:CA:5F:BD:80
X509v3 Authority Key Identifier:
keyid:6D:64:A8:67:F4:5C:48:F2:02:7B:00:B8:3C:77:79:6F:BB:BE:03:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fe:8d:0f:c8:7a:75:e9:83:56:f2:c2:9f:aa:55:47:74:73:
d3:a1:84:7e:21:02:18:87:53:d8:60:df:94:73:06:65:8f:cc:
31:85:a2:0b:42:34:37:6a:a9:29:0a:6d:a4:fa:a5:27:83:f2:
b0:65:70:50:3c:90:d5:2d:bb:47:ae:10:d1:9c:e6:d6:57:cc:
cd:9d:a7:0a:a5:fe:b4:57:41:23:d1:30:c8:90:61:a4:1d:c5:
65:c7:b8:15:ab:13:80:c0:c9:60:83:fe:b1:05:c5:aa:62:ec:
83:f6:2a:0d:9e:7d:97:3e:ce:3b:5a:ff:d4:46:ae:c1:f4:a1:
68:85:6d:9d:93:31:c7:1a:58:15:6e:0e:c6:93:80:0f:0d:bb:
9a:49:e2:f3:db:cd:6a:fc:66:82:c7:33:ba:69:c2:5c:6a:88:
12:8c:71:27:12:3d:9f:b3:57:56:c1:75:5c:fc:23:50:98:22:
7a:88:f8:48:5c:b7:6c:68:f0:de:47:dd:dd:40:68:bd:70:6f:
bf:b7:3c:21:e5:92:cd:ed:7c:ec:15:2d:b6:f0:27:d9:3f:b3:
d2:51:28:09:a0:35:32:7d:a3:e5:3e:56:5e:a2:bc:a2:76:f8:
aa:af:a5:9a:fc:db:d0:8b:87:de:1f:34:b9:d3:4d:75:f2:91:
7d:2f:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:34:00 2026 by rpki-client