Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: Wd1ZhSA7apjsfY6lzH8PTKWQBApzFU4B3iJ0PT6xV9I=
Subject key identifier: D6:76:F6:E0:A5:3E:6D:17:30:31:6E:BE:E5:D9:58:AD:B4:00:F1:58
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019D265F8569E70A3D0F044875020A68AC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 088A
Signing time: Wed 25 Mar 2026 19:01:27 +0000
Manifest this update: Wed 25 Mar 2026 19:01:27 +0000
Manifest next update: Thu 26 Mar 2026 19:01:27 +0000
Files and hashes: 1: 2mmNYgAAnRwmcSYBM0IDngosLA4.roa (hash: nY1bukKyfttyC/3iq1POePricYqJ+1Tih3NnE1gnsUY=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: DUv6FBj33nGxMIPpjokQ/1Ihs2u4No/uA9oiAsyLQc0=)
3: Cqx4m029JaVGdBM3t0xvlCEAgzo.roa (hash: S8GX6C9oLkw5v91FP9+Y195QY3e/NY9EwWhEqzGuxl4=)
4: NeQydQcKe8qY06oC_Afus8sEgJU.roa (hash: 0r3TCPzszCfKtmrF/kyaRrXpr8kuhtaBNUphvREHO1Y=)
5: O63vFzK4x5ZTpmdF6YhLh0H2JRM.roa (hash: C3eD55pIFuNUzJ0bW9R6W7B2wd3cNHOtGS7ITnUaMJ4=)
6: R2uWMDmb1YfPEwjrPUSRr3_QEN8.roa (hash: 6OW2Lx2+1h6iO9PfK83UIXHOzzd7YoT8ZZx73Dp3z4I=)
7: RPcV_46izWFvqHxYNAfwO4rfhNk.roa (hash: +Kcr18TyAtMOfswQ2AFElqR161EtCNJRdXOpxKjayu0=)
8: mdt2WXNNXfXIWBr0juHcaeQiifQ.roa (hash: o+Tkj+m9xGMj8hgnIqFHVjFiAA/cU9ZsV1bWB3LAgR8=)
9: zRt11Vund2Tf-7IALkPmk7aZkx4.roa (hash: z201PyhUCG8Ta577hbAhZW0ZrjPaSrja2N7Brq64aFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:85:69:e7:0a:3d:0f:04:48:75:02:0a:68:ac:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Mar 25 19:01:27 2026 GMT
Not After : Mar 26 19:01:27 2026 GMT
Subject: CN=d676f6e0a53e6d1730316ebee5d958adb400f158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:23:cc:dd:81:8a:b3:8d:63:fa:5c:43:15:
7b:ae:04:8b:43:82:27:9d:e9:19:b2:69:22:9a:4a:
19:5a:c9:96:64:d4:de:d1:c7:ae:c5:cb:97:2e:11:
36:58:65:9d:81:9a:55:78:a4:a2:44:8a:7d:60:61:
2b:a7:6c:ec:e1:41:21:40:da:38:61:7c:64:bc:fe:
eb:55:36:6f:22:ca:af:7a:e6:94:79:a4:7d:7f:95:
4d:f6:5d:33:19:5a:54:d1:ed:4a:30:5e:b1:bc:db:
e6:06:5b:01:cd:a7:6d:85:cf:3c:18:bc:a3:0f:91:
ab:78:10:72:94:88:b1:98:17:03:c3:6f:48:fb:8b:
41:6a:8c:dd:a7:c6:9e:93:9c:0d:8b:44:33:12:ec:
3b:56:5c:de:78:51:92:66:0a:c2:7e:35:cc:cf:d4:
79:4b:e0:ac:a4:ad:34:34:88:d6:83:c0:c7:e5:e9:
7a:a3:9e:7b:4a:1a:0f:26:93:bb:54:51:01:9a:c7:
b0:f3:26:2f:f1:fe:36:f8:c1:97:e8:a4:38:94:ad:
28:44:c5:60:9f:91:88:70:a6:6f:31:60:0f:0f:67:
66:23:56:af:18:63:87:7d:6d:02:29:a6:e9:92:f0:
3e:89:21:5f:6c:2b:dc:7d:48:39:1b:c9:d9:0a:67:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:F6:E0:A5:3E:6D:17:30:31:6E:BE:E5:D9:58:AD:B4:00:F1:58
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:10:d5:8d:05:7a:c7:be:ec:f7:ed:6d:87:ea:d2:07:67:81:
01:25:bc:11:76:d0:ba:97:5b:c7:ad:60:f9:72:75:e1:c0:b0:
4d:78:ce:fc:8c:9a:33:ba:d6:d6:7f:b7:12:86:ba:db:3a:b1:
40:21:66:f8:4a:42:22:35:17:16:88:40:45:cc:7d:d7:64:90:
88:ed:ee:ca:5d:e3:b7:b7:af:e2:4b:d4:de:7e:b9:57:48:f3:
9d:b1:aa:bb:0e:7b:d9:02:4a:ec:70:82:2b:93:f3:6a:e0:13:
ed:54:33:f6:db:84:33:fc:d3:36:4e:de:be:a0:3d:d3:54:22:
e4:fa:28:8e:3c:c5:d5:66:50:95:ea:a7:0d:94:99:24:67:a9:
6b:35:bc:22:08:b4:ea:fb:39:f9:32:37:f3:3f:05:e6:4c:5f:
b3:ad:0b:c9:82:f3:2c:83:71:82:2b:eb:07:6d:cb:f2:3e:b0:
ff:32:08:ba:2d:92:79:9a:58:45:1b:81:5d:3e:b3:b0:4e:b0:
c5:3b:ab:bd:ef:c8:1b:e4:ae:f0:27:91:bd:f5:f9:bd:c5:da:
e3:d2:a2:c7:e9:3f:75:c3:23:e7:9e:c5:87:1d:da:e0:bd:91:
a5:be:20:13:6a:84:df:c9:27:55:df:5c:ba:00:0c:b7:32:aa:
f8:d8:b6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:49 2026 by rpki-client