Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: tTpJJ1B4vbdWKBOz/VFtOESFFp+hnIDKyDTDMhhvtm4=
Subject key identifier: 82:1B:5F:FB:2E:DC:9F:4C:47:6B:FA:92:94:FB:44:DD:B5:5C:BB:61
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 019E1CB51BCA10F5C9012D2295925696BA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 15:01:31 +0000
Manifest this update: Tue 12 May 2026 15:01:31 +0000
Manifest next update: Wed 13 May 2026 15:01:31 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: 3lyZkiudpcUukNNxuVuk61ycFXy3Bb313AD59BJ+eQk=)
2: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (hash: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:1b:ca:10:f5:c9:01:2d:22:95:92:56:96:ba:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: May 12 15:01:31 2026 GMT
Not After : May 13 15:01:31 2026 GMT
Subject: CN=821b5ffb2edc9f4c476bfa9294fb44ddb55cbb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:88:15:90:7f:36:ea:6d:4b:7a:b9:ca:6b:
1b:6a:89:ba:e4:71:04:ae:fd:be:98:4b:7b:67:b1:
bc:b1:e3:70:43:4e:19:41:10:b7:9e:e3:0e:b0:e7:
da:d7:1c:d2:6b:d4:95:a4:a0:f5:ec:7b:2e:2c:49:
82:b1:53:25:77:69:47:e5:b4:dd:ba:91:35:60:e3:
dd:c7:f4:ca:e2:34:74:9c:f7:ed:6a:b7:eb:a5:28:
99:f1:35:d8:06:35:eb:cc:bd:dd:d5:36:eb:a0:79:
5c:47:4c:59:0c:12:a4:d0:33:8f:5b:6c:88:1f:4b:
9b:e2:3c:21:c4:18:70:cb:58:b2:f6:2c:ca:6d:48:
46:e7:88:30:f7:34:3c:5b:2a:a4:71:ca:3a:54:00:
78:f9:6e:9a:05:ec:0b:b8:00:6a:df:c5:82:ca:9e:
50:74:10:54:0e:01:41:90:21:63:d1:e0:5d:6f:59:
20:1b:f5:7c:b6:33:1a:aa:4e:91:2b:30:ea:e6:a8:
e8:6a:dd:e6:bd:4b:12:09:d8:01:9c:16:02:f8:99:
dd:39:1f:4b:2e:f7:dc:67:54:d4:3b:2d:8f:2b:41:
f6:eb:e8:51:cd:d1:1b:88:51:ac:60:d6:2f:fc:c9:
54:18:90:60:42:22:81:c0:82:b2:a3:a2:29:ce:57:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:5F:FB:2E:DC:9F:4C:47:6B:FA:92:94:FB:44:DD:B5:5C:BB:61
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9d:0b:82:e7:60:95:f3:39:5a:94:60:0f:97:09:e3:26:93:
70:a2:27:58:b2:44:f1:23:eb:98:28:da:14:54:ee:79:20:e2:
1b:d9:96:bd:9b:67:53:70:84:a0:14:c7:88:19:df:a2:c9:88:
51:0c:71:57:f7:d6:38:1f:d4:22:29:4a:7d:22:69:85:3c:14:
e9:03:c1:e4:9f:ef:43:f5:e7:ba:b6:73:7d:53:0f:8d:35:94:
ac:e1:91:8a:3d:c7:ef:8e:89:df:ec:8c:7f:d1:29:12:94:5d:
76:25:6d:33:e2:7a:f7:c0:90:03:87:b0:71:22:d4:e3:6f:fb:
3c:39:af:20:fe:2b:ad:ed:fa:61:ee:ef:aa:73:00:3c:b5:03:
62:5d:f0:15:b5:c7:22:ff:f2:7a:d3:04:0b:34:b8:7b:7d:24:
60:da:6d:2a:6a:66:13:e3:18:ad:72:dc:1f:6a:e3:1d:b9:79:
50:1f:be:82:1c:f3:45:3c:e4:7e:a4:53:b6:f2:97:c1:e2:a7:
0b:a7:5d:58:23:40:f0:c7:67:3c:ca:1e:75:ac:96:0b:21:d0:
c9:a5:e9:35:a6:da:76:65:23:06:ea:d7:3c:63:db:ab:c0:3d:
85:d3:db:0d:b1:45:b0:0e:06:96:d8:9a:e9:26:df:20:82:f1:
c9:da:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:00 2026 by rpki-client