Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
File: bwVF620H5D0m7IQAymTMUbuVZv8.mft (raw, json)
Hash identifier: y47irFIEBj5lWknpj0wNc9YQY9HH6Yy1xNtiSgfgO0M=
Subject key identifier: 7D:3F:A3:38:B0:E4:45:91:A1:68:54:11:B8:4B:EF:3E:36:B8:B1:60
Authority key identifier: 6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
Certificate issuer: /CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Certificate serial: 01A0D5DDE1D97F8BCB56833538B4C1BC4DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:23 +0000
Manifest this update: Fri 25 Sep 2026 00:01:23 +0000
Manifest next update: Sat 26 Sep 2026 00:01:23 +0000
Files and hashes: 1: bwVF620H5D0m7IQAymTMUbuVZv8.crl (hash: zaGvp+RjMpe7THsnOZgqjS314aw+CSiPKdNDP6zzAqA=)
2: crSSmpcLdnTcx2ovWO2MVlxTArU.roa (hash: L7ZtPmmnI2aRhLMmMXfjqnVphR0y7J0Vd8zHZ1iyQFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:e1:d9:7f:8b:cb:56:83:35:38:b4:c1:bc:4d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Validity
Not Before: Sep 25 00:01:23 2026 GMT
Not After : Sep 26 00:01:23 2026 GMT
Subject: CN=7d3fa338b0e44591a1685411b84bef3e36b8b160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cf:ce:8b:b2:22:ed:34:43:2f:90:92:9a:30:
59:a0:3d:c2:f0:89:9b:cb:5e:5a:cd:3c:32:4c:67:
be:99:bf:d8:d6:00:cd:99:e3:9b:24:7e:39:5c:4c:
96:47:d3:ab:5c:0d:50:93:52:0e:00:a8:50:28:0a:
05:10:05:24:91:24:3f:66:fd:e8:a2:15:14:64:fe:
cd:ea:e7:42:7b:8d:58:c6:32:6e:0f:43:7f:e7:18:
11:ac:28:7e:a3:6e:d2:e4:1e:e6:4d:21:ba:cf:75:
66:4f:15:e2:76:45:bb:92:42:a2:1e:42:e4:94:54:
1b:60:c3:3a:17:93:40:9a:b8:83:52:aa:f7:64:7b:
13:61:41:23:06:37:3d:90:4b:b5:dd:61:3d:6d:42:
7c:26:62:b3:71:7b:e7:8a:d4:2c:c3:8a:64:4d:c1:
5e:7d:73:ef:6f:1b:79:af:4f:29:99:68:a7:63:34:
6b:cd:de:f5:63:55:27:26:fb:3d:45:1f:a7:f2:42:
7b:b3:e4:0b:17:3b:43:ac:2e:d0:e3:ec:04:74:0f:
69:8d:00:3e:a6:00:02:b1:df:de:c0:79:51:d6:37:
a8:69:47:7c:d9:bf:79:10:f4:c6:dd:f9:1a:3d:b8:
50:71:bb:57:8a:ad:f3:87:f8:39:81:30:e3:66:63:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3F:A3:38:B0:E4:45:91:A1:68:54:11:B8:4B:EF:3E:36:B8:B1:60
X509v3 Authority Key Identifier:
keyid:6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:22:f0:43:fe:12:8a:a3:f8:90:76:30:11:23:6e:fc:c1:d2:
07:21:6b:6b:b0:cf:81:80:23:9e:e3:67:97:5c:49:59:eb:15:
95:0a:f5:74:df:56:43:a4:26:3f:b1:b2:d5:bc:c0:ee:0f:70:
61:1c:8d:3f:c8:bf:f9:f8:f6:ee:84:c5:ca:3f:97:44:50:ff:
25:fb:75:9b:ee:00:a2:20:8c:96:c0:82:97:5d:bc:82:68:c3:
df:a3:93:93:a1:65:f7:09:0d:97:f2:1c:76:1f:42:3c:40:19:
59:8c:78:41:e9:c6:55:75:20:33:82:f0:d4:ce:c5:e8:7f:fa:
7b:7b:c5:8b:f6:46:3e:de:b9:98:7d:bb:13:a0:81:37:8c:9b:
e7:40:67:ff:9f:d3:2b:0c:e8:92:df:51:7c:22:97:96:30:f1:
22:0d:82:56:49:f0:3f:b8:34:25:bc:9c:4f:bc:92:1a:31:3c:
1d:7e:a0:45:06:88:74:4b:24:2a:b2:1a:74:d6:bb:d5:3c:63:
6a:e6:d7:79:9c:bb:34:f6:8c:56:32:ee:41:b1:ac:6f:80:d6:
2b:67:be:06:f5:1e:35:43:00:cc:f5:a4:a6:f4:d1:de:02:5d:
05:03:9f:07:aa:77:68:f4:6d:6b:c0:b5:8f:89:d0:b9:39:a6:
c3:ea:6a:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3eHZf4vLVoM1OLTBvE3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMDU0NWViNmQwN2U0M2QyNmVjODQwMGNhNjRjYzUxYmI5
NTY2ZmYwHhcNMjYwOTI1MDAwMTIzWhcNMjYwOTI2MDAwMTIzWjAzMTEwLwYDVQQD
Eyg3ZDNmYTMzOGIwZTQ0NTkxYTE2ODU0MTFiODRiZWYzZTM2YjhiMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8s/Oi7Ii7TRDL5CSmjBZoD3C8Imb
y15azTwyTGe+mb/Y1gDNmeObJH45XEyWR9OrXA1Qk1IOAKhQKAoFEAUkkSQ/Zv3o
ohUUZP7N6udCe41YxjJuD0N/5xgRrCh+o27S5B7mTSG6z3VmTxXidkW7kkKiHkLk
lFQbYMM6F5NAmriDUqr3ZHsTYUEjBjc9kEu13WE9bUJ8JmKzcXvnitQsw4pkTcFe
fXPvbxt5r08pmWinYzRrzd71Y1UnJvs9RR+n8kJ7s+QLFztDrC7Q4+wEdA9pjQA+
pgACsd/ewHlR1jeoaUd82b95EPTG3fkaPbhQcbtXiq3zh/g5gTDjZmPkawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0/oziw5EWRoWhUEbhL7z42uLFgMB8GA1UdIwQY
MBaAFG8FRettB+Q9JuyEAMpkzFG7lWb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndWRjYyMEg1RDBtN0lRQXltVE1VYnVWWnY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUt
NWE5ODg5MzFlYTMzLzEvYndWRjYyMEg1RDBtN0lRQXltVE1VYnVWWnY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUtNWE5ODg5MzFlYTMz
LzEvYndWRjYyMEg1RDBtN0lRQXltVE1VYnVWWnY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCLwQ/4S
iqP4kHYwESNu/MHSByFra7DPgYAjnuNnl1xJWesVlQr1dN9WQ6QmP7Gy1bzA7g9w
YRyNP8i/+fj27oTFyj+XRFD/Jft1m+4AoiCMlsCCl128gmjD36OTk6Fl9wkNl/Ic
dh9CPEAZWYx4QenGVXUgM4Lw1M7F6H/6e3vFi/ZGPt65mH27E6CBN4yb50Bn/5/T
Kwzokt9RfCKXljDxIg2CVknwP7g0JbycT7ySGjE8HX6gRQaIdEskKrIadNa71Txj
aubXeZy7NPaMVjLuQbGsb4DWK2e+BvUeNUMAzPWkpvTR3gJdBQOfB6p3aPRta8C1
j4nQuTmmw+pqzg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:41 2026 by rpki-client