Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File: bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier: tJWi+eAzVHoo+7oFJrmSZHLwqCc8FrPOnNCUwyo4sBk=
Subject key identifier: B0:F5:42:C5:B2:5E:CA:EF:2F:1D:DE:E2:67:EB:63:AD:1A:32:41:81
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer: /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial: 019D28F21EFD6F85D0BA37AE029FD913F979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number: 0E26
Signing time: Thu 26 Mar 2026 07:00:49 +0000
Manifest this update: Thu 26 Mar 2026 07:00:49 +0000
Manifest next update: Fri 27 Mar 2026 07:00:49 +0000
Files and hashes: 1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: Z9zx4JCKQfZLr3plMw6nnCtoZtg5A8W49yz9Z1I0crQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:1e:fd:6f:85:d0:ba:37:ae:02:9f:d9:13:f9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Validity
Not Before: Mar 26 07:00:49 2026 GMT
Not After : Mar 27 07:00:49 2026 GMT
Subject: CN=b0f542c5b25ecaef2f1ddee267eb63ad1a324181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:4b:a6:1a:50:fb:26:56:5e:ad:92:5d:32:
3e:2a:d1:c1:38:64:40:75:f2:f4:2f:e4:e8:5d:ad:
8e:4d:84:23:4c:d2:44:cc:cd:30:f6:3e:f1:a0:dd:
4f:ff:e0:74:71:66:1a:55:c5:51:fe:65:be:15:44:
36:eb:23:d6:ec:52:ce:0d:5e:31:91:41:47:b4:9d:
0f:65:03:bd:6a:d0:29:cc:56:d8:c1:4e:d4:1d:21:
58:c8:5d:5b:ec:43:48:61:8b:4e:3b:3e:7d:13:8a:
c8:5a:80:60:e8:f3:53:4d:38:dd:32:8f:82:32:c5:
4b:64:df:bf:85:60:1a:76:ae:a1:a0:bc:d9:18:c3:
41:6d:36:2a:e9:52:c2:aa:93:a4:b1:af:f7:c3:5c:
a1:2d:ae:78:95:cf:77:d1:5f:89:99:20:1e:6e:cf:
f5:a5:35:d9:34:eb:e8:5d:11:b8:88:59:80:0d:62:
08:25:0b:72:36:fb:ff:7f:91:fd:d2:28:e3:cb:8c:
fb:6d:27:86:24:48:d0:42:28:ba:77:59:45:db:37:
25:ab:a9:be:6a:60:b7:3d:d4:97:60:d4:0e:1e:e1:
7a:2c:62:c3:57:bb:1b:8a:85:b4:7c:5c:54:c8:ee:
61:68:f1:d9:14:3c:99:73:73:91:ac:44:0c:36:12:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F5:42:C5:B2:5E:CA:EF:2F:1D:DE:E2:67:EB:63:AD:1A:32:41:81
X509v3 Authority Key Identifier:
keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:10:cf:fa:50:cb:bb:8c:66:10:fb:15:7e:df:ca:24:76:25:
ca:44:b7:75:78:91:92:7c:b3:f5:c0:e6:92:5d:7f:f7:17:b7:
93:75:55:4a:20:36:75:51:e2:69:59:8d:20:0d:c8:5b:d7:44:
16:ea:02:14:fe:78:13:c2:b6:4f:43:d5:7c:f2:a7:fd:1d:d3:
7f:4a:c3:c6:fc:9a:9e:a6:cd:37:26:45:b6:bc:dc:91:5f:3e:
15:ca:75:dd:99:b7:c4:16:ff:76:20:7d:23:cf:2a:61:aa:1f:
c3:b6:36:1a:90:37:21:dc:16:e4:e8:29:07:2a:b5:3a:51:60:
4a:e3:20:26:82:20:99:51:5f:d6:3b:d6:ab:f9:e7:df:79:92:
8c:ed:88:3e:fd:2e:b8:e3:bf:01:26:90:75:ea:bb:f9:a1:41:
11:c8:7b:4f:a1:cf:9d:fa:74:04:bd:71:8a:13:1f:04:b2:a9:
62:e9:56:08:60:37:b1:37:09:e8:b8:ec:88:f5:97:ff:47:36:
58:78:d1:06:b7:25:0e:5d:da:68:e6:5d:1c:5a:8c:68:c4:ac:
6a:4c:1d:d5:ec:71:13:5e:50:63:fb:8f:60:c8:b1:a3:07:b4:
fa:9c:36:2b:b2:e2:b9:0d:91:75:72:1c:39:f4:dd:c4:73:0b:
74:91:72:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:13:16 2026 by rpki-client