Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json)
Hash identifier: qH27310zi3j1tGbeirNwyrAtykA329ZxmTxazrgYNbQ=
Subject key identifier: BB:70:67:DA:F2:F0:94:51:B6:7F:CA:BF:A7:3D:B0:E4:9D:FB:EB:F4
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 019D269675EEF288A0F433F19420F16C88C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
Manifest number: 083E
Signing time: Wed 25 Mar 2026 20:01:27 +0000
Manifest this update: Wed 25 Mar 2026 20:01:27 +0000
Manifest next update: Thu 26 Mar 2026 20:01:27 +0000
Files and hashes: 1: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: IBeGRGI1GpAX0iUb7vXiHt4bLi/C4jdYmA1j1Bc+P4E=)
2: gKAUH3NhBegxnJoZ26FHTf-Ouv4.roa (hash: Y4dcQaDXyPAK+Bl2p4bGnOEjKSjqyIaeaExs7HHzXGs=)
3: xsQ8oOOW_FcrVFhboB2kGQU3HJc.asa (hash: QNXjyWn6lE7GMMmcUKsY6cXFAZGIY8GIMMUcGL7t6cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:75:ee:f2:88:a0:f4:33:f1:94:20:f1:6c:88:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: Mar 25 20:01:27 2026 GMT
Not After : Mar 26 20:01:27 2026 GMT
Subject: CN=bb7067daf2f09451b67fcabfa73db0e49dfbebf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:f0:60:61:a7:bd:36:b7:42:cc:27:70:af:
14:aa:48:d2:22:d9:ed:ce:6c:7f:07:3b:4f:c1:cd:
24:a3:06:a9:56:5f:08:e3:02:2e:7d:aa:49:0a:bc:
e3:72:05:92:09:ab:8f:8f:c9:49:a5:a4:0b:35:00:
9c:0e:cb:29:b9:93:13:94:4c:68:fa:bf:cc:0f:e3:
c4:d9:a1:bc:0f:87:5b:e6:ce:34:2d:75:4d:10:5b:
dc:47:00:dd:8a:6c:e1:64:53:e3:bc:2d:9f:00:1e:
9c:aa:ce:71:24:db:81:25:0f:9f:4b:e8:9d:91:69:
ba:73:c5:76:c0:29:bb:31:3e:0f:43:fe:e6:b6:3f:
86:9f:bd:a5:c2:9a:93:c4:f3:55:a9:11:13:43:82:
2c:49:27:ed:64:34:c4:3a:f0:4c:af:8c:ba:22:ab:
28:6c:db:f2:63:18:85:7d:d9:a8:46:23:5a:33:32:
c3:dd:d5:49:ae:47:10:b6:79:f4:27:09:7a:29:60:
eb:17:69:00:34:0a:b2:f6:5d:9d:6b:d9:41:02:f9:
7e:a3:4a:52:d2:2d:c0:12:b5:a1:15:81:af:65:41:
4d:d1:65:52:ef:f9:dd:1f:aa:89:7c:5a:d7:91:80:
d7:5f:87:23:fd:7f:88:a6:fb:3e:8a:67:e5:0b:6d:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:67:DA:F2:F0:94:51:B6:7F:CA:BF:A7:3D:B0:E4:9D:FB:EB:F4
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7a:37:92:7c:98:03:73:05:73:ba:15:21:7f:d0:e2:4f:c0:
4d:e3:1d:08:06:db:ec:d4:88:09:32:bd:cf:6b:2a:a9:f1:ed:
2e:9e:c4:1f:14:bf:d3:55:5d:df:f3:18:33:51:01:f1:8f:32:
d0:f8:be:3f:8e:aa:43:cf:dc:18:7d:ff:17:d8:4f:40:04:41:
ca:6c:02:16:a4:69:f7:45:13:2c:8e:44:33:c7:57:2f:ef:b2:
8a:fd:6b:e2:0c:20:6f:81:9b:f1:2f:d8:57:bf:0d:ab:13:a8:
8b:ac:cf:0e:a8:d2:51:4c:3f:e1:37:c5:26:a1:82:9b:9b:ba:
e6:7c:d4:1c:0f:73:83:6e:16:af:21:ca:87:62:dc:45:2e:ce:
a9:55:95:1b:0b:55:fa:48:77:29:a1:da:b6:24:e4:aa:1a:a8:
d2:19:6c:e8:01:70:cb:dc:4d:1c:24:e5:c3:f2:99:05:79:6e:
bb:0d:e5:19:13:8b:67:d7:c0:5d:b6:b6:ce:34:69:fa:82:b6:
eb:02:ce:9f:50:5f:8b:4e:de:f3:01:3f:2a:08:53:cf:41:74:
52:02:09:11:f8:32:19:24:d0:6e:f5:08:9b:53:36:cd:5b:5d:
c1:38:27:bc:3d:61:4a:9c:99:54:69:b8:a1:e1:a6:1e:e7:76:
93:9b:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:19 2026 by rpki-client