Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json)
Hash identifier: 8n/e8fFnMjmz2hKYLJSGrmK/bZBmw0P7Sol2OrC61E8=
Subject key identifier: C2:60:46:A0:CC:F8:1B:CD:6F:E2:BA:87:48:CE:D6:53:02:6A:09:00
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 01A0EC2F37541168F9171251DEF573048D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
Manifest number: 0A33
Signing time: Tue 29 Sep 2026 08:01:52 +0000
Manifest this update: Tue 29 Sep 2026 08:01:52 +0000
Manifest next update: Wed 30 Sep 2026 08:01:52 +0000
Files and hashes: 1: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: pRk8yrTLgnc8WdhXIY8i5Y72zONgQqXV3Cl/iBZio50=)
2: MHoFYwo0UHGvILYtJbuwWNt09xU.asa (hash: Qvx3vsLqLyMXt4vpF7ojglVYwf5l8W/KnEmvWuz5IDg=)
3: gKAUH3NhBegxnJoZ26FHTf-Ouv4.roa (hash: Y4dcQaDXyPAK+Bl2p4bGnOEjKSjqyIaeaExs7HHzXGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:37:54:11:68:f9:17:12:51:de:f5:73:04:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: Sep 29 08:01:52 2026 GMT
Not After : Sep 30 08:01:52 2026 GMT
Subject: CN=c26046a0ccf81bcd6fe2ba8748ced653026a0900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:da:6b:ba:01:da:aa:f8:9d:3a:fc:54:45:
a4:05:d3:30:27:c8:c6:a2:cb:7e:27:c4:bf:33:b5:
c7:b3:40:6c:22:3d:a6:29:9c:0a:33:46:4e:33:ad:
f5:2d:e1:5a:00:ce:76:56:f6:12:a8:f8:ee:18:d2:
eb:f9:54:6a:15:96:a6:04:c1:26:4f:bb:74:5a:43:
26:9d:0b:aa:92:88:0c:c9:5d:eb:ba:83:de:fc:08:
79:94:bd:ec:38:99:dc:a1:34:ee:f7:3b:49:0d:5c:
39:71:72:4e:09:88:5a:c6:b0:26:e0:1a:f4:17:07:
04:cb:c7:ac:76:cb:b2:8f:0c:4f:48:64:1c:97:67:
72:0d:68:f1:c6:c6:92:7d:84:a0:c0:31:b5:1f:e0:
db:47:4f:52:0c:ad:1d:4f:ca:6a:1c:c8:22:81:15:
b9:77:e4:fd:5a:d8:d0:ca:36:38:98:be:20:d7:c0:
c2:48:22:2b:9c:68:49:b7:d6:92:33:cb:68:44:5e:
c3:90:c3:cf:d3:78:e2:c5:38:c2:e2:ba:ee:c6:ca:
5d:3e:3f:10:f4:07:5f:1d:f9:3b:d2:c1:c8:98:68:
d6:39:49:d8:2c:10:b2:07:df:e9:79:ff:e3:a5:64:
ed:58:dd:67:a2:1b:2a:43:cb:ce:33:e2:7e:8d:ca:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:60:46:A0:CC:F8:1B:CD:6F:E2:BA:87:48:CE:D6:53:02:6A:09:00
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6f:74:19:a9:b4:4f:b3:38:49:1a:f6:43:2e:9d:14:c8:37:
86:c9:a9:44:6d:bc:fa:94:ff:c6:15:2c:4e:85:03:0e:f0:57:
a3:6e:36:94:3d:60:11:ca:65:07:a9:a6:48:d2:f9:b9:d2:d9:
28:0d:18:cd:87:71:7a:2d:d9:36:e3:93:38:14:ba:5a:b6:d5:
54:ee:86:f8:fc:8a:fe:4e:59:25:d2:65:8c:79:00:03:58:db:
83:eb:2b:c1:a2:03:d9:9d:08:24:5a:b3:d6:da:32:d5:99:45:
46:cf:fb:6a:4b:1c:fb:68:3d:23:b4:25:d4:6e:fa:9a:f4:4c:
c9:e0:c5:a0:81:a3:a5:e2:2a:d5:08:ef:d0:45:ba:49:d5:eb:
84:86:ad:b1:99:03:b6:b4:69:92:31:71:47:79:f4:29:3f:37:
17:39:e1:c2:c5:f7:09:e6:22:a7:01:5c:23:77:f1:b8:9a:f7:
08:60:be:2c:e2:af:c5:61:5c:dd:90:41:60:f0:ef:3b:3a:94:
19:19:74:dc:53:02:a4:1f:31:bf:81:d5:f1:df:83:03:2a:fc:
48:e2:a2:12:60:90:7f:36:67:0a:a7:7e:fc:a9:2a:5e:62:ac:
02:e3:f7:02:52:e2:95:84:0f:94:f8:85:3f:8e:b4:52:bb:3c:
63:d3:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 18:35:33 2026 by rpki-client