Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json)
Hash identifier: n19N7+AVcvWcIvo9XSHWRYtxQR6PQZdvnYF40H0JC44=
Subject key identifier: DC:72:59:CD:1C:9B:A8:C2:0D:8C:8A:50:9A:49:90:54:FF:3A:1E:6B
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 019E1BD93724C9875D255ECB5CBDA223D6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
Manifest number: 08BD
Signing time: Tue 12 May 2026 11:01:20 +0000
Manifest this update: Tue 12 May 2026 11:01:20 +0000
Manifest next update: Wed 13 May 2026 11:01:20 +0000
Files and hashes: 1: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: qK4XG4f2mDg91D7FPJMx36wZzhWFs5lHWHh3HYHu8ZY=)
2: gKAUH3NhBegxnJoZ26FHTf-Ouv4.roa (hash: Y4dcQaDXyPAK+Bl2p4bGnOEjKSjqyIaeaExs7HHzXGs=)
3: xsQ8oOOW_FcrVFhboB2kGQU3HJc.asa (hash: QNXjyWn6lE7GMMmcUKsY6cXFAZGIY8GIMMUcGL7t6cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:37:24:c9:87:5d:25:5e:cb:5c:bd:a2:23:d6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: May 12 11:01:20 2026 GMT
Not After : May 13 11:01:20 2026 GMT
Subject: CN=dc7259cd1c9ba8c20d8c8a509a499054ff3a1e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:a9:d3:78:54:40:68:da:3e:8b:21:35:a6:
79:d4:7b:ca:15:f7:2f:1d:a5:d1:b0:e7:03:8e:16:
3b:80:d4:12:e5:06:2a:80:90:5d:30:2a:88:a7:1e:
65:12:ae:3e:f7:99:4c:6b:d3:19:3e:7a:54:c3:98:
2c:0c:f8:5b:5a:bb:04:66:6c:54:e0:ab:e5:0a:3d:
88:d6:2c:ba:68:e7:e0:3d:db:08:75:64:19:a7:33:
17:85:b3:b7:9a:79:08:42:c6:fe:3d:d6:98:35:79:
37:82:e4:f8:0a:99:6f:26:af:2b:10:20:c2:bb:cc:
eb:49:a8:1e:33:4a:b5:84:50:5b:a7:51:8d:ec:a1:
20:69:6f:87:21:7a:19:95:79:f7:a7:4c:11:53:3d:
16:87:7e:41:e3:f5:28:08:45:21:be:84:98:94:7b:
f2:66:03:98:76:27:1f:c7:49:a5:9d:30:ca:d7:e4:
5e:9f:8e:c1:9a:6b:e2:b0:4d:f3:de:56:a2:b2:f6:
f9:55:8d:7d:75:49:6c:5b:f5:27:b2:c0:ce:32:31:
8e:1d:9e:65:b8:3c:ac:b4:79:d0:28:24:52:8a:64:
04:48:27:47:b7:c2:fc:b9:29:f2:10:f4:d9:19:29:
6b:86:1f:84:c4:52:4a:6c:f3:11:e6:13:c2:8e:5f:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:72:59:CD:1C:9B:A8:C2:0D:8C:8A:50:9A:49:90:54:FF:3A:1E:6B
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:eb:47:76:ba:2c:c9:93:9c:74:cf:61:21:69:fc:d1:11:49:
b1:af:f2:d2:f6:d4:c6:d1:f9:2f:49:69:a2:dd:66:de:f2:4b:
5d:b6:5c:01:0b:1e:91:80:1c:6d:25:e0:e4:b9:be:84:2d:1f:
0c:64:61:e2:b3:ee:3b:da:91:e5:cc:17:6e:a3:8a:56:6d:80:
35:a3:c3:4f:16:84:f9:74:d8:3a:45:9c:01:f3:63:0e:98:49:
c5:63:fc:1c:1d:7b:b4:4c:0b:0a:28:3f:4c:72:d0:a8:54:b8:
c9:af:4d:47:6d:28:45:ac:9e:67:f9:56:e9:b8:57:d6:83:6d:
3a:c1:41:01:ac:1f:56:27:ad:64:25:0d:ae:01:6f:29:a0:fc:
a6:b4:aa:bc:85:2e:fb:1f:fd:d4:68:38:4a:ae:45:88:49:83:
e1:b8:8c:ac:cd:4a:ac:94:37:d3:40:1d:51:be:d6:f1:17:41:
17:d4:7d:3d:17:71:36:de:c2:45:ca:a1:24:29:6a:7b:45:a8:
af:ec:8e:6b:00:b6:cb:da:12:26:cb:5e:c7:68:d4:36:3e:ca:
4c:1c:2e:ac:0b:b5:e5:dc:ed:50:0c:71:14:46:ea:f2:71:43:
75:60:cf:c5:ea:1b:57:f5:5f:c2:a8:cc:be:a0:2a:54:7a:14:
7c:bd:47:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:17 2026 by rpki-client