Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
File: BWI7XxpkurkqlS0sw26EuDAXRis.mft (raw, json)
Hash identifier: sYkzlRSz0h3F7PNqunNI/ORy/Rm8MMnzwH1ZOJhHmGk=
Subject key identifier: 32:B9:D3:2D:83:75:F4:B0:13:5E:3E:CE:99:04:1C:4C:83:54:56:51
Authority key identifier: 05:62:3B:5F:1A:64:BA:B9:2A:95:2D:2C:C3:6E:84:B8:30:17:46:2B
Certificate issuer: /CN=05623b5f1a64bab92a952d2cc36e84b83017462b
Certificate serial: 019F8F7EAD95C37995E3FDBC654114F7F176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWI7XxpkurkqlS0sw26EuDAXRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:11 +0000
Manifest this update: Thu 23 Jul 2026 15:01:11 +0000
Manifest next update: Fri 24 Jul 2026 15:01:11 +0000
Files and hashes: 1: BWI7XxpkurkqlS0sw26EuDAXRis.crl (hash: g7QBMZFRgZinDHZ9wqffpubIKTqPMP/a+0R+EiS862w=)
2: JT-saWQFCpCIW-ieMRKXLLACWY0.roa (hash: oKK3L7+PDPyxkgEA4KB0NmXCZ5WOvuec1r4FwhGlfuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWI7XxpkurkqlS0sw26EuDAXRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ad:95:c3:79:95:e3:fd:bc:65:41:14:f7:f1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05623b5f1a64bab92a952d2cc36e84b83017462b
Validity
Not Before: Jul 23 15:01:11 2026 GMT
Not After : Jul 24 15:01:11 2026 GMT
Subject: CN=32b9d32d8375f4b0135e3ece99041c4c83545651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:a4:27:58:2c:1f:4b:27:40:85:a8:88:70:
a4:5c:83:4f:fd:0a:9f:1f:a4:5a:68:50:df:21:a0:
81:47:bb:35:e6:1b:63:c5:22:65:da:30:eb:63:40:
c2:72:29:a0:fa:15:e7:80:56:f3:8e:79:96:49:33:
c9:ee:d0:50:16:e4:f8:bb:f1:5a:b0:24:46:e3:f1:
21:68:b6:9d:76:1a:ad:d0:72:fe:35:90:b7:ee:dc:
7b:48:db:f0:65:cd:2a:3c:a1:a3:ed:48:c0:b6:e3:
de:99:40:16:f1:07:23:96:4d:83:17:05:79:5c:10:
b5:ad:7a:e4:ac:f8:a1:d3:21:c8:a0:57:e7:0b:c8:
86:04:c5:dd:e5:e3:b6:31:d3:bf:5d:2f:42:92:ca:
b3:3f:cf:3a:0c:8a:59:6c:90:43:20:c9:69:9c:73:
82:fc:24:e5:3d:19:01:2b:dc:80:08:22:18:e4:8a:
04:94:ee:ba:a5:e9:9f:4c:dc:05:9c:2f:3a:1a:b2:
8a:50:0f:6c:0f:8b:e3:29:a3:72:21:1c:fd:87:a3:
f3:e7:54:00:ea:e7:c7:1a:a7:53:92:7e:58:0e:f1:
94:b4:34:98:ac:75:b0:56:c9:47:7d:ac:a3:e1:2a:
1c:55:2c:9a:05:0e:cb:e4:2f:e2:e3:29:4b:ff:02:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:D3:2D:83:75:F4:B0:13:5E:3E:CE:99:04:1C:4C:83:54:56:51
X509v3 Authority Key Identifier:
keyid:05:62:3B:5F:1A:64:BA:B9:2A:95:2D:2C:C3:6E:84:B8:30:17:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWI7XxpkurkqlS0sw26EuDAXRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:45:f6:f7:58:8c:20:8d:12:0d:b9:aa:c5:e6:47:7f:8c:91:
79:bc:eb:ef:1e:7f:8c:4d:a2:2e:43:1b:4f:bd:f4:53:22:0a:
95:8d:fc:b3:d9:c2:2b:ab:1f:a6:c7:2a:98:e1:92:95:dd:9e:
78:eb:25:ad:fc:ff:c5:65:f2:00:7f:fe:5e:68:d3:46:96:bb:
f6:a3:ff:c2:6b:bb:22:0d:d7:48:82:93:56:c0:49:ff:9f:83:
2e:fb:d7:b3:7c:9e:06:21:61:93:e7:f5:5a:2e:7b:49:3f:d3:
60:b4:ac:d7:e9:06:fc:f5:39:51:c8:fe:37:ce:7d:d8:37:f6:
81:36:e5:5a:06:d8:74:97:6d:c5:c3:f4:a2:ad:e6:7a:58:e7:
b6:ee:37:d9:95:0a:44:22:6c:89:fc:a2:7f:71:16:ab:e9:71:
3b:9e:30:e5:8e:f2:16:56:a6:3e:b6:98:e8:28:28:d6:6b:22:
14:a6:20:00:84:83:4f:8b:22:3e:52:a8:6d:28:57:f6:d5:fd:
e0:a6:1c:71:1e:8e:b5:16:37:c4:72:24:d7:8c:db:57:bc:0d:
c8:d3:1b:e4:13:6e:26:9f:fe:12:8a:90:cd:41:22:05:c0:42:
a8:82:71:e4:ea:b9:7b:d2:af:dc:10:a8:83:6d:a8:63:84:f6:
d2:3f:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:56 2026 by rpki-client