Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier: zAKbtVnhw698PI594TjYxSK+a5g1RLJJTZ9y3joDUdo=
Subject key identifier: 00:40:CD:48:18:22:94:94:37:05:FA:11:1D:65:92:B1:8B:D3:08:4B
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 01A129564F4A3A229E40196A8D4AB2B8BDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number: 12CF
Signing time: Sun 11 Oct 2026 05:01:24 +0000
Manifest this update: Sun 11 Oct 2026 05:01:24 +0000
Manifest next update: Mon 12 Oct 2026 05:01:24 +0000
Files and hashes: 1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: Z+aJClq2k6d8Qf/rlOUef988jrGwvcubp/xXEig9mEY=)
5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:4f:4a:3a:22:9e:40:19:6a:8d:4a:b2:b8:bd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Oct 11 05:01:24 2026 GMT
Not After : Oct 12 05:01:24 2026 GMT
Subject: CN=0040cd48182294943705fa111d6592b18bd3084b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:e8:21:8b:1b:81:c3:10:68:77:c0:46:25:
b5:f1:24:ce:b5:de:22:99:5c:05:a0:25:da:e0:16:
5a:ca:c6:52:0c:5a:bd:2f:56:a4:6e:f9:91:c7:77:
e9:62:e6:f0:32:43:e4:76:44:8e:11:17:76:10:d6:
d5:e2:fd:06:2c:c6:84:27:74:27:2b:e2:6d:15:6a:
ce:98:63:85:77:cf:79:db:b4:1b:b6:6b:8a:1b:06:
95:df:05:b3:39:84:28:7e:9c:b1:4e:28:5e:cc:a3:
44:88:dd:63:c8:43:3d:60:72:b4:5a:64:2b:f6:1f:
62:a7:fe:42:7f:3d:3c:07:17:31:45:d7:33:7d:cc:
73:06:0e:ce:12:6b:d1:87:ec:b5:64:4f:bc:c6:57:
d1:0e:6a:fd:7f:27:81:10:51:a1:c4:cb:fb:c2:d8:
be:db:a4:09:e0:42:77:b6:d5:3b:3b:b3:f4:07:8b:
fd:8e:91:53:49:7d:eb:fd:43:b1:c6:f1:8f:55:d8:
7b:7a:b6:f6:0c:87:ab:8e:91:7d:64:08:57:ec:8f:
c6:99:01:11:6d:7d:8d:c3:e3:40:da:36:c4:44:03:
33:79:39:27:d1:1e:2c:15:e9:ed:46:cc:41:5d:2c:
1f:aa:2a:91:3f:07:91:ad:ab:79:57:c6:5b:08:61:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:CD:48:18:22:94:94:37:05:FA:11:1D:65:92:B1:8B:D3:08:4B
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:93:d1:91:c0:0f:0b:58:6b:7a:8b:64:13:bc:97:81:3b:9f:
22:c5:00:7e:80:66:c9:e3:dd:b3:a3:b1:73:0a:6c:2d:38:9a:
05:b5:b7:e4:f7:41:03:b4:de:e7:60:ce:c6:d9:14:03:84:e1:
31:cf:61:c5:c1:98:6c:b6:c9:c6:c3:f8:ef:11:79:44:0c:ab:
b3:f4:e4:dd:94:10:d6:17:1c:f1:26:66:10:d3:55:70:c1:18:
f4:51:c4:98:a8:40:a8:b3:6b:ca:eb:5e:8a:2e:1a:21:1f:f0:
26:5a:d1:c9:1b:4b:42:fd:94:a5:4b:3f:2a:0e:e7:67:a3:ed:
71:4b:cf:cb:73:53:32:96:65:86:c1:0a:2f:37:03:b5:9e:2b:
0d:da:41:73:85:d2:01:fa:48:53:7c:f7:7f:2b:b8:3d:37:94:
0f:3b:a8:36:ca:df:ed:52:04:41:9a:8d:05:0a:e5:26:3a:09:
5c:eb:e6:e5:d9:14:3f:b9:af:06:16:2f:be:fe:00:75:03:02:
52:08:dd:2f:68:e6:5d:b4:0e:f2:e5:b3:54:2e:6f:51:13:89:
45:de:e2:e2:49:57:7a:c6:a1:07:e4:64:98:29:2f:a4:87:51:
4d:b8:27:e9:ff:d0:5e:71:74:e0:5d:8b:77:71:09:40:18:e9:
04:26:5b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:44:11 2026 by rpki-client