Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: nhKApgP8HQL26dyA6FTAKBQOJ5eZSXyVR3J5Ao/X+kY=
Subject key identifier: E2:B7:5E:BC:00:42:70:D1:67:D8:B5:58:6A:AE:1E:04:25:21:2D:10
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 01A0CD7EB45CDFD57D45D3DA7261CA512C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 1A74
Signing time: Wed 23 Sep 2026 09:00:27 +0000
Manifest this update: Wed 23 Sep 2026 09:00:27 +0000
Manifest next update: Thu 24 Sep 2026 09:00:27 +0000
Files and hashes: 1: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: NvOFGQGE2XwwNf9M6V2A0dHjTkOl4d5ntH0Izb1//9w=)
2: NaepKDUSFtPVzyjXT9VY683pv7k.roa (hash: ss+CQ2zxnFp/z8s24U9+WfPH3FxucLqO1Hzr/w2GZF4=)
3: tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa (hash: o/l+UfaRASye/WyLBJkfDvEuNMAWi4a+yJfDJFDSNrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:b4:5c:df:d5:7d:45:d3:da:72:61:ca:51:2c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Sep 23 09:00:27 2026 GMT
Not After : Sep 24 09:00:27 2026 GMT
Subject: CN=e2b75ebc004270d167d8b5586aae1e0425212d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:8c:43:92:12:83:dd:37:77:84:6c:50:0a:
7b:99:5c:f6:79:9d:22:9d:67:83:ae:52:1e:91:2d:
15:e7:56:ab:d7:29:73:84:d1:ef:9c:02:2f:c6:3f:
4a:37:fb:70:20:62:2c:f5:7d:b5:8a:8c:f7:73:61:
7e:7a:1c:95:62:e7:5d:1f:c4:51:43:1a:ea:87:66:
24:e5:5c:e8:9e:ba:97:57:8c:4d:f2:a8:60:c1:80:
ec:d8:e2:6a:aa:7e:34:e3:2f:91:58:a7:27:d4:43:
00:b5:aa:d4:90:23:eb:55:74:25:0a:c5:0f:5a:96:
92:d8:60:03:9c:35:61:72:48:80:f6:80:9a:31:7f:
c2:30:88:00:d6:d2:f0:fc:b4:7d:b0:cd:7b:05:96:
ab:ea:80:f7:9a:a5:cc:d7:1b:06:d6:12:50:ab:05:
3e:06:6b:f8:8f:2e:b9:f6:7b:4f:c1:de:40:ed:02:
8e:e9:fa:2d:87:55:24:d4:53:2e:bd:f2:cf:b6:b6:
ee:0a:8a:70:b6:09:95:e0:b0:97:a3:e6:36:85:6c:
5b:a2:43:17:f0:4b:5d:70:14:10:4c:05:03:6e:87:
36:2a:3b:65:cb:6f:64:4d:14:b1:e8:f4:14:1a:a5:
fb:ea:db:ad:7b:2a:f4:c4:1b:2a:5d:f8:12:5b:f5:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:5E:BC:00:42:70:D1:67:D8:B5:58:6A:AE:1E:04:25:21:2D:10
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:de:fb:7c:ce:37:fb:01:05:d6:3b:42:fa:00:48:3a:d8:d9:
82:ff:1a:2e:03:eb:a6:6b:f7:ba:ab:47:e5:71:30:43:13:f6:
67:83:7c:26:be:6c:96:c6:2e:00:9d:e5:15:41:37:67:b7:d5:
0d:86:d2:3f:fa:63:74:0a:14:19:9b:87:9f:dc:6e:31:d6:02:
d3:bb:8f:2d:a6:2d:be:fa:f4:95:26:36:93:a8:07:ab:0b:24:
d0:0b:22:db:54:9f:3b:6e:bf:61:d6:e4:02:6d:c7:9d:37:21:
2e:63:a9:5c:65:de:32:aa:6a:c2:2a:89:0e:f8:f2:73:7a:1e:
23:36:9a:e4:11:de:5a:bb:1a:00:9c:fb:50:85:66:9e:ed:ed:
07:58:c8:7e:5d:a3:b3:0e:6e:e5:a7:f2:27:61:88:c7:7a:e4:
5b:68:80:3a:d5:f8:ef:51:c7:2d:0d:3b:84:92:48:ec:44:f8:
e1:b3:f5:7f:19:8c:56:3c:fb:dd:48:2d:51:77:83:3c:0a:df:
dc:c1:07:d4:af:30:ab:c1:84:ee:0a:28:00:eb:fe:d3:26:15:
5e:55:de:14:f1:47:00:a7:de:3f:24:60:6c:a9:a8:93:a5:8c:
57:d7:62:fc:98:df:d7:b4:88:fe:87:b8:20:75:a5:4b:eb:c4:
d1:cb:9d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfrRc39V9RdPacmHKUSwNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmFkMmY0ZmZjNTg3MmUzNWE0MjllNTNlZjE3OTkyNWZm
NDIxNWUwHhcNMjYwOTIzMDkwMDI3WhcNMjYwOTI0MDkwMDI3WjAzMTEwLwYDVQQD
EyhlMmI3NWViYzAwNDI3MGQxNjdkOGI1NTg2YWFlMWUwNDI1MjEyZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcCMQ5ISg903d4RsUAp7mVz2eZ0i
nWeDrlIekS0V51ar1ylzhNHvnAIvxj9KN/twIGIs9X21ioz3c2F+ehyVYuddH8RR
Qxrqh2Yk5VzonrqXV4xN8qhgwYDs2OJqqn404y+RWKcn1EMAtarUkCPrVXQlCsUP
WpaS2GADnDVhckiA9oCaMX/CMIgA1tLw/LR9sM17BZar6oD3mqXM1xsG1hJQqwU+
Bmv4jy659ntPwd5A7QKO6foth1Uk1FMuvfLPtrbuCopwtgmV4LCXo+Y2hWxbokMX
8EtdcBQQTAUDboc2Kjtly29kTRSx6PQUGqX76tuteyr0xBsqXfgSW/Ud/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOK3XrwAQnDRZ9i1WGquHgQlIS0QMB8GA1UdIwQY
MBaAFAVq0vT/xYcuNaQp5T7xeZJf9CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDkt
MWU0ZmNiMWM2MGNiLzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDktMWU0ZmNiMWM2MGNi
LzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAad77fM43
+wEF1jtC+gBIOtjZgv8aLgPrpmv3uqtH5XEwQxP2Z4N8Jr5slsYuAJ3lFUE3Z7fV
DYbSP/pjdAoUGZuHn9xuMdYC07uPLaYtvvr0lSY2k6gHqwsk0Asi21SfO26/Ydbk
Am3HnTchLmOpXGXeMqpqwiqJDvjyc3oeIzaa5BHeWrsaAJz7UIVmnu3tB1jIfl2j
sw5u5afyJ2GIx3rkW2iAOtX471HHLQ07hJJI7ET44bP1fxmMVjz73UgtUXeDPArf
3MEH1K8wq8GE7gooAOv+0yYVXlXeFPFHAKfePyRgbKmok6WMV9di/Jjf17SI/oe4
IHWlS+vE0cudLg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:40:30 2026 by rpki-client