Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: H7hd2uOmrZ9to28RgclZ4aqdTB8xlXGSJu1xTftEIgM=
Subject key identifier: AE:8A:17:54:11:D6:98:C0:FB:F1:DA:5F:E1:5E:81:A0:EA:DB:2E:DD
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 019D28BB68BE2766CACE77445C048F6CA402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: gXRbBYeF0iMAnWT3XgOJPy14ZWMFV1jsn7qqmGrpybE=)
2: NaepKDUSFtPVzyjXT9VY683pv7k.roa (hash: ss+CQ2zxnFp/z8s24U9+WfPH3FxucLqO1Hzr/w2GZF4=)
3: tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa (hash: o/l+UfaRASye/WyLBJkfDvEuNMAWi4a+yJfDJFDSNrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:68:be:27:66:ca:ce:77:44:5c:04:8f:6c:a4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=ae8a175411d698c0fbf1da5fe15e81a0eadb2edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:41:a8:3c:72:ea:24:6d:5a:6d:bb:88:20:
78:84:a3:4b:80:77:7d:d8:e0:6e:64:30:81:65:a1:
46:40:b3:86:e7:91:59:aa:86:8d:56:be:b3:a2:0f:
43:0e:d2:98:3f:62:d8:7b:b1:37:39:53:50:50:39:
dc:2b:30:84:de:4c:a8:21:ec:30:33:09:30:59:25:
04:a7:2d:f2:de:f5:e4:2e:d8:92:0a:a3:28:8d:2d:
b5:4a:f1:72:65:16:2d:4f:88:66:e7:f9:54:84:c1:
53:9a:5d:55:46:7e:f6:57:48:f3:d5:b6:c8:95:96:
4d:26:2e:ea:6b:e0:3a:5e:2c:7a:59:24:38:13:5a:
39:b1:73:f8:82:19:de:94:68:5d:c0:28:dc:fb:c2:
94:b6:ea:31:41:98:8e:b0:b2:e3:ca:89:f7:29:5d:
96:c3:af:7e:ff:72:8f:c6:27:44:31:af:e0:16:0b:
36:8c:94:17:61:81:89:d7:9f:0d:c8:89:cc:76:d3:
8b:f0:b5:5d:2c:88:53:38:44:fc:76:76:be:dd:63:
79:b7:7a:4d:99:8d:82:3d:3b:77:7e:14:a6:c3:45:
a7:1c:06:82:93:9c:ce:81:2b:37:fd:0c:0e:51:ef:
87:5f:70:a2:e1:20:9f:c6:f9:7b:0e:88:34:be:af:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:17:54:11:D6:98:C0:FB:F1:DA:5F:E1:5E:81:A0:EA:DB:2E:DD
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:12:0e:fe:30:c7:c2:6d:89:59:d5:31:c1:07:fe:ea:a7:af:
96:dd:c2:27:cb:26:75:ff:af:ca:f5:b2:7e:7b:ca:35:62:f1:
69:d5:ed:78:c1:da:b2:1b:2c:65:3e:fe:89:d6:f7:08:3d:56:
9f:ff:2b:e0:2f:f3:ef:93:3c:e3:b9:4a:ca:6f:c5:e1:af:6b:
9e:e8:44:cb:1f:01:85:67:ab:aa:3b:1f:0f:ee:ab:2a:43:59:
09:fc:3d:36:f0:2b:13:00:dd:5c:30:3d:9e:51:b4:a4:86:34:
72:f2:79:4b:ce:5b:8b:c1:58:95:60:81:64:84:52:95:7c:8a:
57:32:ec:b0:44:c0:8d:fa:aa:4f:75:1a:17:24:13:f2:5a:64:
11:4d:4c:7b:67:18:b0:50:bf:89:f9:cc:c3:53:d8:19:c6:59:
ce:85:d4:9a:bd:04:0d:8e:a7:31:c8:80:9b:88:0a:d0:c5:95:
04:c0:3a:4e:11:b1:d0:7d:8a:e3:5b:d3:fc:6b:0c:4d:28:48:
6b:40:d2:ad:3f:b9:b8:32:52:ab:73:c7:02:0e:9d:98:f5:9e:
ab:09:3c:87:c2:11:a7:3b:25:e9:a2:4c:d3:c3:18:44:56:b7:
87:cc:05:3b:85:a3:fb:08:72:53:c3:91:af:bc:69:b0:1b:cc:
57:53:d4:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou2i+J2bKzndEXASPbKQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmFkMmY0ZmZjNTg3MmUzNWE0MjllNTNlZjE3OTkyNWZm
NDIxNWUwHhcNMjYwMzI2MDYwMTAzWhcNMjYwMzI3MDYwMTAzWjAzMTEwLwYDVQQD
EyhhZThhMTc1NDExZDY5OGMwZmJmMWRhNWZlMTVlODFhMGVhZGIyZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3RBqDxy6iRtWm27iCB4hKNLgHd9
2OBuZDCBZaFGQLOG55FZqoaNVr6zog9DDtKYP2LYe7E3OVNQUDncKzCE3kyoIeww
MwkwWSUEpy3y3vXkLtiSCqMojS21SvFyZRYtT4hm5/lUhMFTml1VRn72V0jz1bbI
lZZNJi7qa+A6Xix6WSQ4E1o5sXP4ghnelGhdwCjc+8KUtuoxQZiOsLLjyon3KV2W
w69+/3KPxidEMa/gFgs2jJQXYYGJ158NyInMdtOL8LVdLIhTOET8dna+3WN5t3pN
mY2CPTt3fhSmw0WnHAaCk5zOgSs3/QwOUe+HX3Ci4SCfxvl7Dog0vq+brwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6KF1QR1pjA+/HaX+FegaDq2y7dMB8GA1UdIwQY
MBaAFAVq0vT/xYcuNaQp5T7xeZJf9CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDkt
MWU0ZmNiMWM2MGNiLzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDktMWU0ZmNiMWM2MGNi
LzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhIO/jDH
wm2JWdUxwQf+6qevlt3CJ8smdf+vyvWyfnvKNWLxadXteMHashssZT7+idb3CD1W
n/8r4C/z75M847lKym/F4a9rnuhEyx8BhWerqjsfD+6rKkNZCfw9NvArEwDdXDA9
nlG0pIY0cvJ5S85bi8FYlWCBZIRSlXyKVzLssETAjfqqT3UaFyQT8lpkEU1Me2cY
sFC/ifnMw1PYGcZZzoXUmr0EDY6nMciAm4gK0MWVBMA6ThGx0H2K41vT/GsMTShI
a0DSrT+5uDJSq3PHAg6dmPWeqwk8h8IRpzsl6aJM08MYRFa3h8wFO4Wj+whyU8OR
r7xpsBvMV1PU9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:28 2026 by rpki-client