Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: NLhrTUL+RYhSivoqPfSCEHyqmjVMvMshpkT1s7y3GJ4=
Subject key identifier: AF:0A:67:1D:34:35:8F:D6:2F:3C:52:CB:5D:6E:28:D1:EC:31:04:F2
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 019F90C7CB504B659E1B946C9EDA7F813A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 19D0
Signing time: Thu 23 Jul 2026 21:00:40 +0000
Manifest this update: Thu 23 Jul 2026 21:00:40 +0000
Manifest next update: Fri 24 Jul 2026 21:00:40 +0000
Files and hashes: 1: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: CyqCy055TLuEV0aq7baM90brGUFNp3fiV6MsfGUJkWs=)
2: NaepKDUSFtPVzyjXT9VY683pv7k.roa (hash: ss+CQ2zxnFp/z8s24U9+WfPH3FxucLqO1Hzr/w2GZF4=)
3: tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa (hash: o/l+UfaRASye/WyLBJkfDvEuNMAWi4a+yJfDJFDSNrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:cb:50:4b:65:9e:1b:94:6c:9e:da:7f:81:3a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Jul 23 21:00:40 2026 GMT
Not After : Jul 24 21:00:40 2026 GMT
Subject: CN=af0a671d34358fd62f3c52cb5d6e28d1ec3104f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:6b:20:b6:66:de:b7:bd:f1:a0:f5:dd:07:
3f:0d:ef:53:39:59:40:01:0a:cd:ba:ca:8f:60:8e:
8e:fa:b0:00:5e:ce:1f:a0:0f:6c:2d:8a:d1:6a:9f:
cf:81:9e:d1:41:af:ef:be:54:53:c0:9f:d9:a3:7b:
00:39:77:31:55:82:c4:18:aa:49:01:ee:d7:65:60:
62:11:09:66:53:e0:ff:01:e6:de:49:2a:f2:ad:0e:
32:45:f8:6c:07:1c:b1:29:36:17:f0:45:9d:cc:af:
0d:4a:19:61:bc:7c:80:52:36:17:39:fc:63:32:61:
4e:a9:07:ad:73:6c:03:49:5f:63:26:09:01:79:0c:
37:27:dd:f4:a5:f1:19:07:23:ce:59:82:37:ad:17:
9e:03:e5:d3:4d:76:e8:4f:76:91:46:b4:69:38:27:
bc:53:64:3f:ff:74:4c:bb:43:bc:86:62:f1:62:1b:
7c:06:4e:7e:77:27:03:c9:d3:fb:6d:01:f3:3b:fb:
06:30:0f:6f:16:4e:0e:e4:1c:15:bc:ba:e5:9f:e0:
45:24:5d:e6:02:66:e5:21:7c:6b:bf:2e:ab:a9:69:
94:23:67:01:c2:b6:86:b0:86:b1:d6:ad:45:c4:7e:
86:c6:fb:ec:44:d6:a9:dc:8c:5d:59:2c:e2:ae:fe:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0A:67:1D:34:35:8F:D6:2F:3C:52:CB:5D:6E:28:D1:EC:31:04:F2
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ba:34:2a:37:d4:dd:e9:dc:51:0d:00:d0:d5:a4:8f:11:95:
5c:64:cc:6f:d5:2d:b7:73:c2:48:7d:24:4c:c5:a0:aa:8f:7f:
f7:20:10:da:0a:ae:b7:8c:9d:01:0e:ec:6e:45:80:d0:c9:2d:
4f:e6:7a:15:92:b3:86:44:02:ab:b1:61:72:5f:b8:ea:60:c7:
b9:05:72:36:a2:99:49:5f:20:86:97:37:ca:96:1e:39:17:25:
3f:8a:ba:c5:bb:02:2a:e8:58:dd:85:84:23:bd:64:f6:1b:d9:
cc:a3:3f:22:ae:5e:15:e3:a6:d9:8e:f4:81:ae:e4:29:9a:85:
84:ff:18:e9:2a:b4:53:08:93:35:94:bc:06:67:87:31:54:8f:
7e:71:16:45:f8:d5:8e:0f:a8:20:4b:62:59:73:0a:60:72:ba:
dc:87:59:c1:95:f7:ea:27:ee:20:32:3e:f5:64:69:7f:71:47:
7a:97:33:ee:bf:f6:29:b5:06:8e:dd:f0:ee:90:a0:cf:21:ec:
98:0d:9f:b4:b0:de:65:90:43:ef:d0:f4:c0:e1:4e:6f:27:c2:
96:e7:80:ff:5f:74:02:b5:c1:06:18:33:3a:47:30:09:e0:a3:
59:34:ee:84:99:5a:68:68:0d:28:29:88:e9:24:7a:a2:bd:87:
03:e3:93:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:34 2026 by rpki-client