Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: 1FMycUD8Rzr+CaHG6du4UAZ/uG3u+BsC+TGSp6AawXM=
Subject key identifier: 16:0B:6B:A8:89:88:44:3A:FE:B2:1A:1F:51:61:63:87:1D:45:32:47
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 01A0CE919A291EFA42039306308881BA5A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 14:00:43 +0000
Manifest this update: Wed 23 Sep 2026 14:00:43 +0000
Manifest next update: Thu 24 Sep 2026 14:00:43 +0000
Files and hashes: 1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=)
2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: TVdaLETNh805j31+/G5AV28KYzaJSVcDARew2Pi00Gk=)
3: IrgZXbsjh204onicFzimaq0fKao.asa (hash: 9uFvP0C57royCY6ILUpJIJN8Q/WGwEUztAWeXpOyUhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:9a:29:1e:fa:42:03:93:06:30:88:81:ba:5a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Sep 23 14:00:43 2026 GMT
Not After : Sep 24 14:00:43 2026 GMT
Subject: CN=160b6ba88988443afeb21a1f516163871d453247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:34:56:5d:b9:24:44:d6:e6:d5:84:ab:9a:
41:9c:d5:24:9d:92:da:48:8f:b1:38:2b:74:95:94:
c3:08:a3:a4:f4:bf:8d:d2:73:ce:df:24:78:ea:fd:
65:2a:38:b8:27:93:cf:78:b6:be:10:49:ba:99:25:
cd:3b:93:c7:b5:d9:ea:c0:27:24:1b:41:31:69:46:
66:d0:7b:22:d2:90:fd:8e:73:b7:e9:58:87:3e:f6:
a2:59:bb:4f:57:b2:ba:ca:da:5f:fc:e9:b1:6b:5d:
78:29:a2:20:b8:2b:5a:61:6e:87:35:60:2e:ae:17:
1f:09:5f:ff:4b:59:fd:6b:52:35:fb:8b:5e:aa:c6:
34:2c:0b:01:59:4b:18:ca:b8:8e:55:69:f2:ba:78:
a8:5d:6d:e0:52:c5:23:cb:ba:77:dc:78:be:67:da:
42:53:de:51:41:12:dc:44:6d:f3:92:65:dc:f4:46:
6f:be:32:b2:6a:28:44:e2:64:54:bc:5c:f5:cc:c4:
7f:6f:08:dc:ea:c6:c0:06:a8:e4:36:7e:f6:82:fe:
2c:2a:2a:78:ba:19:67:c6:e2:65:be:f7:db:d8:e2:
0d:b2:3b:1b:7a:b4:0e:f0:6a:6c:bf:37:9a:c9:ab:
9e:34:a9:a1:a8:57:bf:13:48:66:45:58:f5:cf:66:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0B:6B:A8:89:88:44:3A:FE:B2:1A:1F:51:61:63:87:1D:45:32:47
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7e:6b:6a:3a:a3:75:2e:41:7d:09:28:05:ab:60:2e:20:b0:
34:4d:e9:a7:9f:73:aa:b2:1d:fb:79:13:b0:8d:e6:10:c5:59:
76:f6:a5:74:f9:6b:d5:c9:5c:00:69:dd:82:fc:31:bb:f7:e6:
60:64:a8:ea:8c:24:01:85:55:45:91:77:dc:2d:28:e1:42:cd:
8e:18:4a:a1:02:c0:8c:b9:a8:30:c3:05:43:cc:5b:25:89:a7:
07:aa:65:60:b3:9d:c4:40:15:d7:35:ec:ac:70:6d:c6:3c:68:
c4:a2:b0:01:c8:75:85:86:5f:d3:8a:11:63:95:5c:ea:04:27:
f7:21:00:79:f2:1c:a8:db:c7:35:f7:57:5b:aa:8d:92:25:a8:
ab:34:13:bf:41:95:61:41:70:56:c0:9f:5a:90:9a:e6:4e:88:
4c:9d:fc:e2:7f:f5:f1:93:85:b4:5d:1e:2e:88:c6:a8:c7:98:
0c:8f:22:79:69:7e:f6:c8:9f:07:db:4c:38:08:f7:9c:20:bc:
ed:37:bc:b9:93:25:8c:e5:3f:06:03:89:3d:c9:2d:5f:ce:71:
87:98:36:fb:1b:22:b0:40:17:11:4f:4e:f2:f9:be:68:87:2e:
e8:28:04:7d:e3:fb:42:ae:38:ee:7b:ce:86:ab:54:52:46:d1:
6a:80:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:24 2026 by rpki-client