
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
File: BswqJrMawkvFKV0kqOEwcfL_DWE.mft (raw, json)
Hash identifier: 3ZJXQlSKWvb1SNQZ/AKVzFni4kLFNsm9gnIcClstBok=
Subject key identifier: AA:D3:83:AE:11:F5:19:93:88:E7:66:3E:97:31:BE:CF:1C:B2:DD:C1
Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Certificate serial: 01A0D07FE3F4B266B1B185306F9C11D5D7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
Manifest number: 07FF
Signing time: Wed 23 Sep 2026 23:00:37 +0000
Manifest this update: Wed 23 Sep 2026 23:00:37 +0000
Manifest next update: Thu 24 Sep 2026 23:00:37 +0000
Files and hashes: 1: 9lU8W6GsbjOikxoEyiZGZ32gMu8.roa (hash: 6hhQ4bRIwowHm8SVibrWEZqFmNLkjdhuBAUnwS85Eso=)
2: BswqJrMawkvFKV0kqOEwcfL_DWE.crl (hash: w53bf4bISk1gBPGd0D1vFA/Dvi56oHsxFloLtZsRQb8=)
3: pJ3ORYu20jUimM_yTFjEk51Oq9o.roa (hash: PCTJatpDnAOhayMUHNJZY/fD1I6Bq7AxOUaU54uRZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:e3:f4:b2:66:b1:b1:85:30:6f:9c:11:d5:d7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Validity
Not Before: Sep 23 23:00:37 2026 GMT
Not After : Sep 24 23:00:37 2026 GMT
Subject: CN=aad383ae11f5199388e7663e9731becf1cb2ddc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:34:a2:c7:ca:ab:f4:b3:83:00:2f:b1:91:
c4:1d:8d:30:5e:e1:f6:db:92:58:da:0d:81:ea:46:
e6:d8:05:10:df:a1:56:20:8a:de:e1:a0:c9:f5:2d:
21:15:01:7a:d7:85:89:d6:43:12:70:4e:e6:fd:72:
65:73:de:de:21:f5:93:d5:6c:79:54:d9:1d:4c:07:
03:d4:83:6e:f6:74:1c:70:5e:12:ac:85:5f:fa:cc:
6b:c6:93:33:bb:8c:ff:b3:75:b9:47:75:85:c2:15:
14:ea:89:cb:2c:a5:da:23:1a:22:5b:3e:45:de:6c:
62:b4:c5:e5:36:26:c1:71:ab:fa:53:f5:e5:6a:a4:
4f:e1:93:c2:0a:1f:8b:f1:70:d5:f9:44:fb:31:07:
59:99:f4:92:a3:a4:11:42:a2:b7:d3:2f:7d:fd:af:
14:85:11:f4:ff:dd:db:1b:9c:ae:84:d2:77:26:7f:
49:3b:87:31:fa:18:63:b6:20:8e:80:fd:bb:7f:fb:
2d:30:aa:94:6f:14:55:67:77:fc:ad:91:27:b8:43:
63:30:8d:bb:81:17:d7:b4:56:d0:18:2c:85:32:41:
a7:f2:ca:72:2b:99:6c:57:7e:a6:ea:60:d7:5b:db:
8a:28:b0:6b:53:d1:7b:07:31:c6:b3:00:76:e8:d5:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D3:83:AE:11:F5:19:93:88:E7:66:3E:97:31:BE:CF:1C:B2:DD:C1
X509v3 Authority Key Identifier:
keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:70:a8:ba:ec:a5:a0:f9:8f:e7:49:23:b8:34:95:f0:55:e3:
e6:77:ba:a9:b8:eb:0c:db:d0:b7:1b:2d:7f:80:0b:30:f9:4d:
92:26:f3:2e:75:d7:98:3a:7f:0f:35:d8:23:54:4e:5f:93:9c:
cc:3e:64:1e:86:2f:0a:5c:7b:ef:2a:01:ef:84:54:2a:0a:4a:
94:a4:46:20:50:77:b2:9e:1d:87:0f:ed:14:68:98:66:92:20:
9a:de:8c:08:4a:3f:d1:46:40:34:a8:3a:1a:5e:50:01:55:7a:
9a:cb:63:0b:2d:14:6b:dc:ce:9f:67:d0:52:26:56:5c:56:90:
30:2e:af:48:1b:cb:2f:1a:67:13:a3:94:cb:7e:97:56:31:8b:
b1:b6:8b:87:9c:23:90:a1:ed:00:a4:e7:29:5d:5b:1a:94:28:
67:1e:a6:0f:2a:dd:58:39:85:4f:99:7a:36:00:cf:bc:e6:32:
62:6b:92:6b:ec:1b:ef:8c:d4:21:fe:3b:fa:34:b7:5f:2d:1f:
df:ba:c4:66:e4:11:d5:80:5c:e8:4b:fc:58:6a:76:e7:37:54:
51:91:6a:2d:11:c4:75:68:1c:87:41:d6:bb:ec:ae:74:bc:aa:
74:81:38:23:8e:64:72:33:b8:75:20:6b:7f:cf:39:81:3b:13:
b9:61:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:00 2026 by rpki-client