
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
File: BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft (raw, json)
Hash identifier: 97aRjxB7NBSkxpdtzT43k5HTSwflAEuSG/rRWlI8+Ak=
Subject key identifier: D4:3E:C3:A4:D7:61:3C:87:12:71:8F:26:7F:42:97:02:1E:AF:25:D5
Authority key identifier: 05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
Certificate issuer: /CN=056c66d45fe7e2f35599572a776b12764dc69a01
Certificate serial: 01A0D426C66A8C1C982084A74BC5D576C68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
Manifest number: 0473
Signing time: Thu 24 Sep 2026 16:01:45 +0000
Manifest this update: Thu 24 Sep 2026 16:01:45 +0000
Manifest next update: Fri 25 Sep 2026 16:01:45 +0000
Files and hashes: 1: BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl (hash: MumZpVF766ZArQZ6vRqwSRoch2q+0UDH3WT4cupMEwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:c6:6a:8c:1c:98:20:84:a7:4b:c5:d5:76:c6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056c66d45fe7e2f35599572a776b12764dc69a01
Validity
Not Before: Sep 24 16:01:45 2026 GMT
Not After : Sep 25 16:01:45 2026 GMT
Subject: CN=d43ec3a4d7613c8712718f267f4297021eaf25d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:55:d3:f9:04:5b:cd:e1:0a:a3:e0:1c:68:
9e:54:5c:67:79:b5:86:50:4a:93:71:90:b1:15:63:
82:46:50:4a:d7:31:a3:a1:0c:a9:01:7f:83:cf:8c:
c1:66:73:1e:00:71:18:05:6b:10:fa:9e:f7:39:3f:
79:66:82:43:bb:90:b3:36:ae:c6:54:76:c4:a5:15:
ef:b9:68:0f:f1:84:d0:77:1f:2f:92:b6:68:7e:42:
08:80:9c:8f:44:b8:e9:87:71:82:08:f5:ac:18:ec:
76:af:f8:a0:cf:4f:0d:9d:2b:0f:c1:4d:1a:10:ab:
68:0a:73:58:89:be:47:14:2a:bc:53:98:2b:86:8b:
bf:bb:91:68:71:97:a3:86:8f:e4:77:47:85:30:d1:
ef:c1:bd:c5:04:15:2d:0f:50:b3:ff:85:61:98:b2:
3f:79:a8:65:ea:ba:3c:6f:2c:6c:07:c1:df:4a:7a:
9c:46:de:f6:08:ec:73:8b:da:d8:76:3c:24:0e:41:
ca:47:5f:38:25:58:df:4c:25:e0:76:5c:40:59:77:
5f:34:a9:a6:f1:9e:8d:5f:51:03:23:6a:0a:e2:86:
c1:b7:e7:60:74:3e:c2:46:99:f9:aa:68:45:97:95:
6f:ff:cc:b9:e1:2a:66:45:49:c7:6e:18:8c:41:f0:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3E:C3:A4:D7:61:3C:87:12:71:8F:26:7F:42:97:02:1E:AF:25:D5
X509v3 Authority Key Identifier:
keyid:05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:44:a8:a0:65:cd:dd:68:cb:4f:17:41:49:39:17:60:8d:66:
7c:d2:61:be:4b:ff:0f:f6:97:6f:8c:ae:7b:5a:91:65:aa:0e:
7c:98:c5:84:71:a0:ca:be:7c:df:32:10:40:7c:9e:b9:38:c7:
59:47:f3:d5:4d:c8:6f:22:a3:d3:23:db:fa:bb:e4:a5:c2:0e:
40:16:b5:03:00:e4:cf:4b:93:9d:92:72:ef:0e:87:e2:4f:8c:
2c:b2:a2:c9:ae:cd:8e:84:73:77:e6:86:8f:d4:d5:3f:ef:f4:
00:9d:d4:86:74:b8:bf:ca:54:74:d2:e9:05:5f:ad:d6:c5:c0:
5c:17:6d:e2:e2:62:83:e2:33:82:7f:48:35:82:92:9b:c9:38:
35:49:85:89:91:a1:69:8b:91:c2:e8:84:7f:32:96:f3:9e:07:
3e:cd:3e:4f:be:36:f6:75:98:84:3c:9e:21:cf:01:10:33:da:
22:28:31:fa:0c:29:d9:c6:80:d1:d3:53:4e:a9:04:f2:90:c7:
e3:08:d7:08:6d:20:43:e7:ad:22:f2:0a:36:46:1d:35:f7:a2:
b6:7c:dc:8c:de:c7:c7:c8:ee:48:51:49:5d:a7:1c:ad:a9:cc:
3b:f4:3e:c0:78:b2:b3:cb:6c:9f:c2:4c:38:18:80:d1:dd:58:
a5:69:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:19:20 2026 by rpki-client