Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: HY/GB5D3QZb6/knroOPpa3kD4AQPAih6+GuZRONnO7E=
Subject key identifier: 85:F6:E3:86:B2:08:7F:07:B6:45:DF:D0:2D:16:EC:29:C0:90:C4:01
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 01A0EDE6CEA33850CA5700437726B6858224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 0B62
Signing time: Tue 29 Sep 2026 16:02:01 +0000
Manifest this update: Tue 29 Sep 2026 16:02:01 +0000
Manifest next update: Wed 30 Sep 2026 16:02:01 +0000
Files and hashes: 1: IfGCpj85Q4o-UGyQ31NliYn-gNM.roa (hash: x5pzaYdpKRd4mBuwlpRlCZ/BZdgSlAglcVpLNOFR9GU=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: 7QDfCWFd2NEe1PI/J1c0hRvz5WEeiZGrlexxFtA9deU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:ce:a3:38:50:ca:57:00:43:77:26:b6:85:82:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Sep 29 16:02:01 2026 GMT
Not After : Sep 30 16:02:01 2026 GMT
Subject: CN=85f6e386b2087f07b645dfd02d16ec29c090c401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:f1:e2:bc:43:04:1e:d8:5f:a3:c2:63:42:
68:74:09:0a:1c:e6:1f:f0:f3:ff:c8:37:66:46:b1:
7f:ac:53:68:f5:34:19:5b:84:f1:85:5e:c6:0c:87:
75:ea:b6:f4:31:7a:ad:db:d3:35:78:e9:c9:e1:94:
0e:6d:52:19:25:e6:6c:d4:ac:cf:79:42:de:55:b7:
67:34:24:bb:47:fc:6e:c5:9b:5f:72:01:d8:0d:35:
70:99:5f:3d:8c:67:e9:3e:e5:f7:c4:4c:2a:80:30:
95:0e:0d:ff:fa:a4:93:86:7d:63:23:14:8f:8d:8f:
e7:9f:89:2a:d2:d8:d9:50:41:2e:2f:13:4b:0f:f2:
21:44:16:a5:43:be:7f:91:8e:b2:0b:80:b1:be:1b:
cc:61:81:47:78:44:c0:a7:a2:ca:6d:38:7c:44:58:
ef:8f:e9:19:4c:d0:04:b1:8c:b2:7c:7c:a8:35:62:
9b:c1:57:8d:bc:28:96:a4:94:a1:f8:44:34:26:61:
d3:64:d2:66:80:6b:46:c5:48:ab:32:c8:71:b5:e4:
97:87:7d:1d:d1:55:b5:bd:42:67:10:7a:95:86:b1:
95:6b:27:93:63:2e:ae:9c:af:49:58:ac:ce:6c:d0:
42:0d:e9:70:7b:33:5d:31:e9:ad:7c:37:e3:ed:21:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:E3:86:B2:08:7F:07:B6:45:DF:D0:2D:16:EC:29:C0:90:C4:01
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ca:2c:e2:8a:30:00:4e:a9:5c:df:91:ed:c3:43:64:20:aa:
11:aa:6f:88:51:f2:6a:4a:b7:6a:93:ce:16:4a:f7:b7:70:4b:
65:b6:ef:3d:f3:79:5e:ff:24:d1:da:dc:c6:82:11:48:c2:60:
18:c2:a9:53:c6:74:e0:a0:ab:1a:44:6e:21:27:4c:bc:9b:74:
f6:94:5c:c1:cb:95:3c:1c:17:00:e2:10:01:e7:74:f4:8a:29:
fc:56:75:ff:30:fc:1f:3d:94:a8:f5:b5:f6:13:14:d2:80:5c:
65:96:8a:39:1c:48:5f:9d:ca:0d:19:cf:40:90:38:18:6c:1a:
c9:91:49:17:b8:b3:7a:35:56:88:a8:55:57:74:44:3c:4b:16:
0b:1a:e2:51:ac:41:20:7e:a3:18:5b:da:7f:4c:e1:b5:bf:4c:
de:d6:6b:5c:e6:b4:6e:6f:94:7e:f8:0e:36:e2:13:a6:33:b4:
1d:69:bd:6f:54:ff:86:d5:2c:30:2d:21:74:88:0a:28:e4:a4:
4d:04:69:84:4a:d4:da:3c:e1:05:d0:e6:2e:49:21:85:08:5a:
9e:84:06:66:86:5c:8d:0c:5f:a0:47:8a:cd:5d:da:a2:78:61:
52:c5:64:d3:65:fb:1a:da:59:61:25:f0:22:55:00:66:33:07:
e6:16:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:19:33 2026 by rpki-client