Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: nTJ0SBIln8pyS4OW17nnSCuOd4yIA7aaSdOu83zKF70=
Subject key identifier: 18:40:CD:75:84:B5:56:60:58:90:41:5F:01:BC:B7:31:13:AF:89:F8
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 019D265FE44E11AF6ED8D90CF7CD2FB1AC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 096D
Signing time: Wed 25 Mar 2026 19:01:51 +0000
Manifest this update: Wed 25 Mar 2026 19:01:51 +0000
Manifest next update: Thu 26 Mar 2026 19:01:51 +0000
Files and hashes: 1: IfGCpj85Q4o-UGyQ31NliYn-gNM.roa (hash: x5pzaYdpKRd4mBuwlpRlCZ/BZdgSlAglcVpLNOFR9GU=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: AMe1meklpud/GKPoLVoFC8WE05sCoOqqYtVxBQRVH7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e4:4e:11:af:6e:d8:d9:0c:f7:cd:2f:b1:ac:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Mar 25 19:01:51 2026 GMT
Not After : Mar 26 19:01:51 2026 GMT
Subject: CN=1840cd7584b556605890415f01bcb73113af89f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:1c:ba:32:f3:78:9f:5e:75:4d:ff:d0:b9:
53:3f:6f:6e:b5:e7:37:c6:a8:49:67:33:c1:a1:b3:
f4:a7:92:cf:a3:a9:ab:98:29:bc:e0:cc:99:f1:89:
6c:b1:c1:3c:90:3c:9a:c2:74:fe:07:c3:a2:3d:4a:
23:cb:3b:76:b8:fe:96:a5:43:a1:c0:51:98:35:83:
ab:85:45:b4:2d:17:38:15:0e:c0:b3:7f:5a:d9:a8:
8d:a9:ae:16:bb:c1:e3:27:15:81:66:75:e4:b9:dc:
cc:ac:25:f4:24:8a:28:04:96:a7:2d:2c:46:6c:d9:
92:b4:f5:33:db:bb:1d:ca:20:d4:f8:9f:4b:b7:65:
b1:63:15:49:12:b1:99:34:b6:53:82:26:22:2e:ad:
a1:c8:b9:18:64:28:27:a5:55:9a:e0:4e:3e:f3:e9:
90:e2:96:66:9e:c1:ca:ee:28:c3:e2:90:cc:dd:cb:
6a:1e:95:c9:d8:af:a1:74:2e:c5:f0:ef:0c:ac:b4:
4e:cd:84:ec:f0:29:5c:72:bc:5d:af:ca:c7:b0:63:
91:f5:2e:f0:22:b3:81:6f:b9:93:87:9f:2c:06:da:
3d:ac:99:d4:02:ea:9a:92:00:df:d8:f8:b6:e0:1d:
74:14:87:1c:07:64:57:ef:08:91:47:e9:ac:de:d5:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:40:CD:75:84:B5:56:60:58:90:41:5F:01:BC:B7:31:13:AF:89:F8
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:32:4b:3d:c7:37:d2:49:6c:4b:eb:d4:20:f5:d4:28:04:43:
6f:39:73:b4:8d:a8:76:f9:ce:4f:f9:e0:5c:e6:06:d4:20:66:
2b:17:f9:7a:d4:ef:13:39:d6:05:51:7b:21:49:db:59:20:13:
20:c5:1b:aa:41:72:1e:bc:bb:9b:1d:60:1e:9f:5d:fa:1f:1e:
b5:8b:eb:6d:7b:8a:56:6c:31:0b:9e:7b:9d:d9:85:0c:f0:3b:
a3:e7:41:dc:d8:cb:90:92:ac:88:ae:3f:e8:82:2d:82:72:21:
9e:f8:17:55:f1:3d:50:62:a2:3a:07:ff:3b:9a:11:d4:d1:dc:
8c:a9:4a:04:75:27:29:46:91:4e:b7:33:11:d0:b3:57:1f:93:
45:09:5e:5c:38:a4:bc:96:0c:0f:dd:c3:ca:c0:51:aa:ea:e5:
c9:14:3c:d4:7d:d7:11:41:d9:82:79:ab:68:fe:2f:97:fc:2c:
43:af:9d:8b:47:3d:a1:53:84:67:5c:86:88:93:25:fa:ec:55:
fc:75:ed:e6:64:fd:8a:ed:04:fe:f9:b7:9e:31:30:28:a4:a0:
7a:2c:2d:24:49:8e:29:b0:f6:61:3c:41:b3:eb:2f:36:4b:cd:
41:96:2e:25:c0:ea:e9:85:f5:a3:69:10:59:56:4d:e0:fc:24:
33:73:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:20:01 2026 by rpki-client