Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: 2Ydfe+w3xIip46+FGaO+Et2U3pzZUONzrxlflKmHCEY=
Subject key identifier: E2:F8:C9:77:A8:B6:8E:82:22:9E:82:6C:2A:DD:21:33:38:5B:5B:18
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 01A1268C1E240F5F6A3429EDAABD8B0C1833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 0D58
Signing time: Sat 10 Oct 2026 16:01:19 +0000
Manifest this update: Sat 10 Oct 2026 16:01:19 +0000
Manifest next update: Sun 11 Oct 2026 16:01:19 +0000
Files and hashes: 1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: /TTPLI5oLibSwTBn8D3FrZr3ioRerF7bRfdz+GItXuE=)
2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=)
3: qyjVELc45JYmEbnp6zF7rXu1pCo.roa (hash: TO8AQA0UCDarixWrhHiF3hZb2z3ocHdb/3E7YYctwOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:8c:1e:24:0f:5f:6a:34:29:ed:aa:bd:8b:0c:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Oct 10 16:01:19 2026 GMT
Not After : Oct 11 16:01:19 2026 GMT
Subject: CN=e2f8c977a8b68e82229e826c2add2133385b5b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:28:d9:b8:25:57:3a:cd:45:f5:53:fd:2d:
83:13:ff:8e:af:54:f2:9a:2c:8d:4b:0e:5f:67:9d:
4e:2a:06:6b:76:25:f0:4c:77:36:d4:03:ee:2e:92:
73:8a:ba:7c:67:f0:b7:c6:f4:e9:f3:59:95:ae:0a:
d5:0e:03:55:b3:7e:0d:97:ad:4e:27:04:68:5d:92:
59:7f:df:ec:7a:2c:45:80:4b:0c:e6:9b:1e:c0:59:
f8:7a:1c:1f:61:9c:19:e3:09:0b:c2:54:1f:ce:38:
7a:ae:22:7f:7a:7d:60:dd:29:85:50:21:18:44:68:
29:1f:4e:c1:b9:31:a9:17:f6:fa:54:b9:0d:70:21:
9f:d4:f5:4f:ca:c9:ec:c1:0c:90:7b:86:5e:68:b8:
aa:3e:a1:77:32:89:be:dc:7b:b7:56:b3:4c:b8:38:
0f:1e:44:d3:da:61:f1:39:d8:f5:aa:5c:31:59:ae:
1b:ea:c5:5f:c7:ad:97:75:31:cc:b4:14:67:f9:a1:
45:f6:7a:a1:71:26:3c:d3:fb:59:02:9a:b2:0e:e9:
ba:c7:3c:e0:d8:94:93:73:e3:c7:0a:cd:99:1f:9e:
b7:18:85:d0:42:05:cb:12:11:35:0c:e4:8e:0a:f2:
51:84:4d:7d:98:51:f7:89:c9:e0:56:29:08:c0:ac:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F8:C9:77:A8:B6:8E:82:22:9E:82:6C:2A:DD:21:33:38:5B:5B:18
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a6:63:ba:37:3c:2e:a3:93:9b:fa:ca:43:a9:d1:e7:5a:21:
e9:1b:d4:ab:0e:9b:f4:a2:5d:bb:d1:92:f5:67:15:2c:73:1a:
e3:e4:be:6b:bc:d3:5c:3f:b5:df:7b:3d:c7:0b:ea:e2:fe:9d:
ef:9b:cd:b4:49:df:5c:7f:d5:cb:72:8d:64:eb:ed:ed:58:85:
4d:85:2d:54:7a:f8:0c:7d:32:e6:71:bd:8f:59:32:b2:91:cb:
22:55:df:e0:a7:8b:f0:c1:73:97:8d:10:55:a7:3b:00:a2:fc:
c8:0e:1b:03:85:bc:a5:20:c4:bb:84:57:fd:14:58:90:c4:ff:
39:2a:bb:1a:07:ee:3b:39:9e:8c:16:72:3c:bc:f2:8e:dd:68:
3a:29:f1:3a:b1:ae:6a:6a:1b:0e:e4:8c:f5:45:6d:a7:be:ac:
50:63:e8:81:d5:ba:16:4f:85:62:36:b1:8f:2a:16:1a:17:df:
50:3f:da:49:ba:2a:ec:89:63:51:b1:21:1a:79:be:d7:5a:f9:
d8:f1:ee:2b:e4:e3:5b:bd:46:20:94:e0:b0:9d:ac:70:f5:06:
e0:cb:dc:3c:d4:ee:33:a2:52:9f:cb:4b:e7:b3:90:52:ed:1b:
51:c9:ea:98:34:ef:92:b2:1c:ad:63:c9:58:52:c3:e6:b8:c5:
02:ef:71:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEmjB4kD19qNCntqr2LDBgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm
MGMzNzYwHhcNMjYxMDEwMTYwMTE5WhcNMjYxMDExMTYwMTE5WjAzMTEwLwYDVQQD
EyhlMmY4Yzk3N2E4YjY4ZTgyMjI5ZTgyNmMyYWRkMjEzMzM4NWI1YjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyboo2bglVzrNRfVT/S2DE/+Or1Ty
miyNSw5fZ51OKgZrdiXwTHc21APuLpJzirp8Z/C3xvTp81mVrgrVDgNVs34Nl61O
JwRoXZJZf9/seixFgEsM5psewFn4ehwfYZwZ4wkLwlQfzjh6riJ/en1g3SmFUCEY
RGgpH07BuTGpF/b6VLkNcCGf1PVPysnswQyQe4ZeaLiqPqF3Mom+3Hu3VrNMuDgP
HkTT2mHxOdj1qlwxWa4b6sVfx62XdTHMtBRn+aFF9nqhcSY80/tZApqyDum6xzzg
2JSTc+PHCs2ZH563GIXQQgXLEhE1DOSOCvJRhE19mFH3icngVikIwKxqSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL4yXeoto6CIp6CbCrdITM4W1sYMB8GA1UdIwQY
MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct
ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk
LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKZjujc8
LqOTm/rKQ6nR51oh6RvUqw6b9KJdu9GS9WcVLHMa4+S+a7zTXD+133s9xwvq4v6d
75vNtEnfXH/Vy3KNZOvt7ViFTYUtVHr4DH0y5nG9j1kyspHLIlXf4KeL8MFzl40Q
Vac7AKL8yA4bA4W8pSDEu4RX/RRYkMT/OSq7GgfuOzmejBZyPLzyjt1oOinxOrGu
amobDuSM9UVtp76sUGPogdW6Fk+FYjaxjyoWGhffUD/aSboq7IljUbEhGnm+11r5
2PHuK+TjW71GIJTgsJ2scPUG4MvcPNTuM6JSn8tL57OQUu0bUcnqmDTvkrIcrWPJ
WFLD5rjFAu9xrw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 23:08:20 2026 by rpki-client