
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: ym3B0o7TpDv92Kv9gLrBj3TsKcD2roluH+gdL/m5ETk=
Subject key identifier: 08:CD:F1:B1:36:CE:80:B1:DE:A1:2F:90:4B:AD:65:0A:F4:38:7A:41
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 019D9AE2F439CC4F667B34D1CAE808A50832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 0B81
Signing time: Fri 17 Apr 2026 10:00:57 +0000
Manifest this update: Fri 17 Apr 2026 10:00:57 +0000
Manifest next update: Sat 18 Apr 2026 10:00:57 +0000
Files and hashes: 1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: 534TfpdhVDZNAjoPEwix2IZAs28oT30gQuTdrQaixKE=)
2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:f4:39:cc:4f:66:7b:34:d1:ca:e8:08:a5:08:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Apr 17 10:00:57 2026 GMT
Not After : Apr 18 10:00:57 2026 GMT
Subject: CN=08cdf1b136ce80b1dea12f904bad650af4387a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:f3:e9:ac:91:a7:80:69:a6:57:3b:22:30:
e5:7e:fa:c8:bc:fa:6b:59:81:9a:f7:bb:23:f0:2a:
50:ad:29:cb:2c:be:f1:20:84:d3:5b:5d:1b:f6:c9:
a1:17:f2:50:86:c5:67:fc:51:91:58:87:9a:dd:35:
9a:b4:09:cc:13:80:38:5a:48:73:26:30:16:d3:e3:
d8:36:53:7f:aa:fb:f4:e9:28:c5:e2:5b:2e:52:c1:
31:da:3f:16:65:20:c3:a1:8a:ab:e8:76:fb:9f:af:
e8:3b:a4:cf:c2:4c:6e:26:6f:6f:3c:75:96:83:6b:
e4:9b:dd:20:0f:00:bc:9b:f7:31:b4:01:f8:d3:2d:
ca:bc:70:c0:5d:26:0a:3e:3b:e1:7f:7a:a9:ad:74:
24:51:d8:bc:52:d1:96:67:06:f3:4b:ae:02:33:76:
f5:8a:0e:a6:64:c1:df:1b:da:27:41:d2:45:2c:8c:
aa:16:ab:b4:4d:21:c5:37:fb:ab:ea:56:29:84:51:
5e:cb:e4:a0:0c:54:f4:70:38:ea:82:e0:75:57:bb:
2b:dd:2e:9e:77:fa:b0:a9:ca:6a:f1:77:ce:b8:bc:
93:c5:54:12:78:b0:93:ff:a8:14:13:33:84:0c:3d:
8a:d8:5a:3b:11:aa:f8:a6:5c:68:93:6b:5a:55:28:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CD:F1:B1:36:CE:80:B1:DE:A1:2F:90:4B:AD:65:0A:F4:38:7A:41
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:00:cd:a4:9b:1b:f9:c3:b4:ee:86:3d:21:49:dd:e8:cf:1c:
f2:1a:2f:1b:38:76:d9:c7:32:69:35:b2:33:e3:22:23:a3:20:
8d:49:70:2b:e1:c0:e9:bc:5b:83:d8:cc:ab:73:78:12:7b:e4:
00:78:f7:2d:aa:66:f9:b7:82:3a:e5:21:b8:78:e3:35:1d:be:
7c:09:e7:7d:cf:1f:a4:82:0c:ee:14:63:29:ec:3d:56:91:6c:
b7:57:c5:9a:50:df:1b:8e:80:e9:08:f2:c0:b9:14:fa:f2:ce:
d3:38:67:10:f8:88:07:cf:3f:8d:14:63:3a:ac:60:10:35:0f:
21:42:77:14:4a:00:40:29:b9:0f:f7:22:de:97:37:3b:b7:60:
2c:44:08:5c:3b:ec:fe:a0:8b:00:4b:ac:92:78:d4:01:23:33:
08:9d:d9:15:ca:c7:2a:63:1f:43:8a:3e:33:b0:e9:35:74:38:
0f:4d:30:ee:c0:31:1a:6d:af:6c:e7:93:cd:b8:f0:49:11:20:
02:59:24:fe:e6:f5:c6:c9:d7:3e:02:8f:66:f6:7d:4d:1c:5e:
1c:1c:e7:d4:c4:f4:27:ae:c9:09:e8:c5:0c:97:e3:c2:11:9b:
21:a4:91:0e:2c:27:3e:93:4e:ab:87:6c:8c:96:b1:74:93:01:
4a:b4:27:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:27 2026 by rpki-client