Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File: BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier: 3gOpG1An6/zr91SYCk5nbAFF9+K50TvsWIuMMG1vEdg=
Subject key identifier: EC:60:89:59:A4:1E:83:9F:DE:9C:9F:8D:36:97:A4:41:14:49:CF:4B
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 019CAA8FDF56EC4AC524B95C1F9EE5C9A2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number: 13DD
Signing time: Sun 01 Mar 2026 18:01:21 +0000
Manifest this update: Sun 01 Mar 2026 18:01:21 +0000
Manifest next update: Mon 02 Mar 2026 18:01:21 +0000
Files and hashes: 1: 64ihED3jNS0XaSeuUSeyFg_2bZM.roa (hash: /BfCWPD85MIAwhiqpxCqxKLQ9kOdpzvT6SrltrLnWac=)
2: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: 9VpHX9o2ym46IGuPn/T17rhsCtS4knRSIUyACrTkDAI=)
3: U_IVMG7bQBnJVGDLyXYBpWOHB2A.roa (hash: q/ZezPb+HqhfJjhS/MThIaBJugpttbjehqzX0ZM2VRQ=)
4: Y28x5IzUI42VFOBvke09KYzr7_U.roa (hash: hhVaUfCtGXTnfymIDdR8UxHA+TnCtopLvOzuoWmW+28=)
5: bLR2p3__awZBusTPsasm4YiUzOA.roa (hash: kbNkczFSH4sSNGYoqWKL5gjy1l744pKUP8ECezyOvL0=)
6: rJY5TcCiuq04IdP2xEDQUAGD_Vc.roa (hash: Rb/TbhBXQKzjnpKo+twePuPCv4XuT1hR1nvFOWeVlNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:df:56:ec:4a:c5:24:b9:5c:1f:9e:e5:c9:a2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Mar 1 18:01:21 2026 GMT
Not After : Mar 2 18:01:21 2026 GMT
Subject: CN=ec608959a41e839fde9c9f8d3697a4411449cf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:2f:8f:20:a9:4b:21:11:1c:ca:ca:fc:2d:
5d:65:02:1f:75:d7:7e:c6:8d:19:57:f2:42:d1:32:
96:55:0e:31:b8:41:0c:84:29:3e:97:e4:70:e3:05:
70:0d:70:bf:01:fb:0a:83:27:10:04:86:a8:6e:8d:
be:74:a5:58:f7:0d:f5:34:d4:30:2f:3e:27:4c:da:
8c:2a:25:0c:20:94:6d:db:d3:7c:9a:bd:8a:68:79:
de:85:16:1b:f3:e1:78:cf:27:38:ef:95:c2:aa:d0:
dd:3e:1e:2b:c5:eb:54:18:70:ad:a2:16:c5:f2:b8:
96:39:0f:e1:4a:40:df:23:73:48:0d:b2:5c:e9:9e:
cd:16:97:cb:d2:51:e9:7c:ef:4b:a4:ea:16:77:fd:
52:81:e7:93:99:68:78:52:b2:6d:8e:d5:e0:b6:3b:
ae:2a:04:65:d9:c6:d7:a7:b3:a3:df:b6:92:29:c0:
e8:be:42:54:00:36:52:0d:87:1d:4d:d3:1b:57:e6:
65:86:a6:2e:f8:09:38:5c:01:2a:f8:b5:59:a2:df:
37:8e:80:35:c7:24:95:50:4e:2e:17:e5:01:0f:ae:
91:1b:fb:58:1b:e2:9c:1f:47:d5:36:b9:a6:bd:e7:
8f:03:da:bd:5b:d1:1d:87:f7:d9:a6:8a:ae:2d:d4:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:60:89:59:A4:1E:83:9F:DE:9C:9F:8D:36:97:A4:41:14:49:CF:4B
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6c:97:49:e6:65:46:6e:43:9f:21:e6:90:6e:40:bc:c7:b9:
0a:d2:f2:c5:52:be:01:53:06:ab:93:4c:83:05:d9:aa:d9:08:
be:5d:71:a8:3e:d9:34:42:d5:56:78:4a:3b:fb:35:04:37:90:
af:9c:c9:ed:44:fe:30:bc:22:71:a2:2f:d9:bb:9e:35:a1:00:
0e:ea:95:3d:0f:f4:7e:e9:02:c6:fb:19:7e:b8:98:64:19:05:
b8:0d:2f:fe:36:9e:03:eb:ab:3e:54:b5:fd:2f:8d:bf:ec:33:
9e:f9:61:99:b1:ac:be:9a:72:d6:87:71:98:81:54:20:83:d7:
cb:22:3b:cb:04:c6:1c:df:5d:53:5c:40:c5:88:39:15:fb:73:
58:f9:f4:d3:7f:d5:0b:0a:42:02:80:7f:4a:29:ba:9b:81:0a:
c8:96:d3:b6:cc:e4:5a:ca:d4:64:c3:0b:b8:5b:8e:dc:b3:77:
16:00:82:8b:15:8e:a2:bd:76:8e:e5:96:14:0d:12:58:04:b0:
f3:32:6f:5d:09:5d:b2:d8:d4:42:45:74:08:38:76:8a:88:fd:
14:06:52:7b:b9:fc:cc:41:16:58:d0:64:f0:f2:1e:09:cc:0a:
77:ea:86:dd:29:ec:09:5d:70:d2:a3:48:40:15:b9:c0:f8:c6:
3a:6a:49:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:46 2026 by rpki-client