Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: 6mDC3z/15ql2aISiyUxBdp5r/f4S3aVG8Xkn55owk8A=
Subject key identifier: 4E:64:10:1D:66:8B:92:BC:BB:F9:CD:20:BC:3E:B8:77:D8:4E:C1:12
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019D98BD5A8C25E5502377690F759277B973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0B00
Signing time: Fri 17 Apr 2026 00:00:39 +0000
Manifest this update: Fri 17 Apr 2026 00:00:39 +0000
Manifest next update: Sat 18 Apr 2026 00:00:39 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: oHcbxS36/dkrD854/R3avA0azsphrU5LqrJ6NRSoE0E=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:5a:8c:25:e5:50:23:77:69:0f:75:92:77:b9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Apr 17 00:00:39 2026 GMT
Not After : Apr 18 00:00:39 2026 GMT
Subject: CN=4e64101d668b92bcbbf9cd20bc3eb877d84ec112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:eb:f8:1b:b3:18:ca:61:0e:88:34:b8:a2:
ef:9e:5c:02:bc:01:e3:a2:48:cb:cf:58:3e:1e:85:
df:04:27:17:a2:5b:c7:68:fe:ad:42:db:98:34:93:
8d:3e:43:04:78:b3:76:5b:15:7d:13:d5:c7:1d:12:
68:2d:4a:ec:4e:de:27:30:61:58:85:80:56:c3:4e:
8e:ae:b9:bf:35:0f:37:82:9d:b6:b2:5e:91:2a:22:
aa:76:f7:13:db:97:10:64:a1:e5:3f:b4:df:16:96:
51:41:99:7b:8d:29:1b:d0:20:7c:d9:ed:e3:ff:41:
21:9e:6f:de:e1:28:7a:7f:a6:54:a8:2f:f3:64:ef:
2d:3a:06:53:14:f1:e5:78:10:ad:a1:19:88:c0:27:
93:ed:a6:b1:4d:25:f3:f6:68:36:27:59:2b:b0:93:
86:cb:c3:c3:ef:a2:42:92:4f:03:62:7f:29:e8:3a:
f0:0a:05:dc:fd:f3:ed:ed:3c:8a:dc:6f:af:0c:1b:
c3:1a:c9:6e:72:03:f9:0e:96:22:cf:bc:d9:a4:81:
30:c0:f2:1f:d1:7c:1c:70:2e:49:2c:f2:d9:b9:2a:
98:6a:65:37:e5:8d:5d:e3:8d:87:50:07:7a:68:83:
a3:62:f1:1a:7f:8b:81:ad:06:83:fc:50:14:f5:b8:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:10:1D:66:8B:92:BC:BB:F9:CD:20:BC:3E:B8:77:D8:4E:C1:12
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f9:88:68:4e:9d:06:30:1f:48:6f:d3:9e:cb:86:81:45:4d:
08:6a:16:29:c2:32:9f:2f:fd:a4:8c:8b:1b:b2:29:f4:61:76:
19:32:7b:2d:07:a6:24:aa:b0:67:f1:1b:bb:28:fc:a7:a3:e4:
3f:9c:f3:6a:83:06:44:98:5f:d2:b1:b2:0b:75:52:79:6e:d9:
37:63:7b:78:97:d4:9d:26:37:eb:c1:79:47:fd:36:74:69:eb:
7a:39:49:93:60:14:b8:f4:3b:25:18:2d:6f:76:59:a4:6d:d1:
6c:19:43:74:c4:d3:43:0f:50:37:a0:02:02:50:85:7f:0d:6b:
6e:51:6b:81:f1:5c:55:b3:1f:1e:a4:0c:c9:aa:12:3e:61:98:
cb:99:29:0c:58:2c:62:fb:09:a5:66:96:c6:b5:18:49:b6:7b:
1b:6c:bb:db:b3:55:bf:95:8e:16:21:01:57:49:bf:18:26:52:
e4:92:c8:bf:0a:7c:ff:81:9a:d9:fd:76:5a:d2:23:bc:b3:55:
0d:d5:e6:af:ba:5c:3c:fd:54:ad:b4:a1:72:6b:8d:8b:94:50:
9e:fd:f3:9f:27:d2:fc:7e:80:4e:6f:47:02:01:82:7c:66:93:
e7:8b:2b:32:34:34:68:2c:23:f5:1e:c3:30:09:fb:c1:95:7e:
40:2f:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:58:41 2026 by rpki-client