Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: dpxrdD907JUYC7hVmzWFvZvyhYcEsWAguNMgrTqdxs8=
Subject key identifier: CC:23:EA:BC:B3:10:A2:99:B1:F7:D7:03:7B:B7:C8:2E:33:DD:FF:98
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019CAB3478F267C4BEFDAF8FAB685FA5EBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0A85
Signing time: Sun 01 Mar 2026 21:01:08 +0000
Manifest this update: Sun 01 Mar 2026 21:01:08 +0000
Manifest next update: Mon 02 Mar 2026 21:01:08 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: IhshyvyoupusNO66qGEv2MXLebO+wVG6p+Q7qshVZ6E=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:78:f2:67:c4:be:fd:af:8f:ab:68:5f:a5:eb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Mar 1 21:01:08 2026 GMT
Not After : Mar 2 21:01:08 2026 GMT
Subject: CN=cc23eabcb310a299b1f7d7037bb7c82e33ddff98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:40:cf:7b:8c:63:7a:66:25:4d:1c:43:ae:
6a:b5:e2:39:68:21:26:54:db:95:93:dd:6a:7f:99:
35:8d:87:18:7e:fb:b2:73:44:fc:32:8a:de:73:9e:
01:cf:1c:32:57:fc:c6:1f:57:1a:cb:75:aa:3a:fe:
c5:8e:50:17:1f:5f:72:94:18:39:30:f2:5c:f4:10:
5b:6c:6d:74:15:dc:20:20:90:2e:01:5f:3a:60:2c:
a5:17:03:e2:22:37:41:9f:62:c1:f4:9f:d2:a4:4e:
c6:a0:86:5b:a2:92:8b:34:ff:9c:64:4c:ce:20:a6:
01:4c:b3:bd:e1:6f:25:c8:af:8c:8a:3f:c1:ae:f8:
23:4b:73:84:e2:6f:7d:32:f3:3d:b6:1f:44:a9:40:
99:26:64:af:a5:9a:74:c3:b4:9d:2e:e7:a3:42:47:
2b:dd:7b:84:68:4a:57:39:71:42:8c:19:f1:e4:4a:
4f:9b:10:23:d7:67:2b:1e:e2:0a:56:b1:4b:41:c7:
95:68:3b:d2:7b:41:79:2e:8e:de:da:d8:9e:6f:10:
e5:c4:c1:33:dc:b7:53:b0:63:29:0e:4f:93:c4:c4:
38:b2:4f:ac:27:aa:18:e2:d6:d3:17:5d:ac:97:87:
4d:09:a0:d4:b5:aa:3a:af:40:dc:0f:ee:57:76:60:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:EA:BC:B3:10:A2:99:B1:F7:D7:03:7B:B7:C8:2E:33:DD:FF:98
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:17:8b:39:86:db:d3:41:4a:c0:66:6d:de:d9:d7:8c:be:
5a:93:21:29:0c:03:a0:4d:5d:66:0b:5b:48:93:e6:ff:c4:f2:
40:d0:9d:e2:36:e1:42:17:28:20:cb:7f:1d:7e:d0:a7:36:3b:
4a:8d:b1:bf:b9:41:70:de:56:b7:15:86:60:af:6c:26:fc:4c:
73:32:d9:35:89:e8:39:fe:e0:02:06:48:57:2b:5d:0d:95:29:
0a:1e:0a:b0:1a:d4:7d:71:eb:08:3e:05:ba:4c:8f:54:af:fd:
cb:58:34:99:49:c2:7b:bc:ad:ad:27:c8:66:8b:65:7a:4e:7c:
d9:3d:90:eb:0b:a8:e2:0d:d5:0e:3c:2d:1b:0a:ad:90:d0:10:
2e:52:56:8c:fb:8b:39:a2:91:ee:29:8f:2c:4c:9e:b2:b0:19:
9a:a4:e4:ef:02:e4:b3:10:98:87:76:58:f4:5d:e0:b3:c6:e5:
1d:af:ab:14:b7:3b:ba:51:9a:8d:73:c2:6b:db:50:0a:fc:34:
83:6e:5b:56:fb:23:a2:92:40:c4:87:e4:6d:b8:e7:2c:0b:d4:
4c:64:9a:73:78:11:db:3d:49:74:27:46:7a:92:ee:3f:15:f6:
19:81:d9:b9:57:9b:2e:b6:29:e3:cf:c5:4d:2f:f5:e2:d6:53:
9d:f4:9f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:26 2026 by rpki-client