Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: CNRV97NwrCYk3Wk+joHON1hTIUlcySNpp3HHDyZue+U=
Subject key identifier: CE:0B:EC:0B:26:C4:3E:4D:44:1D:83:65:9C:13:06:31:53:E0:FB:52
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 01A0C7B3745BED65C323367CBB1DFD3FDC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0CA6
Signing time: Tue 22 Sep 2026 06:00:21 +0000
Manifest this update: Tue 22 Sep 2026 06:00:21 +0000
Manifest next update: Wed 23 Sep 2026 06:00:21 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: /PAq8WoD3fNBONAdMWYgCHpi1e1Ce4/zx8yG5wAe8Qo=)
2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:74:5b:ed:65:c3:23:36:7c:bb:1d:fd:3f:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Sep 22 06:00:21 2026 GMT
Not After : Sep 23 06:00:21 2026 GMT
Subject: CN=ce0bec0b26c43e4d441d83659c13063153e0fb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:77:6a:13:af:f2:44:d2:8a:db:87:71:5e:
6a:67:30:cb:59:40:3c:4c:ae:d3:2a:a6:49:77:10:
61:e0:02:68:02:91:8f:48:04:ba:c2:dc:e3:bb:7e:
5e:30:cc:9e:d8:60:68:1a:2a:22:72:42:a8:bd:dc:
ce:83:13:00:71:f2:ea:a0:73:e0:0d:1b:eb:b3:eb:
81:a4:10:41:22:b4:25:55:d6:db:a7:11:3e:e8:98:
4a:9f:22:45:ea:8a:75:0d:da:9c:4f:be:a2:13:cd:
70:f6:1c:51:65:88:e0:2c:62:64:12:63:92:a7:8b:
e0:5a:22:9a:cd:08:aa:62:33:32:56:f2:80:44:f0:
c2:e7:e2:d6:c0:5e:63:e1:5b:9b:10:da:03:7d:10:
5f:3b:91:7b:d9:86:bb:74:45:40:18:88:6a:9e:cc:
b9:ab:9e:55:7a:9d:7a:4e:53:dd:9c:14:97:aa:54:
8e:55:8f:71:4c:74:e3:8b:04:1c:50:1a:8b:06:0b:
85:2c:3c:05:3b:75:68:51:0a:f0:29:dd:e5:89:19:
ed:30:83:94:e3:c5:ac:85:0c:f9:b0:ec:63:ab:85:
95:49:ac:df:a5:59:77:4e:78:e3:46:4c:50:2c:4e:
ea:69:4a:34:09:70:15:a4:cf:48:26:2e:95:84:7d:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:EC:0B:26:C4:3E:4D:44:1D:83:65:9C:13:06:31:53:E0:FB:52
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3b:39:6a:85:8d:93:54:cf:d9:47:37:46:f4:e6:7d:70:52:
72:09:e0:0a:73:3f:64:3a:e9:5b:59:25:d7:0f:f8:a3:71:bb:
e9:13:4a:a5:a6:59:cc:b7:cc:46:fa:3c:00:8c:d1:10:9b:57:
e4:16:e9:53:11:4f:9e:04:8b:ec:44:39:93:0c:82:af:7f:7c:
2f:5b:8c:42:60:60:6e:af:b2:02:cc:73:39:43:33:3c:72:57:
01:7b:75:aa:77:38:bb:62:ae:44:a6:da:75:3d:7c:d7:70:ed:
06:57:91:94:d7:ea:16:31:71:0c:ef:95:9f:7b:af:f7:a7:63:
4e:d3:35:f7:04:c7:66:5b:db:e3:81:39:7d:93:7f:b5:76:29:
22:64:96:0f:3d:fe:94:d1:8e:90:7c:68:92:b4:62:45:2a:09:
63:95:92:0e:1c:78:2d:57:4d:7f:60:1e:e0:6b:0d:1c:58:dc:
58:0e:9e:f1:a1:af:ff:b5:c4:77:9c:70:2f:62:f8:d7:f3:22:
7a:51:9d:25:67:6d:98:a1:75:f6:2b:9f:4a:9c:38:7f:e4:90:
4e:1e:65:58:3c:a7:ba:89:ce:65:ff:87:2a:48:45:8f:ac:52:
b4:41:3d:af:fe:6a:84:11:41:ef:6d:b0:81:34:80:42:a7:fa:
67:39:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:45:11 2026 by rpki-client