Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: 1QqTzWXF+2FBthcWadeRIw+Ux6mrrIHmb4IXPUmv+yw=
Subject key identifier: BF:A6:B3:B8:EC:A7:93:42:D2:4A:15:C0:DA:05:4F:FA:40:2D:5D:35
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 01A0C4449FA6808FDA0900EE735AD8E767F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 12D9
Signing time: Mon 21 Sep 2026 14:00:26 +0000
Manifest this update: Mon 21 Sep 2026 14:00:26 +0000
Manifest next update: Tue 22 Sep 2026 14:00:26 +0000
Files and hashes: 1: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: NbVRyFXgWbFKstYPplJ5VTi1HSuOt7KKmL9eppvD79Y=)
2: egKdfoe4jr_OcoA2zw7t88jvhNw.roa (hash: Rm9ZrDiXC3MyZptxhCKpvW8pxI8d9wrZAzUEIDnaY8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:9f:a6:80:8f:da:09:00:ee:73:5a:d8:e7:67:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Sep 21 14:00:26 2026 GMT
Not After : Sep 22 14:00:26 2026 GMT
Subject: CN=bfa6b3b8eca79342d24a15c0da054ffa402d5d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:6e:55:8a:af:e3:b1:dc:36:2c:2f:09:eb:
5c:0c:73:9d:03:33:ce:87:3b:b3:39:81:de:81:7e:
8b:a9:5e:b9:d8:07:40:50:47:02:23:9a:9f:d7:80:
6e:ab:ca:39:cf:16:02:fc:a7:cf:2f:2c:e9:66:e4:
fb:98:95:ba:6f:0f:fa:a1:65:a5:d8:41:8e:ab:80:
a3:f4:fa:d6:5a:37:1c:7e:c0:19:fd:e3:6b:60:64:
1c:91:ca:5c:41:cc:3f:fb:ee:8e:5f:f0:8a:96:31:
60:aa:83:8c:b0:88:1f:97:cd:0f:24:42:c3:a1:9b:
c8:bd:f9:a6:61:f3:81:78:bb:f8:7a:18:c6:06:63:
a6:44:f3:cd:72:d5:8b:c8:d9:f1:7b:73:e5:0b:78:
a5:e3:90:87:56:ae:9f:57:f9:74:b0:72:03:a8:45:
69:18:db:26:e1:31:b4:3a:7a:cf:65:5f:c1:0c:2b:
d7:44:e3:89:02:39:34:48:45:08:fd:9a:2f:c3:a1:
d3:d5:e0:26:c6:68:40:35:e1:60:24:3f:74:58:c5:
9f:f9:b4:52:da:3e:91:96:5d:36:e2:aa:fa:4c:94:
a6:ac:cf:9d:68:b1:1c:42:98:d7:49:ee:b3:45:70:
04:54:87:ed:52:fb:ac:c0:a0:fa:12:cd:0d:95:32:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A6:B3:B8:EC:A7:93:42:D2:4A:15:C0:DA:05:4F:FA:40:2D:5D:35
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cd:f3:5e:10:e9:d9:67:db:98:46:18:f0:43:3a:8e:63:84:
0f:31:9a:5b:5a:47:c8:a2:83:ac:91:3a:33:5c:c7:bf:a0:ad:
24:42:cd:bb:ac:b8:83:e0:2a:35:75:02:0f:3c:bf:83:4c:80:
55:58:66:15:cb:ed:40:83:26:00:f1:aa:25:f6:77:86:65:ee:
ab:74:3b:7d:ca:6e:53:74:c9:b7:fe:37:a9:d8:0a:b0:1b:db:
18:be:af:3a:9f:89:69:87:27:1e:24:46:fa:b6:01:04:13:d3:
10:99:57:62:3a:8b:a2:cb:90:1d:e5:68:a0:0b:07:e6:7a:3d:
4c:40:ea:bb:45:2e:2a:2e:85:d8:2d:2c:87:26:c1:b5:aa:81:
a2:86:cf:6a:0d:f4:44:74:b6:19:d6:19:9f:26:9e:63:00:18:
aa:3f:c1:a1:9b:0a:41:f3:d5:69:3b:01:e1:4e:e4:f9:84:9e:
3b:80:99:82:de:29:ec:e7:73:74:4f:df:03:77:52:ae:ce:69:
88:05:b6:4d:a1:85:40:2a:55:5e:76:ec:f6:a4:bc:6a:1f:ad:
5e:2b:f6:7e:ff:1b:0d:3f:ee:f7:16:0d:c4:39:50:df:5d:ff:
97:e9:4b:36:6a:7d:61:f5:35:4e:34:69:66:af:d3:78:fd:c6:
e3:4c:a9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:15:52 2026 by rpki-client