Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: iPd25YPzGHzEx9QqzkLY8ijfBaxxPfgkjqWC4gVlZJs=
Subject key identifier: C5:DC:7E:A9:ED:F5:8A:CE:06:47:89:FF:6E:7C:C6:12:1C:E1:11:A6
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 019D992B021CBDC7A926ECC0621F8EBC53C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 1135
Signing time: Fri 17 Apr 2026 02:00:25 +0000
Manifest this update: Fri 17 Apr 2026 02:00:25 +0000
Manifest next update: Sat 18 Apr 2026 02:00:25 +0000
Files and hashes: 1: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: ko723D1r+QoZ4DLwy9saiUDtqgCI2/Yxk0y5GMtGb0o=)
2: egKdfoe4jr_OcoA2zw7t88jvhNw.roa (hash: Rm9ZrDiXC3MyZptxhCKpvW8pxI8d9wrZAzUEIDnaY8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:02:1c:bd:c7:a9:26:ec:c0:62:1f:8e:bc:53:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Apr 17 02:00:25 2026 GMT
Not After : Apr 18 02:00:25 2026 GMT
Subject: CN=c5dc7ea9edf58ace064789ff6e7cc6121ce111a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:75:28:c2:8a:e3:6e:c0:3a:ed:a1:d7:11:
1b:24:5c:9e:c2:fb:ad:bc:24:d6:e9:d8:b9:f5:f5:
54:af:28:62:d3:4b:d9:71:90:c0:33:79:7c:cd:d3:
a7:5d:09:2d:64:55:e9:5a:22:de:bb:d9:e9:1e:f8:
af:c1:98:34:40:c7:c9:6d:28:e1:6e:3f:1f:73:bc:
ce:22:a8:41:79:d0:1b:9d:48:77:0e:44:8f:f0:d1:
47:7e:e1:3d:a5:b8:98:c8:93:ce:27:ce:3a:65:a5:
e8:11:55:15:92:09:73:ed:a7:d9:ec:61:f0:d3:22:
34:76:dd:82:c0:de:7a:52:28:db:d6:7d:3e:44:6b:
37:92:c8:e5:68:b7:d9:14:be:a7:86:18:ae:75:7d:
f1:a9:83:57:66:f7:21:cd:8c:62:4a:f4:71:a8:de:
aa:e3:d4:d4:9c:fd:0d:79:8b:f9:7e:d6:0f:8f:40:
5c:9f:19:eb:38:a7:7d:5a:65:5c:29:8a:1b:8a:3b:
a0:25:71:68:23:ba:d5:a8:e4:f2:8a:3a:d8:5b:fa:
f2:e5:45:3d:52:87:1d:13:0e:bf:1c:be:23:d5:97:
8e:5a:b6:54:2c:7f:95:f6:fb:c3:de:ec:c7:5b:87:
42:30:b6:06:33:35:5c:33:12:c7:3e:33:dc:a3:26:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DC:7E:A9:ED:F5:8A:CE:06:47:89:FF:6E:7C:C6:12:1C:E1:11:A6
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e5:c8:05:4e:a1:c8:9b:67:eb:45:2a:86:ee:a3:f1:e8:6c:
fb:3c:4c:7c:f5:4b:71:0f:fe:3d:05:73:df:b3:40:43:f6:2c:
a6:7b:51:52:a3:92:8f:06:ef:29:a4:a4:0f:c8:40:7c:e4:48:
9d:54:3c:49:0a:41:ee:60:54:c1:70:c5:af:26:e9:77:f6:d2:
0d:17:5e:db:b1:36:23:3a:ea:db:c2:75:e0:06:39:18:52:f2:
a2:6e:6f:22:4a:f6:51:26:ed:d6:24:b0:57:27:ab:0e:b0:95:
3d:d3:3f:cf:08:2a:03:3e:29:00:12:ee:eb:1d:44:ca:64:94:
c4:b0:0c:86:b3:8d:a8:4c:e7:78:f6:a2:41:1b:b2:a6:c3:76:
a4:76:08:bd:50:98:a0:2d:ec:0f:03:29:f8:e0:8f:c4:77:ce:
95:8c:39:26:c5:b0:e7:5a:d4:42:e0:96:3d:54:da:f5:85:5d:
49:c8:c1:8a:06:59:ce:b1:f1:35:30:08:dd:d5:a3:ce:82:36:
ca:87:ee:d0:cc:b6:3e:c5:1d:40:f3:37:6e:be:15:49:43:52:
27:d6:0b:69:66:67:81:da:06:e7:a2:74:eb:c3:45:ba:8f:66:
43:5c:55:fa:37:9e:ce:1c:c2:e4:34:93:18:44:b5:77:d9:d3:
01:3e:08:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:17:57 2026 by rpki-client