Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: oHCvd7x3/S9kyvuvIlPvpqRWXdFEalp7Z2BteJri+5s=
Subject key identifier: B5:A8:7A:B8:71:77:8A:D6:3C:4A:DF:A1:6D:FC:B1:BC:49:EB:47:6A
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019D9D75A0EDE72F6F282E2B8E6E5F5450C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0FA4
Signing time: Fri 17 Apr 2026 22:00:24 +0000
Manifest this update: Fri 17 Apr 2026 22:00:24 +0000
Manifest next update: Sat 18 Apr 2026 22:00:24 +0000
Files and hashes: 1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: sUJUQXdGOOlG0ZZNexIRTb9hCb3QGvC0d4PNs4/emfc=)
2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:a0:ed:e7:2f:6f:28:2e:2b:8e:6e:5f:54:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Apr 17 22:00:24 2026 GMT
Not After : Apr 18 22:00:24 2026 GMT
Subject: CN=b5a87ab871778ad63c4adfa16dfcb1bc49eb476a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:fc:a9:29:1b:e7:18:4b:0a:79:d5:d4:c8:
e5:c2:84:b6:ee:b6:a1:2c:9e:9d:86:0d:1a:c5:50:
a7:9f:8c:de:bd:69:55:50:36:98:5e:f3:12:b9:a9:
c3:01:f8:6f:cf:17:dc:e4:42:65:a9:53:3c:58:b5:
c5:b5:ba:d9:5a:6e:e2:78:1e:49:50:46:89:03:16:
a1:3f:6a:53:24:09:92:f8:ee:17:fb:70:ee:83:ff:
0f:d7:d6:0a:58:bc:f7:b9:3d:5a:68:48:78:f7:20:
88:67:bb:cb:2a:75:20:db:30:56:c4:ee:fa:99:a1:
0a:b2:a4:29:13:9f:af:6b:a1:39:10:8e:82:2e:2e:
73:32:c1:6c:00:f1:f9:ea:52:6a:42:e7:22:2f:a6:
d9:a5:38:61:39:eb:e0:a5:b9:15:ed:80:a5:57:72:
fa:cb:0e:a5:7e:e3:e1:d5:c2:1f:e4:f7:0f:91:05:
61:e6:78:f3:b9:86:1f:dc:87:8a:9f:8a:c5:30:fe:
12:5c:ec:82:95:5f:66:af:44:21:f8:ca:06:2e:8b:
2a:55:62:99:26:31:7c:ff:ca:d6:2f:af:f4:6e:7d:
0e:0f:3e:25:96:f0:b8:55:fe:b7:7b:3e:a6:57:a5:
71:85:35:9a:ee:6a:cc:ce:ba:c9:ab:7b:e8:13:79:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:7A:B8:71:77:8A:D6:3C:4A:DF:A1:6D:FC:B1:BC:49:EB:47:6A
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7c:5d:7f:e7:f0:6c:98:8d:67:93:da:25:96:20:ad:1a:5d:
be:f3:5d:a7:c2:22:8b:2b:e6:47:5d:b0:46:d7:26:9f:23:80:
ab:c7:08:2d:3d:83:e3:65:76:0d:fa:d4:ae:67:9d:28:ed:61:
bc:6b:ef:36:51:25:3f:4e:25:43:a3:ab:e0:c9:22:98:35:3a:
82:07:79:69:4e:50:89:cd:67:19:44:c9:70:6e:d2:e4:93:db:
ce:a7:76:ae:fc:f0:11:8f:e3:81:78:17:41:18:82:e1:89:c7:
75:2f:2d:b4:e3:9f:15:0d:fb:f6:08:9b:27:a9:d3:ad:91:ee:
cf:b8:d6:5f:a8:f5:23:fc:17:04:70:8a:c2:9b:f0:c3:98:d5:
87:a4:17:02:fa:4f:36:7f:3b:7f:eb:e9:c8:93:0c:a1:1d:ee:
23:2f:39:70:07:07:b0:f2:08:2e:0a:77:ce:5a:b5:bc:29:67:
c4:3d:5b:9b:40:41:68:e3:c3:9c:d8:41:fa:d9:02:44:c3:e0:
02:0c:78:e8:6f:9a:ec:c4:0a:20:d7:27:d1:a1:a8:c0:9e:5d:
87:7d:ed:ec:22:4e:9f:0f:a5:d0:f6:24:c7:2c:71:39:61:13:
46:e1:d5:78:38:2f:06:38:d8:d8:00:db:97:a0:ab:43:52:63:
12:5f:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:26 2026 by rpki-client