Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: eQG+jg2/SEahduX6We7iS9bN3YRExPRgOsh4iuQd274=
Subject key identifier: 87:7B:B5:56:78:58:E7:DF:87:76:AA:C5:44:58:9A:53:DF:BC:EA:C4
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019CADFE77E7978A87DE82B654D2C62448BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0F28
Signing time: Mon 02 Mar 2026 10:01:00 +0000
Manifest this update: Mon 02 Mar 2026 10:01:00 +0000
Manifest next update: Tue 03 Mar 2026 10:01:00 +0000
Files and hashes: 1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: GtvhX8ksI4x1Aa4ZVOUxUMgRkCPzcwhWFIh8cgrZYUI=)
2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:77:e7:97:8a:87:de:82:b6:54:d2:c6:24:48:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Mar 2 10:01:00 2026 GMT
Not After : Mar 3 10:01:00 2026 GMT
Subject: CN=877bb5567858e7df8776aac544589a53dfbceac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:81:0f:76:d4:e6:f0:cf:cf:e5:be:97:86:
59:82:8c:d8:1e:c9:ea:63:29:6f:78:72:70:ff:97:
b3:09:e5:60:1c:f7:9f:02:3e:b9:09:27:a9:cd:83:
b1:38:f9:6a:a4:0e:8e:d8:f6:50:e1:b9:f6:89:be:
b1:31:c0:ef:34:d0:5f:b9:94:6b:93:06:9f:1e:e1:
67:cd:fb:64:9f:17:66:4e:79:6a:3e:41:1e:83:5f:
1d:dd:41:e3:b9:46:69:6b:0e:47:5b:2d:c6:66:fa:
17:12:e0:1c:7c:a8:21:97:d1:92:bc:a6:9b:56:37:
62:4c:1f:f5:e2:7d:c3:47:bd:8c:a7:4a:d4:a0:dc:
3e:3f:f5:7f:95:03:e9:d2:36:75:a8:56:01:51:09:
bc:8e:73:b3:15:c2:83:c2:38:b2:53:81:42:2d:df:
11:2e:c9:04:e5:3a:a5:c9:8d:57:75:18:f9:e5:f9:
b1:a3:b9:39:d2:cf:ad:fa:0d:23:d2:d7:d9:9c:46:
60:51:8d:af:ca:f2:5d:62:3d:9b:cf:44:fb:8f:8f:
13:15:cd:92:9c:9a:20:75:12:e8:de:aa:5d:a5:49:
e6:29:a0:38:3a:36:a0:b5:aa:b8:d1:aa:6f:42:68:
db:e0:02:32:78:2f:fb:f3:3b:03:4b:69:19:30:d2:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7B:B5:56:78:58:E7:DF:87:76:AA:C5:44:58:9A:53:DF:BC:EA:C4
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:29:23:dd:37:4e:f2:7e:98:a9:fe:d4:34:92:9f:26:df:ef:
0a:70:da:5f:1b:11:1e:22:90:be:36:5d:3f:6e:e5:f9:35:e9:
fb:92:7d:7b:f9:dc:8d:08:a0:0e:e3:96:24:36:e6:3b:e4:a5:
95:7e:f4:49:45:7b:82:6a:97:e9:3c:25:66:30:2a:f0:eb:ea:
1b:e8:5a:b1:40:51:b9:cc:62:1c:03:b7:6f:3d:cd:51:a8:ef:
58:87:dc:b8:27:5f:96:46:77:20:fc:5d:1c:fc:51:e6:bc:c7:
c5:a5:50:92:14:cb:9f:a4:d1:ed:e0:1f:69:58:87:66:d9:6a:
5e:f5:08:7a:50:1e:69:4f:d7:ba:df:bf:04:04:75:99:8e:15:
31:3f:dc:dd:45:e2:8f:88:43:09:cd:cd:5b:55:a7:10:89:6a:
22:db:0f:b4:6e:1b:cc:5f:46:a5:a2:84:ec:bd:18:42:f8:56:
34:0e:17:7d:8d:79:46:7c:6a:26:83:a4:f5:8b:86:c3:c6:be:
57:25:0b:5f:6b:1e:d1:f9:d6:bd:61:3f:a1:d0:19:e4:86:8c:
7c:2a:7d:0f:d0:87:c2:ec:e8:c8:9a:c0:5d:55:82:da:2e:77:
e6:3e:7c:59:91:63:57:af:c2:88:6b:16:9b:73:14:01:d5:cd:
ea:22:f5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:03 2026 by rpki-client