Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
File: BMWTwzo9oilIzOIyis8F2YoB8aU.mft (raw, json)
Hash identifier: k+krvoawNc3bqXQpjn1ylyHBWXutC1F+8rdUWPBQenM=
Subject key identifier: A3:0E:E8:E1:CC:15:6E:A7:C0:95:7F:9F:6E:4C:F8:17:1D:E1:02:9B
Authority key identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
Certificate issuer: /CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Certificate serial: 019D9AAC338EBDDA92BAAEF230F977623C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
Manifest number: 09F3
Signing time: Fri 17 Apr 2026 09:01:09 +0000
Manifest this update: Fri 17 Apr 2026 09:01:09 +0000
Manifest next update: Sat 18 Apr 2026 09:01:09 +0000
Files and hashes: 1: BMWTwzo9oilIzOIyis8F2YoB8aU.crl (hash: TLWiGKkZr3YK/EfU8GeQ5k5YIzXSXRO8mSH5UBmy1pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:33:8e:bd:da:92:ba:ae:f2:30:f9:77:62:3c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Validity
Not Before: Apr 17 09:01:09 2026 GMT
Not After : Apr 18 09:01:09 2026 GMT
Subject: CN=a30ee8e1cc156ea7c0957f9f6e4cf8171de1029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:85:ab:b6:22:d8:27:08:c1:f7:23:fe:c9:
ab:7b:ce:2c:eb:1b:94:3f:6b:03:31:50:c0:73:d7:
9b:94:5e:f3:d8:5b:17:09:a4:fe:f4:33:32:61:d8:
a4:7e:fc:13:cc:5c:e6:db:9a:8c:bc:d1:ce:6c:36:
29:55:0b:c6:26:d0:95:5f:b4:e6:ee:16:62:7d:80:
fb:09:9b:a2:40:62:f4:34:87:7c:15:0e:51:a1:f2:
07:03:f8:47:6b:19:23:2b:37:fc:93:2b:b2:d9:01:
49:b6:62:a2:c0:0d:f0:24:25:ef:b9:d5:72:72:bc:
66:ff:a7:e0:4a:c7:40:ba:fd:ec:ff:27:13:ac:0b:
c5:10:96:c3:1c:37:73:45:54:b4:f6:f7:bf:65:e0:
1d:a3:44:04:43:73:ae:7b:dc:ed:b1:fd:f7:0d:d2:
4d:8d:01:4a:d8:7d:a6:58:6e:8d:a7:65:0c:99:77:
03:d1:a6:f3:be:a8:5e:5c:93:88:18:bc:b5:11:6d:
da:24:71:36:36:91:d3:8e:4f:17:49:cd:33:32:d8:
fa:e5:1c:92:3a:18:18:2b:52:8a:72:46:37:d5:a8:
ba:bf:16:b7:89:d9:c8:bb:ae:4a:7e:c3:97:8b:03:
ad:3d:85:e1:b7:88:77:70:55:5c:6b:f4:96:f4:00:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0E:E8:E1:CC:15:6E:A7:C0:95:7F:9F:6E:4C:F8:17:1D:E1:02:9B
X509v3 Authority Key Identifier:
keyid:04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:38:7a:66:91:e1:2b:c3:96:59:92:1d:f7:d2:e7:f9:1c:d4:
e1:6f:10:c7:23:7b:ab:89:14:f3:b7:f9:bc:a4:dc:56:25:15:
7e:86:4d:85:1e:39:f5:6a:d8:61:f7:85:e0:2d:c2:c0:6e:e4:
4c:2d:bd:81:03:25:ae:50:c6:37:4a:62:a9:15:87:d6:9b:c5:
ab:69:97:cb:d9:e3:c2:cd:24:80:26:dc:65:a2:05:ca:9c:31:
2f:2c:4b:d1:91:1d:70:06:2c:4b:05:e1:ea:af:81:bb:b0:e8:
97:a5:02:b6:ad:ef:07:4f:f2:56:f2:11:35:cb:f8:8e:75:4e:
36:ec:b0:47:61:5c:9d:06:3a:0a:4e:b5:67:51:b9:0b:12:56:
b1:5a:0b:9b:7d:a6:74:97:bc:22:57:71:08:f9:16:1c:58:93:
f7:51:d3:57:ac:95:35:81:b2:23:21:6c:29:4e:25:38:47:de:
96:21:34:47:ef:9a:40:72:1d:7c:ee:a1:2c:9f:8b:21:a9:80:
60:db:b7:5f:61:6d:a6:82:b3:ee:e2:41:48:87:a7:cf:1d:17:
c5:7b:55:52:90:79:5d:1e:51:00:99:5c:88:68:89:95:f3:08:
75:e4:00:8e:84:c6:c0:cc:8f:c9:b7:74:65:c5:03:d0:d6:57:
60:75:9e:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arDOOvdqSuq7yMPl3Yjx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YzU5M2MzM2EzZGEyMjk0OGNjZTIzMjhhY2YwNWQ5OGEw
MWYxYTUwHhcNMjYwNDE3MDkwMTA5WhcNMjYwNDE4MDkwMTA5WjAzMTEwLwYDVQQD
EyhhMzBlZThlMWNjMTU2ZWE3YzA5NTdmOWY2ZTRjZjgxNzFkZTEwMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQGFq7Yi2CcIwfcj/smre84s6xuU
P2sDMVDAc9eblF7z2FsXCaT+9DMyYdikfvwTzFzm25qMvNHObDYpVQvGJtCVX7Tm
7hZifYD7CZuiQGL0NId8FQ5RofIHA/hHaxkjKzf8kyuy2QFJtmKiwA3wJCXvudVy
crxm/6fgSsdAuv3s/ycTrAvFEJbDHDdzRVS09ve/ZeAdo0QEQ3Oue9ztsf33DdJN
jQFK2H2mWG6Np2UMmXcD0abzvqheXJOIGLy1EW3aJHE2NpHTjk8XSc0zMtj65RyS
OhgYK1KKckY31ai6vxa3idnIu65KfsOXiwOtPYXht4h3cFVca/SW9ADBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMO6OHMFW6nwJV/n25M+Bcd4QKbMB8GA1UdIwQY
MBaAFATFk8M6PaIpSMziMorPBdmKAfGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk1XVHd6bzlvaWxJek9JeWlzOEYyWW9COGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMDc2ODMtNDNlZC00YTljLWIzZWEt
NTBhNzM1YjI5NzYwLzEvQk1XVHd6bzlvaWxJek9JeWlzOEYyWW9COGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wMDc2ODMtNDNlZC00YTljLWIzZWEtNTBhNzM1YjI5NzYw
LzEvQk1XVHd6bzlvaWxJek9JeWlzOEYyWW9COGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDh6ZpHh
K8OWWZId99Ln+RzU4W8QxyN7q4kU87f5vKTcViUVfoZNhR459WrYYfeF4C3CwG7k
TC29gQMlrlDGN0piqRWH1pvFq2mXy9njws0kgCbcZaIFypwxLyxL0ZEdcAYsSwXh
6q+Bu7Dol6UCtq3vB0/yVvIRNcv4jnVONuywR2FcnQY6Ck61Z1G5CxJWsVoLm32m
dJe8IldxCPkWHFiT91HTV6yVNYGyIyFsKU4lOEfeliE0R++aQHIdfO6hLJ+LIamA
YNu3X2FtpoKz7uJBSIenzx0XxXtVUpB5XR5RAJlciGiJlfMIdeQAjoTGwMyPybd0
ZcUD0NZXYHWeMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:57 2026 by rpki-client