Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
File: BMWTwzo9oilIzOIyis8F2YoB8aU.mft (raw, json)
Hash identifier: 4ib0HxoUAOcSvjX7ELKO4whWJ3cqxdZwSSgSJeUk7kI=
Subject key identifier: 8C:21:DB:6A:59:63:BD:A2:1D:B6:E5:00:40:20:A2:87:13:8A:20:DE
Authority key identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
Certificate issuer: /CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Certificate serial: 01A101A3F520E76251D37DEA8227530279F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
Manifest number: 0BB6
Signing time: Sat 03 Oct 2026 12:01:24 +0000
Manifest this update: Sat 03 Oct 2026 12:01:24 +0000
Manifest next update: Sun 04 Oct 2026 12:01:24 +0000
Files and hashes: 1: BMWTwzo9oilIzOIyis8F2YoB8aU.crl (hash: XVHbYCQAXygcqrjJi7MyRlvehnnfVpgBewk6rTC1HtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:a3:f5:20:e7:62:51:d3:7d:ea:82:27:53:02:79:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Validity
Not Before: Oct 3 12:01:24 2026 GMT
Not After : Oct 4 12:01:24 2026 GMT
Subject: CN=8c21db6a5963bda21db6e5004020a287138a20de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:46:b4:98:21:8b:0f:93:6e:7a:10:b0:b2:
46:27:86:e2:69:86:09:ad:0f:4f:27:32:7a:51:5b:
a3:67:02:53:00:13:c5:7b:5d:ae:ca:21:52:38:40:
e4:68:f9:75:1a:1b:4f:d2:dc:f2:aa:d9:b6:be:a3:
2d:ad:37:66:6b:2e:a6:d3:6c:f6:a7:b7:df:68:c8:
d7:6a:df:73:e9:dd:ee:73:df:83:31:8a:fe:4e:d4:
1f:5c:8c:e0:a9:d9:8d:eb:a8:06:06:c0:9e:f1:c9:
6e:a7:ad:09:c2:04:09:20:67:35:1c:0e:84:9b:95:
73:5c:84:ca:df:1b:8b:0d:35:3b:a6:c0:1e:b9:db:
38:d9:b1:ee:a6:89:77:bb:60:38:cc:66:49:2a:9c:
4b:26:34:a7:26:17:ce:57:b4:da:ef:a9:f0:c8:96:
4e:fe:fe:97:c8:cd:fe:3b:8c:f1:9c:fe:69:60:c7:
60:7f:d4:96:dc:2d:96:a1:36:50:e5:6b:bc:34:b7:
3b:98:2a:88:0e:03:14:dd:c4:6b:0f:61:a6:14:a5:
51:c6:ca:e6:e0:98:a0:90:a0:8e:f5:03:5c:9d:e8:
7f:58:83:90:5e:5b:b8:67:72:77:35:b5:8d:b8:43:
c7:27:20:4b:9c:54:1d:93:d6:ae:da:6b:43:6d:35:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:DB:6A:59:63:BD:A2:1D:B6:E5:00:40:20:A2:87:13:8A:20:DE
X509v3 Authority Key Identifier:
keyid:04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c0:e2:c1:ad:ff:f3:71:62:d8:1d:d4:de:2b:c8:47:e1:0e:
22:3e:9f:15:52:73:98:b4:db:a9:30:1f:34:b2:2e:45:69:d4:
11:99:93:7f:2b:72:0c:ec:b8:db:69:de:bb:9b:5e:43:26:94:
c3:a5:fe:21:7a:c5:67:83:45:bd:07:9f:d6:2d:d9:7a:99:78:
aa:e5:26:e7:e9:5e:5a:e4:7c:ac:d5:69:e5:b5:95:99:27:dd:
5a:06:49:c7:d1:76:01:4d:ab:0d:35:4f:75:5d:ba:22:7f:d4:
13:60:fb:1c:06:a4:03:bd:5d:20:79:29:85:76:b4:a7:23:8c:
1e:c2:45:33:1d:06:18:6f:c4:f4:ad:33:75:36:ea:ea:96:0c:
8f:1a:35:2a:32:39:b6:95:2d:2f:c9:dc:b9:65:bb:4f:9c:45:
ed:81:ae:f7:b1:ac:7d:e9:ab:80:6d:c6:5e:d2:9d:ce:29:94:
88:d3:43:52:38:5b:dd:ef:3e:2c:14:a7:50:32:d3:68:37:d3:
25:6c:b1:b1:d4:27:c6:f6:43:90:14:5d:96:bf:26:7f:e8:e0:
f4:0e:21:b0:8d:52:33:e1:f4:cb:fb:79:0b:8a:4d:46:69:2d:
87:22:aa:4d:66:01:2f:84:3f:15:3f:70:11:15:03:63:9a:48:
de:36:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:29:34 2026 by rpki-client