Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
File: BMWTwzo9oilIzOIyis8F2YoB8aU.mft (raw, json)
Hash identifier: qQEdht9VMQeTwsnSDAptJ0Z4QVeEy9VIm29qhfKEiMQ=
Subject key identifier: 26:E5:EA:74:CC:03:DF:8D:93:20:BD:C8:4E:F3:C3:D0:1B:29:74:75
Authority key identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
Certificate issuer: /CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Certificate serial: 019EC224952E9661433671F6F8E9D11B2B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
Manifest number: 0A8C
Signing time: Sat 13 Jun 2026 18:00:37 +0000
Manifest this update: Sat 13 Jun 2026 18:00:37 +0000
Manifest next update: Sun 14 Jun 2026 18:00:37 +0000
Files and hashes: 1: BMWTwzo9oilIzOIyis8F2YoB8aU.crl (hash: WQivCG5TMiOnfoOZQ6HQ3MIQ9YIjOULal5Qu8MA43/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:95:2e:96:61:43:36:71:f6:f8:e9:d1:1b:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Validity
Not Before: Jun 13 18:00:37 2026 GMT
Not After : Jun 14 18:00:37 2026 GMT
Subject: CN=26e5ea74cc03df8d9320bdc84ef3c3d01b297475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:0a:24:6f:fb:80:ee:81:15:94:28:85:0f:
63:06:4b:94:78:51:71:66:3e:f1:85:f1:da:9e:db:
07:5a:8f:2a:5d:c2:5e:d2:ad:2c:fb:16:95:58:bb:
92:97:21:77:af:97:91:a2:8b:b7:16:2a:2e:bd:2d:
f4:5b:9f:8e:02:0e:48:3a:50:c0:db:ac:19:fd:8b:
74:b8:7d:f2:3e:06:ea:f1:42:d7:d7:7c:b7:16:ec:
c5:1a:56:17:9b:5b:50:3c:9c:ca:49:fc:de:b4:aa:
a0:63:11:b2:fa:25:84:d3:f9:69:25:85:1f:e0:bf:
1f:26:c9:90:17:8b:17:dc:2e:2e:b2:06:2f:8b:6c:
ea:aa:c4:53:0c:a7:01:6d:da:e8:5a:49:72:18:85:
1c:09:15:49:4c:7d:5c:d0:5e:44:84:a7:7d:6e:28:
5f:09:73:c5:70:27:d5:4e:06:b2:ab:b3:0b:77:f1:
eb:dc:f9:0f:70:a7:b5:32:e0:bb:21:5a:ad:46:1d:
17:ed:b9:81:a5:d8:21:bd:32:a5:35:37:05:6b:8a:
a1:e5:e4:09:d5:37:02:1a:c6:a5:ef:ae:0d:9e:de:
77:fe:e2:96:fc:3d:e0:7a:28:6b:df:59:d0:62:fb:
17:ad:57:19:75:e4:80:27:58:b4:e4:b4:fb:fe:9a:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:EA:74:CC:03:DF:8D:93:20:BD:C8:4E:F3:C3:D0:1B:29:74:75
X509v3 Authority Key Identifier:
keyid:04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a3:d4:a5:aa:a8:10:ab:5c:70:15:b1:d4:d6:75:f0:dd:01:
d5:71:5a:61:1d:ff:40:a8:80:50:78:98:23:21:2a:90:e8:3d:
c2:49:db:01:0a:91:77:96:0c:8c:f7:b3:83:6d:d7:51:c9:a3:
d0:aa:82:5d:8a:ea:e0:26:af:9e:92:13:38:7a:7c:f8:d3:92:
3a:e6:ab:1f:d2:e0:26:60:24:45:3f:97:8a:30:53:1c:88:fb:
44:85:2a:eb:ed:30:fb:9c:03:1d:a6:76:6e:ab:db:3f:bb:e5:
2a:6f:aa:08:ed:90:f6:22:84:7d:05:d9:dd:42:f4:43:7c:2e:
53:30:24:60:b8:93:b1:a6:d6:6f:99:81:34:62:e3:43:f1:22:
90:87:2e:12:f2:a5:8a:fc:05:5c:bd:f8:bf:1c:24:86:3f:f1:
67:99:18:76:eb:23:f9:3b:55:b1:35:ce:75:29:6a:2c:31:6b:
6d:5f:4e:0d:a6:c5:7c:f4:8c:8e:4b:da:91:c7:f4:19:7d:c1:
f1:ec:c7:c2:18:43:ee:73:b3:a6:12:62:c0:14:36:c8:d3:04:
6e:1a:68:d8:b6:a9:77:9e:4e:04:38:bd:04:83:66:1c:30:35:
c7:50:00:28:05:d0:94:b9:b1:28:29:1c:0d:7b:23:f7:bc:cd:
75:98:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:58:00 2026 by rpki-client