Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: idgKsUCMtwDxCLv3y9+G5RQw91G0riJauSeWf5dG3jw=
Subject key identifier: 47:3B:3D:1C:9C:22:31:0A:05:2E:F6:63:CA:7F:72:18:1F:C7:B7:F9
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 01A0C143F132235CDF4D586459FDACAD6E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 0A68
Signing time: Mon 21 Sep 2026 00:00:50 +0000
Manifest this update: Mon 21 Sep 2026 00:00:50 +0000
Manifest next update: Tue 22 Sep 2026 00:00:50 +0000
Files and hashes: 1: 2mmNYgAAnRwmcSYBM0IDngosLA4.roa (hash: nY1bukKyfttyC/3iq1POePricYqJ+1Tih3NnE1gnsUY=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: jYVcH/DXjUmn18q4EBX+ZgFarQFW8jkIAeGSUOIwKfo=)
3: Cqx4m029JaVGdBM3t0xvlCEAgzo.roa (hash: S8GX6C9oLkw5v91FP9+Y195QY3e/NY9EwWhEqzGuxl4=)
4: NeQydQcKe8qY06oC_Afus8sEgJU.roa (hash: 0r3TCPzszCfKtmrF/kyaRrXpr8kuhtaBNUphvREHO1Y=)
5: O63vFzK4x5ZTpmdF6YhLh0H2JRM.roa (hash: C3eD55pIFuNUzJ0bW9R6W7B2wd3cNHOtGS7ITnUaMJ4=)
6: RPcV_46izWFvqHxYNAfwO4rfhNk.roa (hash: +Kcr18TyAtMOfswQ2AFElqR161EtCNJRdXOpxKjayu0=)
7: WouQ5boJ9I90k_yfz3_xH_tfu1k.roa (hash: OH8f0iwKgQSCmkIn7xRG2E2rViHcnBt77Z8vCQX3BBI=)
8: mdt2WXNNXfXIWBr0juHcaeQiifQ.roa (hash: o+Tkj+m9xGMj8hgnIqFHVjFiAA/cU9ZsV1bWB3LAgR8=)
9: zRt11Vund2Tf-7IALkPmk7aZkx4.roa (hash: z201PyhUCG8Ta577hbAhZW0ZrjPaSrja2N7Brq64aFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:f1:32:23:5c:df:4d:58:64:59:fd:ac:ad:6e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Sep 21 00:00:50 2026 GMT
Not After : Sep 22 00:00:50 2026 GMT
Subject: CN=473b3d1c9c22310a052ef663ca7f72181fc7b7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:2f:ff:59:be:8b:cc:6c:99:61:00:c3:74:
7e:38:eb:42:a8:7a:5b:17:1f:68:d4:5f:4a:0d:53:
d8:bc:0d:7e:b4:d1:2d:af:b2:b7:4d:b8:e0:e3:42:
57:73:8e:fd:21:fb:8f:56:27:4b:ec:8c:15:4f:b1:
cc:aa:5a:b6:58:e3:d8:86:f2:f2:a4:7f:32:07:e6:
53:a1:e7:d5:4f:68:b9:25:27:60:4f:52:25:fc:f2:
9d:87:c5:46:8a:5e:6c:fe:f6:12:d7:68:51:ea:2a:
25:05:03:e1:9a:93:21:a5:99:75:5c:1a:09:1e:42:
bb:dd:33:4e:59:aa:f7:b7:8c:c3:e9:45:7b:c3:02:
26:ff:02:b1:d0:f4:50:1b:93:49:78:62:f7:5d:5b:
c6:a1:cb:67:71:0a:8a:6d:52:f6:c2:b5:31:5f:a0:
43:19:b3:aa:98:2b:4e:06:e9:3f:8b:4e:e7:b5:22:
40:8d:33:5a:1d:7d:58:9c:67:a1:34:41:b9:c5:e9:
fc:58:24:60:56:70:e3:79:ed:1c:a2:6f:91:6a:75:
d0:3e:ad:e4:3d:90:69:87:9a:34:9f:dc:b7:04:2a:
38:a8:fe:06:76:9e:30:dd:25:90:bf:2e:6c:99:15:
cf:31:d5:81:de:03:e7:c5:86:b9:e5:30:1b:36:7f:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3B:3D:1C:9C:22:31:0A:05:2E:F6:63:CA:7F:72:18:1F:C7:B7:F9
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a5:03:2f:c2:c5:70:54:3a:8a:a7:2b:ce:74:c7:24:f8:4c:
ac:96:3a:fe:0c:99:90:0a:7f:9d:27:cf:c6:50:46:57:d7:2b:
29:0b:27:6b:b9:8c:9f:d7:c0:c7:43:50:4a:13:44:5a:6d:4a:
15:02:de:6f:b9:19:96:5d:e3:36:0b:8a:d3:9c:9f:23:e3:1b:
1e:fe:73:b1:b5:ce:d0:37:08:3e:e0:bc:2c:d5:5f:63:8e:50:
26:90:7d:ce:7e:5d:2b:e5:a4:9a:f9:6f:ec:b2:a8:17:09:ee:
23:4d:30:38:a2:7a:86:c5:e3:1b:58:98:a4:11:7a:63:b3:bb:
41:4e:a6:2a:0d:2c:cd:ae:72:a2:ab:3d:27:21:36:cb:65:57:
31:17:7e:1c:68:7b:5d:61:1d:d3:25:c0:9a:84:02:45:55:1f:
cd:fa:81:b4:f1:11:ed:28:cf:a8:26:f1:db:14:1c:44:c1:13:
fa:15:90:a3:dc:58:94:de:eb:93:53:0c:8e:3a:16:ac:5b:9e:
44:41:5e:d0:a9:18:e7:2b:0f:08:fe:6a:b9:1a:39:cc:b8:84:
8e:17:e1:ad:c2:40:c5:07:cc:b7:1f:b3:6e:34:e0:f5:ca:53:
03:1a:60:8b:28:88:12:26:3b:6c:10:de:af:6e:b0:e7:45:78:
2d:73:ae:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBQ/EyI1zfTVhkWf2srW5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjNjYjI2M2RmNTBkMmQ0ZDA3M2MwZjdkYjZjZDI3NzYz
MDJjOWQwHhcNMjYwOTIxMDAwMDUwWhcNMjYwOTIyMDAwMDUwWjAzMTEwLwYDVQQD
Eyg0NzNiM2QxYzljMjIzMTBhMDUyZWY2NjNjYTdmNzIxODFmYzdiN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7sv/1m+i8xsmWEAw3R+OOtCqHpb
Fx9o1F9KDVPYvA1+tNEtr7K3Tbjg40JXc479IfuPVidL7IwVT7HMqlq2WOPYhvLy
pH8yB+ZToefVT2i5JSdgT1Il/PKdh8VGil5s/vYS12hR6iolBQPhmpMhpZl1XBoJ
HkK73TNOWar3t4zD6UV7wwIm/wKx0PRQG5NJeGL3XVvGoctncQqKbVL2wrUxX6BD
GbOqmCtOBuk/i07ntSJAjTNaHX1YnGehNEG5xen8WCRgVnDjee0com+RanXQPq3k
PZBph5o0n9y3BCo4qP4Gdp4w3SWQvy5smRXPMdWB3gPnxYa55TAbNn+tUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc7PRycIjEKBS72Y8p/chgfx7f5MB8GA1UdIwQY
MBaAFAVjyyY99Q0tTQc8D322zSd2MCydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQt
MTUwMzU0YjAwZTU1LzEvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQtMTUwMzU0YjAwZTU1
LzEvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6UDL8LF
cFQ6iqcrznTHJPhMrJY6/gyZkAp/nSfPxlBGV9crKQsna7mMn9fAx0NQShNEWm1K
FQLeb7kZll3jNguK05yfI+MbHv5zsbXO0DcIPuC8LNVfY45QJpB9zn5dK+Wkmvlv
7LKoFwnuI00wOKJ6hsXjG1iYpBF6Y7O7QU6mKg0sza5yoqs9JyE2y2VXMRd+HGh7
XWEd0yXAmoQCRVUfzfqBtPER7SjPqCbx2xQcRMET+hWQo9xYlN7rk1MMjjoWrFue
REFe0KkY5ysPCP5quRo5zLiEjhfhrcJAxQfMtx+zbjTg9cpTAxpgiyiIEiY7bBDe
r26w50V4LXOuqw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:32:39 2026 by rpki-client