Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: ZyetunRGxqzS26uXUUfPVIda+MbAZWeLdRGD90egQgs=
Subject key identifier: FE:9B:66:EB:52:55:65:2E:A3:C7:B2:C4:E1:5C:EF:C1:D9:E3:2F:7A
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019FA9750AE68E01D86CB8E927CE67EF6B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 09D7
Signing time: Tue 28 Jul 2026 16:00:47 +0000
Manifest this update: Tue 28 Jul 2026 16:00:47 +0000
Manifest next update: Wed 29 Jul 2026 16:00:47 +0000
Files and hashes: 1: 2mmNYgAAnRwmcSYBM0IDngosLA4.roa (hash: nY1bukKyfttyC/3iq1POePricYqJ+1Tih3NnE1gnsUY=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: 6euZv/vH6V4GPIvr7lFd2ExSkAVTb4YxmB1aZx4cVlQ=)
3: Cqx4m029JaVGdBM3t0xvlCEAgzo.roa (hash: S8GX6C9oLkw5v91FP9+Y195QY3e/NY9EwWhEqzGuxl4=)
4: NeQydQcKe8qY06oC_Afus8sEgJU.roa (hash: 0r3TCPzszCfKtmrF/kyaRrXpr8kuhtaBNUphvREHO1Y=)
5: O63vFzK4x5ZTpmdF6YhLh0H2JRM.roa (hash: C3eD55pIFuNUzJ0bW9R6W7B2wd3cNHOtGS7ITnUaMJ4=)
6: R2uWMDmb1YfPEwjrPUSRr3_QEN8.roa (hash: 6OW2Lx2+1h6iO9PfK83UIXHOzzd7YoT8ZZx73Dp3z4I=)
7: RPcV_46izWFvqHxYNAfwO4rfhNk.roa (hash: +Kcr18TyAtMOfswQ2AFElqR161EtCNJRdXOpxKjayu0=)
8: mdt2WXNNXfXIWBr0juHcaeQiifQ.roa (hash: o+Tkj+m9xGMj8hgnIqFHVjFiAA/cU9ZsV1bWB3LAgR8=)
9: zRt11Vund2Tf-7IALkPmk7aZkx4.roa (hash: z201PyhUCG8Ta577hbAhZW0ZrjPaSrja2N7Brq64aFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:0a:e6:8e:01:d8:6c:b8:e9:27:ce:67:ef:6b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Jul 28 16:00:47 2026 GMT
Not After : Jul 29 16:00:47 2026 GMT
Subject: CN=fe9b66eb5255652ea3c7b2c4e15cefc1d9e32f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:9d:dd:bb:16:b8:b8:c5:a2:17:84:57:19:
8a:9a:03:24:db:79:4c:07:16:55:47:6a:98:3f:93:
31:4d:b0:ac:99:89:a9:d4:05:f5:ef:96:47:a7:4e:
0c:5d:68:42:d0:4f:97:35:df:ee:08:0a:a5:62:ca:
24:c8:68:2d:d2:0e:40:2f:a9:a8:20:0e:de:f0:73:
67:7d:38:bf:99:71:ea:8f:dd:cb:20:c4:cf:05:a0:
de:72:3f:37:61:91:ac:55:0b:25:6a:15:45:fc:bb:
80:2e:26:06:f5:c1:63:af:fc:c8:50:c2:1d:33:1f:
98:38:01:14:c7:a1:67:9c:93:93:b6:1c:aa:75:8c:
80:5b:e7:a8:13:97:0b:15:97:ea:3f:78:2a:61:22:
62:18:7e:5b:75:37:d7:11:b9:01:1a:e6:0c:eb:15:
57:0a:33:d5:b7:a1:59:fc:90:ea:7c:de:3f:d9:ee:
02:13:b7:0d:e7:2c:5a:e7:c9:46:19:15:26:e6:6e:
38:bb:0a:c7:bb:16:65:85:d2:9a:96:a5:d7:c0:1d:
90:3d:cd:8b:10:05:c4:d5:3e:1e:3c:32:a9:39:47:
38:9e:1a:b1:43:38:55:bb:38:f3:1a:49:08:b7:bf:
c6:32:1c:5d:05:1e:42:eb:31:47:a9:d3:f0:d1:3c:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9B:66:EB:52:55:65:2E:A3:C7:B2:C4:E1:5C:EF:C1:D9:E3:2F:7A
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6e:22:51:69:00:96:4d:58:ce:55:5c:cb:e6:68:f0:9a:68:
71:7b:5b:c2:d6:fd:78:a0:32:c0:7a:a2:d2:bd:79:b2:9b:2c:
5c:f0:57:47:98:e3:7b:75:9f:53:7e:97:66:83:9f:e8:9e:78:
4a:aa:76:72:99:d7:f8:d8:af:f6:40:18:37:d6:12:c3:22:d7:
e7:54:6e:27:bf:6a:47:a8:ec:bf:38:71:4e:27:de:ae:f1:a8:
1a:3c:d9:25:b6:54:ec:ea:b8:e0:4a:27:89:4b:dc:0c:dc:c1:
0a:bc:29:e4:cf:29:ea:13:f9:f5:6f:d4:c3:22:c7:8a:62:85:
40:de:b8:35:71:57:b5:9f:0c:cd:b1:39:c8:13:ce:e5:ea:45:
16:5d:a5:01:31:37:f6:13:cd:58:51:09:d9:c6:72:c8:ab:a1:
b3:15:6a:65:7d:9d:3b:8e:d3:78:19:5e:57:45:d6:60:e2:63:
74:1a:39:c4:f9:13:cf:74:b2:51:9a:f5:e0:a4:76:3c:73:7f:
73:b6:89:9a:8e:2f:b1:13:b8:de:a9:6f:ef:5d:6c:f6:c0:d2:
18:f3:f8:bc:05:f0:b5:b4:82:f9:43:bb:98:fb:eb:42:4c:4f:
00:01:2f:e0:0d:48:4b:b6:ae:da:bb:06:90:06:e1:9a:a6:9d:
f6:e7:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:13 2026 by rpki-client