Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File: BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier: SSdCPNfS+C5VU8238ITW7m41Lx2nm6YgNf1nCXCqp0M=
Subject key identifier: 18:99:0D:9D:D9:A4:C4:BD:C9:A2:47:E0:C4:FF:77:0E:E7:AE:50:8C
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer: /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial: 01A13523097EE2310870B51B25D017A53724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number: 0F2F
Signing time: Tue 13 Oct 2026 12:00:51 +0000
Manifest this update: Tue 13 Oct 2026 12:00:51 +0000
Manifest next update: Wed 14 Oct 2026 12:00:51 +0000
Files and hashes: 1: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: 9xopxrvU15KyXAB/YAiZzJNc68Z6yXkWSdE24O5dzZs=)
2: sY2TntCf1cm5rPVJjS36b5m6tZc.roa (hash: TkRTS5xgT3a1OQtVhPAIwsqGlZKttwReXi6Ay6Ls3bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:09:7e:e2:31:08:70:b5:1b:25:d0:17:a5:37:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Validity
Not Before: Oct 13 12:00:51 2026 GMT
Not After : Oct 14 12:00:51 2026 GMT
Subject: CN=18990d9dd9a4c4bdc9a247e0c4ff770ee7ae508c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:7f:24:fd:8c:07:9f:de:b7:bc:cd:f1:72:
b0:36:66:9e:43:ad:73:e2:20:12:70:e7:94:57:40:
1c:ef:e5:3e:c8:d7:f5:03:13:b6:f9:e0:12:26:f5:
8b:2d:cc:eb:ac:93:25:88:fe:29:62:ee:75:d8:16:
b3:03:9a:6d:c9:4a:1a:7f:f0:6f:02:2b:ee:a1:3d:
68:0c:9f:e1:2e:8c:83:6c:dd:54:04:6d:a4:bc:2e:
74:8d:8d:f0:0c:25:32:7b:d0:dd:d5:55:03:8c:70:
d1:9c:79:3d:94:a7:de:c2:aa:24:0a:1c:f9:95:80:
e8:43:66:44:55:92:ab:58:dd:5e:4c:ab:b0:ab:a6:
8a:de:63:ba:c3:fe:4c:17:d9:ff:64:f4:f2:a3:66:
7e:2c:3f:79:04:4f:19:30:9a:a9:c1:5c:e2:58:09:
ad:ca:96:b4:a3:bb:4d:f0:64:23:7c:ce:05:82:52:
c1:cd:da:33:fa:85:b8:aa:b8:3f:14:ab:27:17:d8:
bf:d5:dd:ff:71:4d:45:0f:4b:10:15:2f:52:71:0b:
2a:87:7b:d2:66:1e:6b:3e:f6:c5:5e:5c:06:a2:8a:
60:80:1f:c5:42:68:33:64:c2:c4:21:3e:e0:5c:da:
4f:24:51:5b:e5:d6:37:20:f3:94:54:4f:c8:76:de:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:99:0D:9D:D9:A4:C4:BD:C9:A2:47:E0:C4:FF:77:0E:E7:AE:50:8C
X509v3 Authority Key Identifier:
keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1b:e9:d9:12:2d:50:fe:b3:9c:33:4e:02:96:5a:08:a4:c5:
07:ab:aa:06:f6:8a:77:98:a4:cb:e9:7c:92:99:1d:ff:bc:d0:
11:46:bf:78:03:74:7d:cd:a2:f3:79:7c:09:27:ad:6a:77:76:
e3:b1:26:54:14:50:b4:18:22:65:ed:af:1f:20:12:6b:1d:6f:
73:72:42:45:16:20:60:ee:80:34:24:5f:4d:18:82:57:30:57:
d0:e2:a7:94:37:8e:de:a5:b8:55:38:55:09:0a:28:e0:23:9d:
3c:09:54:1d:9e:25:a0:4b:84:e2:7f:85:68:26:0a:10:86:59:
ed:91:ba:13:c0:4b:4b:11:62:7d:c3:93:11:67:40:2e:6b:ff:
25:74:b5:db:08:54:07:58:17:28:02:34:ec:04:97:47:72:f9:
76:18:c1:59:55:66:a7:77:6a:98:f4:be:cf:21:c1:e6:30:a7:
e4:2f:cc:83:70:13:14:0b:3e:02:20:21:85:1e:0b:29:79:a3:
f8:e1:be:86:d2:d9:98:2f:88:66:82:70:88:fa:4c:71:d3:85:
54:b6:12:86:80:2b:a9:ff:35:1d:37:44:c9:c8:3e:aa:e7:f7:
18:cd:de:0e:2a:3b:13:20:45:a6:da:51:fe:01:31:74:2e:8d:
a8:aa:34:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:23:15 2026 by rpki-client