Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File: BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier: lYwOZkt0CnU+1l2o/cE/nNXi0WA0r+7yLhUOQPeubmM=
Subject key identifier: 07:82:31:60:12:FE:83:E3:B9:63:D8:F9:44:62:5A:67:31:07:FB:E4
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer: /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial: 019CAE6C783C36436D5EF3135A09A05AAE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number: 0CD7
Signing time: Mon 02 Mar 2026 12:01:10 +0000
Manifest this update: Mon 02 Mar 2026 12:01:10 +0000
Manifest next update: Tue 03 Mar 2026 12:01:10 +0000
Files and hashes: 1: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: 5jMqzICzDYS6QXvIH080cZkkiU78lr+V+HjjQXnenZs=)
2: sY2TntCf1cm5rPVJjS36b5m6tZc.roa (hash: TkRTS5xgT3a1OQtVhPAIwsqGlZKttwReXi6Ay6Ls3bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:78:3c:36:43:6d:5e:f3:13:5a:09:a0:5a:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Validity
Not Before: Mar 2 12:01:10 2026 GMT
Not After : Mar 3 12:01:10 2026 GMT
Subject: CN=0782316012fe83e3b963d8f944625a673107fbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:a2:a1:92:b3:78:01:b9:10:f2:34:fd:e1:
33:ad:f8:6c:05:e9:c4:4c:ff:25:ef:9c:14:07:ac:
65:d4:08:8a:c4:12:35:7b:e0:ea:01:09:32:5e:ba:
61:3f:8a:16:4b:ca:cd:05:ca:8c:03:ee:b5:33:76:
f8:d6:ff:9c:41:c1:4a:33:53:52:e1:28:21:bd:88:
3c:92:45:a5:da:ca:29:f6:5b:8e:00:9f:8e:bb:d8:
2e:52:12:bc:21:cc:8a:be:43:52:d8:42:99:41:71:
b5:14:a6:ec:18:69:f5:60:c7:7a:6f:36:4f:55:51:
ff:4c:82:d0:85:a6:19:f4:4f:f0:ff:b2:3c:37:74:
de:23:1e:ba:4b:88:46:19:83:24:a5:f3:f2:db:5b:
6e:0a:93:88:4f:03:87:dc:76:1b:6d:34:46:d7:fd:
3e:8d:ba:4b:4b:77:bf:d9:a3:b8:7b:34:60:64:a7:
3f:5b:f4:bf:e6:b0:08:75:56:65:a1:8c:6d:f8:0d:
49:21:ec:ae:46:e1:a8:84:ec:73:ee:36:d8:e8:8a:
26:ff:78:82:69:4d:9a:1e:b0:42:bd:d2:cd:16:61:
e5:e2:79:51:dc:ac:75:7c:2a:a4:54:7c:06:ab:a1:
1d:bb:1e:5d:e5:91:58:29:85:8c:ee:40:2a:ae:ef:
8e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:31:60:12:FE:83:E3:B9:63:D8:F9:44:62:5A:67:31:07:FB:E4
X509v3 Authority Key Identifier:
keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4c:9e:7a:ec:a7:31:c2:6a:f8:14:13:9e:40:7f:36:e4:df:
de:c1:bd:ee:15:c3:7c:fa:81:dd:aa:bf:0a:3b:3a:74:60:ec:
95:01:98:39:1b:8a:50:97:48:ee:c8:2f:80:e7:4b:79:ab:dc:
ef:46:51:53:cc:bf:f6:a0:dc:8d:00:79:f0:bd:61:ad:fb:39:
30:66:a7:8c:a4:4c:06:b2:3e:90:98:bc:a1:8b:d2:47:fb:96:
74:d9:8f:48:b2:2e:cc:70:48:be:76:63:c9:a3:f2:58:f7:85:
15:0f:55:63:95:7a:ae:29:8e:b7:12:43:96:a6:c2:35:de:db:
cc:f3:41:6e:1f:86:f8:42:5f:cd:43:5c:55:e2:ec:40:ad:c2:
89:95:29:13:70:36:47:d6:b7:b5:96:89:33:42:56:a0:d2:b0:
b4:be:c4:ba:5c:5a:af:2c:35:38:d9:d0:37:39:f8:69:8c:55:
c0:01:c5:bf:1e:da:2a:23:a6:f6:4a:ef:79:b1:8e:ea:52:1a:
d1:fb:6c:fd:76:24:b4:4b:90:c2:d2:f9:8f:39:42:80:5b:dd:
93:9e:16:71:63:fc:a2:9f:8e:7a:0f:ef:fb:32:d9:97:fa:d7:
6c:2b:35:04:2a:91:ca:e1:c8:56:85:3b:c3:95:a4:2d:f3:dc:
99:1d:77:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubHg8NkNtXvMTWgmgWq4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDMzYTkxMGZjZjJjMWIxNTk3N2ExOGFjZTdkODU3YmE1
OGI5YWEwHhcNMjYwMzAyMTIwMTEwWhcNMjYwMzAzMTIwMTEwWjAzMTEwLwYDVQQD
EygwNzgyMzE2MDEyZmU4M2UzYjk2M2Q4Zjk0NDYyNWE2NzMxMDdmYmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04qioZKzeAG5EPI0/eEzrfhsBenE
TP8l75wUB6xl1AiKxBI1e+DqAQkyXrphP4oWS8rNBcqMA+61M3b41v+cQcFKM1NS
4SghvYg8kkWl2sop9luOAJ+Ou9guUhK8IcyKvkNS2EKZQXG1FKbsGGn1YMd6bzZP
VVH/TILQhaYZ9E/w/7I8N3TeIx66S4hGGYMkpfPy21tuCpOITwOH3HYbbTRG1/0+
jbpLS3e/2aO4ezRgZKc/W/S/5rAIdVZloYxt+A1JIeyuRuGohOxz7jbY6Iom/3iC
aU2aHrBCvdLNFmHl4nlR3Kx1fCqkVHwGq6Edux5d5ZFYKYWM7kAqru+OtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeCMWAS/oPjuWPY+URiWmcxB/vkMB8GA1UdIwQY
MBaAFAcDOpEPzywbFZd6GKzn2Fe6WLmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndNNmtRX1BMQnNWbDNvWXJPZllWN3BZdWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni81ZWRhN2MtN2M5Mi00Mzg2LThkODIt
NjY5MTUxMzlkODlhLzEvQndNNmtRX1BMQnNWbDNvWXJPZllWN3BZdWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni81ZWRhN2MtN2M5Mi00Mzg2LThkODItNjY5MTUxMzlkODlh
LzEvQndNNmtRX1BMQnNWbDNvWXJPZllWN3BZdWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEyeeuyn
McJq+BQTnkB/NuTf3sG97hXDfPqB3aq/Cjs6dGDslQGYORuKUJdI7sgvgOdLeavc
70ZRU8y/9qDcjQB58L1hrfs5MGanjKRMBrI+kJi8oYvSR/uWdNmPSLIuzHBIvnZj
yaPyWPeFFQ9VY5V6rimOtxJDlqbCNd7bzPNBbh+G+EJfzUNcVeLsQK3CiZUpE3A2
R9a3tZaJM0JWoNKwtL7Eulxaryw1ONnQNzn4aYxVwAHFvx7aKiOm9krvebGO6lIa
0fts/XYktEuQwtL5jzlCgFvdk54WcWP8op+Oeg/v+zLZl/rXbCs1BCqRyuHIVoU7
w5WkLfPcmR13aw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:33 2026 by rpki-client