Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File: bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier: R2l1b2v+wRRKTekUfHohvz6QkRcCz69hXHgZsohhzSE=
Subject key identifier: 4B:E6:66:26:D7:C5:31:89:F7:FB:5B:69:EA:E1:1D:24:E8:55:5E:43
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial: 01A13FA6D2328379BC8E9C2BD6F6323BBF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number: 1AAA
Signing time: Thu 15 Oct 2026 13:00:59 +0000
Manifest this update: Thu 15 Oct 2026 13:00:59 +0000
Manifest next update: Fri 16 Oct 2026 13:00:59 +0000
Files and hashes: 1: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: DMcqG+BbAzibqVfe4eZYUnV00DBZvTsg3YRsPCg1Rdw=)
2: pANXzrraCHYVkzSawo9c9dlj6zU.roa (hash: YNqSGiASHtu5lxBy3NZ+tm1+05tOP+o9p4uo5cI8CMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a6:d2:32:83:79:bc:8e:9c:2b:d6:f6:32:3b:bf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Validity
Not Before: Oct 15 13:00:59 2026 GMT
Not After : Oct 16 13:00:59 2026 GMT
Subject: CN=4be66626d7c53189f7fb5b69eae11d24e8555e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:08:27:d1:c8:63:77:05:e9:a1:c9:2e:3d:
b7:17:f1:fa:37:81:48:5b:f2:32:4c:05:8c:06:15:
e3:f7:42:92:86:0b:d7:9a:00:de:4a:1d:78:8e:2f:
d3:3f:4f:a6:73:38:77:91:3a:7e:71:cb:8e:58:47:
5c:ae:a1:ed:e0:ce:fd:be:29:00:b1:db:ad:8c:4d:
8a:09:91:5f:72:5b:3f:b7:4a:90:2b:e3:cc:ce:b6:
34:5e:42:9b:d3:a0:2a:47:71:6d:9a:6c:90:c0:f6:
f3:8e:15:80:32:00:16:2c:2d:c5:1e:40:8a:63:76:
2e:ae:07:37:58:82:5c:c5:99:06:99:5d:ac:e6:ad:
01:5a:6c:e4:bb:b8:1b:83:1d:1b:2f:5c:19:cd:4e:
da:2a:7b:80:b5:54:5c:40:93:55:59:9a:60:ae:ee:
40:d5:cf:3f:13:29:88:53:85:10:48:fb:f1:b0:ef:
a3:3d:ec:e9:9f:03:d3:fe:15:7b:36:1f:87:aa:6d:
d4:75:eb:f7:22:2b:ef:47:6e:ec:0a:c0:3f:08:d3:
9e:a8:76:b2:f8:c8:1f:a7:1b:d3:9f:22:66:e6:c8:
33:d9:7a:7f:fa:8f:ab:6f:e1:2e:4c:ed:d0:44:99:
f5:3b:a8:92:13:98:b7:74:51:8a:e0:a1:6d:5e:cc:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E6:66:26:D7:C5:31:89:F7:FB:5B:69:EA:E1:1D:24:E8:55:5E:43
X509v3 Authority Key Identifier:
keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fa:5c:f8:01:63:fb:ce:a5:f5:5b:c4:10:80:36:01:40:00:
bc:66:e5:4b:8a:47:42:60:33:c8:92:03:c9:d5:8b:d0:80:18:
43:08:f9:07:66:9d:da:b1:36:56:74:16:f7:fd:0a:aa:8a:9c:
8e:6d:fd:17:78:1d:17:60:c1:a5:27:e9:14:9d:3c:88:01:5b:
ef:4d:b5:d0:15:ee:1c:2a:7a:86:c2:4f:19:de:62:63:76:45:
7a:50:49:41:f4:f1:0c:5b:35:92:39:b3:24:4a:15:fd:9f:2f:
ac:10:31:59:2c:97:14:c5:83:e7:68:94:e1:a9:9f:ea:ba:92:
56:2c:d9:53:2e:b6:af:a2:67:09:72:2b:c5:2a:ac:3c:b0:34:
3f:4d:dd:96:35:bd:1d:eb:f9:ed:4e:51:43:f2:00:b0:ee:8e:
ce:0c:74:30:e5:cd:ac:47:43:ad:e3:55:20:b0:d1:46:f6:56:
8f:1a:a9:d3:b0:2a:e7:5e:68:4d:a9:fa:7c:60:34:c2:c0:65:
4d:6d:3c:91:b3:af:51:33:4f:74:f4:2a:a1:61:10:02:42:65:
7a:7a:9a:18:d4:84:27:26:85:f0:9d:89:ad:6a:6d:bf:ba:62:
f6:f2:9d:86:5e:0e:2c:06:e3:53:2f:f3:26:2a:c1:fb:f0:d1:
39:61:6b:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/ptIyg3m8jpwr1vYyO78sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj
NmIzNTAwHhcNMjYxMDE1MTMwMDU5WhcNMjYxMDE2MTMwMDU5WjAzMTEwLwYDVQQD
Eyg0YmU2NjYyNmQ3YzUzMTg5ZjdmYjViNjllYWUxMWQyNGU4NTU1ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/YIJ9HIY3cF6aHJLj23F/H6N4FI
W/IyTAWMBhXj90KShgvXmgDeSh14ji/TP0+mczh3kTp+ccuOWEdcrqHt4M79vikA
sdutjE2KCZFfcls/t0qQK+PMzrY0XkKb06AqR3FtmmyQwPbzjhWAMgAWLC3FHkCK
Y3Yurgc3WIJcxZkGmV2s5q0BWmzku7gbgx0bL1wZzU7aKnuAtVRcQJNVWZpgru5A
1c8/EymIU4UQSPvxsO+jPezpnwPT/hV7Nh+Hqm3Udev3IivvR27sCsA/CNOeqHay
+MgfpxvTnyJm5sgz2Xp/+o+rb+EuTO3QRJn1O6iSE5i3dFGK4KFtXswiZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvmZibXxTGJ9/tbaerhHSToVV5DMB8GA1UdIwQY
MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt
YTU0ZWMwZDY4ZmE4LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4
LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPpc+AFj
+86l9VvEEIA2AUAAvGblS4pHQmAzyJIDydWL0IAYQwj5B2ad2rE2VnQW9/0Kqoqc
jm39F3gdF2DBpSfpFJ08iAFb70210BXuHCp6hsJPGd5iY3ZFelBJQfTxDFs1kjmz
JEoV/Z8vrBAxWSyXFMWD52iU4amf6rqSVizZUy62r6JnCXIrxSqsPLA0P03dljW9
Hev57U5RQ/IAsO6Ozgx0MOXNrEdDreNVILDRRvZWjxqp07Aq515oTan6fGA0wsBl
TW08kbOvUTNPdPQqoWEQAkJlenqaGNSEJyaF8J2JrWptv7pi9vKdhl4OLAbjUy/z
JirB+/DROWFr3Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:31:00 2026 by rpki-client