Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: CUPIxLBfvtE9dIIl42CVkAEZ640DEZ/M21If43ikc0I=
Subject key identifier: 52:83:39:F4:ED:18:24:2A:BD:01:67:C4:37:02:28:B3:08:7A:FC:0B
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 019CABD93ED0659409A37613BE326DF36D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:07 +0000
Manifest this update: Mon 02 Mar 2026 00:01:07 +0000
Manifest next update: Tue 03 Mar 2026 00:01:07 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: miEL3/CbELNLq50akzVqooa4qzxMi+vyG8z30x0uT7k=)
2: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (hash: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3e:d0:65:94:09:a3:76:13:be:32:6d:f3:6d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Mar 2 00:01:07 2026 GMT
Not After : Mar 3 00:01:07 2026 GMT
Subject: CN=528339f4ed18242abd0167c4370228b3087afc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:dc:c8:06:e5:21:45:e1:e0:a5:1a:02:6d:
90:a4:7f:ed:6f:f6:08:c7:e9:2f:4b:c4:82:49:92:
99:83:c9:64:ce:dd:25:62:76:7f:b9:a5:b0:f9:c5:
4c:f0:a4:13:3b:fb:38:9d:9a:a5:47:9f:c8:75:44:
b3:4a:21:70:2a:c0:b9:37:ef:0c:83:a0:8c:89:5e:
28:3c:d1:a7:57:87:e7:ca:92:31:bd:c5:eb:c3:9f:
8f:fd:17:c0:dc:96:91:82:8a:b2:c2:a3:6f:5e:ce:
00:ef:b7:9e:6a:d3:70:41:d3:0e:39:35:2c:7c:7d:
8f:2d:1c:b1:6e:71:d6:b0:c2:a5:7f:6f:b8:de:62:
90:c6:1a:65:3b:a3:cd:55:c1:4c:0e:fa:ce:69:e5:
78:49:fc:8e:fe:a3:11:e9:68:33:f1:58:40:df:20:
b1:d6:c9:79:c6:b0:89:8a:5f:e6:95:88:9b:a9:9d:
c6:fb:fc:b1:45:0a:73:06:5d:03:2b:b7:ee:19:50:
5a:ec:4c:ba:88:19:66:98:84:f0:16:62:32:f9:84:
67:cd:8d:89:94:59:61:0d:1f:3b:ab:57:c6:55:70:
fc:49:02:a7:69:34:e2:22:47:0d:1e:79:28:7c:13:
15:08:4f:12:9f:08:5a:ee:22:b7:93:19:c8:c6:1f:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:83:39:F4:ED:18:24:2A:BD:01:67:C4:37:02:28:B3:08:7A:FC:0B
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:de:d5:38:fe:59:c2:d9:59:5a:ad:2a:bf:bf:7b:67:3f:56:
d8:59:1c:8d:68:e2:7e:f9:46:43:88:ad:5d:cc:04:49:ef:cf:
13:f5:ec:a3:b0:9f:b3:5e:c2:2e:0f:93:52:3a:b5:56:bb:2d:
36:43:89:34:61:21:01:0d:14:34:db:63:9b:b5:78:be:9a:4d:
2f:c9:bc:6a:0a:d5:1a:07:e5:46:03:fa:62:c0:dc:2e:a7:9e:
e3:2d:cb:cd:2f:67:10:33:1e:3c:67:30:21:0a:8a:fd:dc:75:
4e:1a:a9:b4:48:7f:01:98:62:95:a1:d0:8c:32:46:c1:57:51:
fe:54:a8:92:ba:8f:dc:6f:b4:9d:52:c0:80:87:f4:34:d6:2f:
b9:12:47:c2:74:31:28:99:19:cb:bd:90:5d:d7:34:a6:1d:72:
3d:6b:1b:e5:8b:72:b8:d8:6d:39:46:2c:60:0d:25:e1:8e:29:
e2:76:c1:56:3e:1c:aa:b8:ce:63:5a:d7:8d:8a:20:fd:7f:02:
71:8a:db:0d:c9:3c:7f:df:e2:db:20:c0:39:be:57:12:ce:ee:
77:5a:a6:7d:b3:df:d5:31:19:5c:9a:65:32:1e:ea:54:4a:77:
ec:10:49:a2:89:bf:13:c3:52:b6:f6:a6:a9:67:f3:11:61:5d:
8f:3b:cd:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2T7QZZQJo3YTvjJt820XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3
MGIxZmEwHhcNMjYwMzAyMDAwMTA3WhcNMjYwMzAzMDAwMTA3WjAzMTEwLwYDVQQD
Eyg1MjgzMzlmNGVkMTgyNDJhYmQwMTY3YzQzNzAyMjhiMzA4N2FmYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32vcyAblIUXh4KUaAm2QpH/tb/YI
x+kvS8SCSZKZg8lkzt0lYnZ/uaWw+cVM8KQTO/s4nZqlR5/IdUSzSiFwKsC5N+8M
g6CMiV4oPNGnV4fnypIxvcXrw5+P/RfA3JaRgoqywqNvXs4A77eeatNwQdMOOTUs
fH2PLRyxbnHWsMKlf2+43mKQxhplO6PNVcFMDvrOaeV4SfyO/qMR6Wgz8VhA3yCx
1sl5xrCJil/mlYibqZ3G+/yxRQpzBl0DK7fuGVBa7Ey6iBlmmITwFmIy+YRnzY2J
lFlhDR87q1fGVXD8SQKnaTTiIkcNHnkofBMVCE8Snwha7iK3kxnIxh/u9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKDOfTtGCQqvQFnxDcCKLMIevwLMB8GA1UdIwQY
MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It
ODU0OTMwNDZlYzQ2LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2
LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYN7VOP5Z
wtlZWq0qv797Zz9W2FkcjWjifvlGQ4itXcwESe/PE/Xso7Cfs17CLg+TUjq1Vrst
NkOJNGEhAQ0UNNtjm7V4vppNL8m8agrVGgflRgP6YsDcLqee4y3LzS9nEDMePGcw
IQqK/dx1ThqptEh/AZhilaHQjDJGwVdR/lSokrqP3G+0nVLAgIf0NNYvuRJHwnQx
KJkZy72QXdc0ph1yPWsb5YtyuNhtOUYsYA0l4Y4p4nbBVj4cqrjOY1rXjYog/X8C
cYrbDck8f9/i2yDAOb5XEs7ud1qmfbPf1TEZXJplMh7qVEp37BBJoom/E8NStvam
qWfzEWFdjzvNIw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:08 2026 by rpki-client