Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: YK5tKeUWWCQPOCmc4QJ9o5IoRolwJIb9b1WkqjqD3hU=
Subject key identifier: 7C:DF:24:AA:AA:BB:72:19:40:13:6B:E9:2E:69:D1:68:C0:A5:3C:9D
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 019D9B510259651F7B46B25ECB0AC93AB31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:01:10 +0000
Manifest this update: Fri 17 Apr 2026 12:01:10 +0000
Manifest next update: Sat 18 Apr 2026 12:01:10 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: hAAzggndbJGkzAMEgNtnb9Lk0cifFJvQjZPTJGluaS4=)
2: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (hash: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:02:59:65:1f:7b:46:b2:5e:cb:0a:c9:3a:b3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Apr 17 12:01:10 2026 GMT
Not After : Apr 18 12:01:10 2026 GMT
Subject: CN=7cdf24aaaabb721940136be92e69d168c0a53c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:55:7b:a0:b7:e6:e1:83:41:b3:53:29:87:
76:2c:a1:69:3e:11:6b:99:87:79:79:3b:7c:39:0d:
4e:5c:e0:d5:c6:7d:ff:c4:16:36:5e:c9:50:b7:b1:
35:42:c3:1b:bc:2a:8e:9a:a7:59:74:50:fd:3a:e0:
8f:98:10:ac:86:6c:ea:68:0e:e4:e5:74:b1:b5:4a:
f8:8e:3b:14:89:8f:39:eb:ab:e3:7b:b3:0d:92:8b:
df:de:73:d1:46:b4:06:c8:9c:2b:8e:d0:4b:ac:ff:
cf:82:84:c6:39:a2:3e:c2:f3:80:eb:8e:5c:b2:b6:
ac:73:ef:d8:ba:86:91:a5:75:87:67:23:1f:bf:84:
01:9c:7a:65:fa:25:49:0d:d6:68:c0:2c:57:4f:73:
22:3d:b7:2f:d3:ee:cc:3b:de:b3:b2:af:6f:48:11:
a8:ed:67:30:97:5c:a8:03:99:79:84:77:0f:3c:a6:
98:24:54:66:cc:dd:ec:d1:51:c5:17:38:71:7a:28:
10:67:8a:5d:44:07:f7:ed:f0:3c:1e:d3:d1:57:8a:
57:9c:0c:49:f2:b5:ee:be:7d:49:b5:b8:91:52:22:
ef:d7:56:cc:8f:8b:38:e3:2d:7c:77:bd:61:c6:a6:
9d:e7:05:56:88:d2:76:8c:a9:04:bb:ca:ce:0b:c8:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:24:AA:AA:BB:72:19:40:13:6B:E9:2E:69:D1:68:C0:A5:3C:9D
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:42:e0:d5:d4:0b:d7:62:2a:0a:b9:90:72:4f:59:5b:8b:9f:
ff:74:64:ca:ad:d8:27:37:fb:6a:d6:6c:f3:7d:96:77:80:2d:
20:c2:b6:d0:db:64:c1:cc:27:26:08:41:57:0c:4b:b3:4b:7a:
fb:86:84:8f:89:2d:0b:06:0f:58:bd:56:42:8d:ff:9c:c6:b4:
b1:99:08:c8:49:3e:d6:4f:6e:e0:d7:00:63:87:5e:55:12:11:
c1:e1:f4:8b:05:07:c7:dd:00:3e:1d:21:f7:e2:36:fe:0f:46:
05:06:f5:90:8a:82:1d:ad:33:36:3d:1c:a2:f5:2e:2c:e4:5b:
29:17:b6:af:c4:ed:74:41:5a:17:d6:9b:e9:13:05:41:1d:76:
c8:8b:51:4f:d1:bd:50:16:d5:5d:9b:d1:4b:c2:46:39:d4:90:
03:78:1a:9b:dc:13:4d:e1:8f:dd:de:11:08:9a:08:d2:ff:17:
98:34:a6:82:d4:0f:6e:d9:1b:70:83:30:20:c1:48:80:7e:ad:
a7:7d:1c:8f:0c:16:6c:41:73:7d:23:e6:b3:55:49:ee:e7:29:
cd:59:2f:2b:0b:e0:b9:18:7e:25:58:c4:bd:79:94:ee:c3:6a:
ca:0f:8c:9d:29:a6:e7:ad:4b:d2:ee:f0:d1:26:b1:33:83:1c:
41:be:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:35:46 2026 by rpki-client