Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
File: bwVF620H5D0m7IQAymTMUbuVZv8.mft (raw, json)
Hash identifier: 1KZw1LSnLXJTBoWTP4F9fR6oJ4IQ2NsDesJrj4fLiF8=
Subject key identifier: 97:B0:A6:D9:77:03:3D:66:7C:54:F5:BF:E6:20:AE:98:5F:CF:F1:61
Authority key identifier: 6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
Certificate issuer: /CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Certificate serial: 01A0C47BB98DF111BFE19B5D885D2E5C5371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:00:37 +0000
Manifest this update: Mon 21 Sep 2026 15:00:37 +0000
Manifest next update: Tue 22 Sep 2026 15:00:37 +0000
Files and hashes: 1: bwVF620H5D0m7IQAymTMUbuVZv8.crl (hash: e51MlFX8ZzMalYEGfgzc1DccptfUo8p7x/OlUl1s05c=)
2: crSSmpcLdnTcx2ovWO2MVlxTArU.roa (hash: L7ZtPmmnI2aRhLMmMXfjqnVphR0y7J0Vd8zHZ1iyQFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:b9:8d:f1:11:bf:e1:9b:5d:88:5d:2e:5c:53:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Validity
Not Before: Sep 21 15:00:37 2026 GMT
Not After : Sep 22 15:00:37 2026 GMT
Subject: CN=97b0a6d977033d667c54f5bfe620ae985fcff161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:10:10:70:4e:ec:b2:4c:32:df:9a:89:d8:
c4:9d:b1:4e:61:6c:fd:20:b5:2a:05:23:cc:16:48:
4b:00:1a:c8:98:e9:6f:8c:cf:e6:f5:f3:aa:02:d5:
1c:3c:11:93:2b:00:8a:18:33:c0:b7:e3:63:c0:49:
87:b6:e3:46:3c:41:d3:d9:a1:71:f4:4f:d4:8a:13:
88:b0:2a:5b:cd:66:f0:3b:f6:75:a6:a7:1c:2f:b7:
76:66:b5:03:96:17:d9:ed:71:cf:3f:19:02:60:b1:
b2:ed:d1:b8:63:22:ec:53:cc:37:fb:29:f0:4b:f0:
f2:22:c2:6c:43:6a:1f:2b:4a:74:01:0b:47:e2:16:
c7:d8:97:1d:1e:96:3c:fa:35:57:91:b0:20:f7:af:
d5:fd:69:8c:1e:f7:8c:a7:3e:74:4f:89:23:63:f2:
2b:a4:e4:6f:7d:4b:b0:c3:fc:db:c3:b5:e5:57:2e:
f1:41:2e:91:19:c2:7c:3a:94:a2:db:b7:61:3b:2f:
6b:30:61:c9:01:3d:bb:1f:70:85:97:33:7c:fc:b4:
54:51:e5:a2:24:ff:51:bf:4d:72:92:e0:e5:aa:98:
4a:99:2b:f8:12:6b:e8:e8:cd:73:3a:f6:f3:40:5c:
8f:c5:f8:57:6a:de:e8:16:c3:fd:8f:9b:11:25:9b:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B0:A6:D9:77:03:3D:66:7C:54:F5:BF:E6:20:AE:98:5F:CF:F1:61
X509v3 Authority Key Identifier:
keyid:6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bd:42:a9:22:cb:f8:68:53:d4:7d:45:11:fd:c6:04:ac:84:
c3:4a:8a:82:30:cc:a3:63:16:8b:fb:3a:3e:98:f5:9a:5c:0a:
75:f1:5e:85:e5:52:0e:1b:41:3c:0c:4a:c5:5a:d4:c2:cc:f4:
15:1b:7f:8e:d0:ce:77:f3:4b:d2:1e:77:1f:07:6c:6e:a2:3f:
7f:51:54:cc:57:22:90:ea:ea:6c:e8:f5:4d:94:20:57:bd:f8:
58:2c:e0:dc:d6:70:14:4b:75:d4:32:92:b6:d1:64:36:d8:15:
33:ba:06:32:ce:cc:ae:22:33:38:5c:9b:b8:98:98:08:de:24:
2a:ac:d6:bb:1b:c8:27:a3:57:10:89:b4:4e:8f:a1:29:ae:5c:
7c:0c:a8:05:4e:6f:11:8f:04:8f:7f:93:e8:3f:a7:1f:90:6a:
74:13:cb:2f:a5:ba:2d:35:1d:d1:76:68:b6:13:cc:69:8f:9d:
ac:a6:81:dd:51:0c:10:ae:32:b7:53:81:b5:5f:b7:01:7d:af:
06:18:2d:41:da:27:5f:9d:06:d0:2d:62:6c:f8:47:17:fc:a3:
d9:dd:ff:56:6f:32:0d:9b:a2:84:89:f5:f8:50:79:45:63:6f:
6e:ba:9c:12:5b:29:dc:b9:60:a7:aa:7d:92:37:6c:52:16:62:
6f:6c:61:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:07:43 2026 by rpki-client