Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
File: bwVF620H5D0m7IQAymTMUbuVZv8.mft (raw, json)
Hash identifier: pD+ZGK0GwQGVUYLPZlO7kWXTOxIfOeCrPK7vtgdYnbE=
Subject key identifier: C5:C2:FE:8E:00:87:7D:1E:C3:3A:43:EF:30:B7:66:CB:85:16:DA:35
Authority key identifier: 6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
Certificate issuer: /CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Certificate serial: 019FAC77197F1983809B3A7C7240D5EADFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:54 +0000
Manifest this update: Wed 29 Jul 2026 06:01:54 +0000
Manifest next update: Thu 30 Jul 2026 06:01:54 +0000
Files and hashes: 1: bwVF620H5D0m7IQAymTMUbuVZv8.crl (hash: 12L/WCe5jooloB9i046AnHwUKJlvgH5SLMwSALqX7+M=)
2: crSSmpcLdnTcx2ovWO2MVlxTArU.roa (hash: L7ZtPmmnI2aRhLMmMXfjqnVphR0y7J0Vd8zHZ1iyQFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:19:7f:19:83:80:9b:3a:7c:72:40:d5:ea:df:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Validity
Not Before: Jul 29 06:01:54 2026 GMT
Not After : Jul 30 06:01:54 2026 GMT
Subject: CN=c5c2fe8e00877d1ec33a43ef30b766cb8516da35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:92:e8:34:28:9c:6b:f7:b8:94:e7:f3:a4:
e4:35:e9:44:7b:cb:95:89:f2:42:c0:38:88:8b:02:
f9:8a:2e:b3:e2:d3:0c:28:ce:15:ce:ad:cb:d2:ac:
cb:07:54:82:ec:3a:97:14:1b:68:e9:12:e2:fa:78:
dd:02:d3:9a:d1:ce:5c:f0:a9:ed:65:23:d4:c3:12:
ac:f7:42:d3:a7:a1:5c:7d:8f:12:2e:9b:b4:f6:a8:
b8:67:60:9f:53:4c:93:a0:e0:94:1d:26:c4:7e:8a:
94:3e:39:68:54:71:e4:57:30:24:52:9d:dc:60:39:
e6:03:49:15:a5:6f:06:56:b6:b5:24:5a:a8:0d:08:
7e:7a:21:26:70:25:d6:f3:e5:72:f4:64:29:1e:ae:
54:e4:58:71:eb:eb:4b:c7:82:10:8b:95:36:9a:70:
74:69:3a:f8:59:06:c4:ef:a6:5c:b5:98:14:fa:4f:
90:2d:80:52:14:d3:67:7e:c4:37:ad:d1:9f:ba:dc:
22:34:7a:0a:29:05:aa:2a:1c:47:fb:53:8c:ce:c9:
fd:e1:f6:9a:b4:9f:25:c0:44:ce:13:fe:db:81:86:
23:e7:c2:12:6c:d4:0a:c1:b0:14:ac:ec:78:98:2a:
71:7c:f4:e8:7c:2c:fa:20:27:50:a5:d9:09:12:8c:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:FE:8E:00:87:7D:1E:C3:3A:43:EF:30:B7:66:CB:85:16:DA:35
X509v3 Authority Key Identifier:
keyid:6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3b:94:f3:8d:7e:6e:2c:fd:e9:af:d5:ab:0b:9f:12:8f:0c:
a8:ef:31:6c:55:34:5c:40:ff:1b:11:29:c9:89:dd:7c:c6:c7:
9b:88:f4:e4:a6:7a:45:c6:36:27:c1:49:1a:65:e8:4a:73:0b:
aa:ab:de:5e:f5:52:73:0a:79:bc:73:07:e8:16:0c:99:21:8e:
aa:e3:e5:bf:4e:b4:d5:db:16:95:14:b1:ee:c5:60:ec:14:69:
83:bc:57:3c:ba:a0:e8:24:8b:2b:54:42:b8:5f:43:9b:e1:aa:
d2:df:e2:ba:86:60:41:c0:dd:b3:ed:86:00:97:93:a9:a4:3e:
92:13:54:13:66:fb:ec:ef:42:99:47:bc:06:93:ed:55:9e:b5:
6f:9d:c0:b6:04:68:cd:15:8a:54:c5:07:62:f9:3e:08:69:4d:
0f:26:cc:2b:6a:6f:36:58:af:14:86:2a:12:dc:d4:28:65:76:
09:18:e7:16:6b:2d:69:48:ab:ed:89:2a:1e:27:c7:ff:22:36:
3e:03:0b:25:23:d7:3e:a1:c4:25:41:87:6a:ed:ad:79:dd:e9:
a2:c2:7f:5a:cd:25:94:fa:97:08:36:5f:df:9d:c5:13:d1:a6:
7a:90:a5:9b:30:0a:29:04:d1:8c:4f:af:4e:04:90:3b:eb:0b:
07:cc:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:43:12 2026 by rpki-client