Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier: zplxoWewW5fqUwHeGPYslu1/IIVbOLJmTO8PVKGYm/0=
Subject key identifier: 66:93:2D:3A:26:18:07:F2:F3:B4:98:37:BD:65:AA:DD:42:0E:99:F1
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 019FA9E2AE6B7A0E90D3CDBD76EB7D139D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number: 16EC
Signing time: Tue 28 Jul 2026 18:00:33 +0000
Manifest this update: Tue 28 Jul 2026 18:00:33 +0000
Manifest next update: Wed 29 Jul 2026 18:00:33 +0000
Files and hashes: 1: 4JooT1dtaJ-Oj9ZxTyi2WnEpKME.roa (hash: cyoCTuFn1vjpLgXxKEUMlZpj5yZCfKc5JRVXpWpJdPM=)
2: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: q9hsgK9WwY3sQpjOFql3pAf8x02n5BlEemf2z5wKiAw=)
3: UGbEkxCpgIgbGLxk27Wm3SPCyJ4.roa (hash: 9BAJwC8dHNf7o1oGSFxTfLRm+0EXXChq88i9t5OvHD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ae:6b:7a:0e:90:d3:cd:bd:76:eb:7d:13:9d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Jul 28 18:00:33 2026 GMT
Not After : Jul 29 18:00:33 2026 GMT
Subject: CN=66932d3a261807f2f3b49837bd65aadd420e99f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:52:bd:72:6f:b7:e0:d9:4c:fa:37:ff:3d:
30:6f:85:99:ed:72:cc:f3:10:52:f2:2a:58:a4:ef:
75:35:a7:05:1a:45:43:35:89:dd:27:17:e2:25:ef:
a6:ca:1f:33:b8:64:4c:a3:eb:e1:c4:4a:04:90:ae:
ac:6c:d8:b2:8c:5b:8f:f0:df:a6:47:b0:30:c6:14:
ab:23:11:d9:9c:e7:44:66:bb:f4:77:4e:91:26:f2:
19:26:ef:9a:c9:f2:cf:73:5c:29:44:c2:de:97:c0:
86:0d:7f:44:f5:0f:c8:97:94:d7:4d:a7:5d:87:0d:
00:56:d7:8c:46:1a:0b:d2:96:84:98:92:7b:25:da:
2b:e6:8d:c2:45:28:89:1f:13:f1:c1:b4:c0:08:da:
ba:77:cd:0b:ab:56:00:03:1a:a2:d0:d5:ef:bc:80:
f5:87:70:26:09:7d:29:2c:94:09:5c:27:60:ba:7f:
3c:c9:41:8d:e3:9b:73:ea:5c:da:4b:5a:cd:de:9e:
3c:2a:04:32:34:08:10:24:7a:f6:3a:86:b4:ee:2d:
cc:d3:1b:19:7c:8d:bb:2b:69:c2:53:33:34:f9:51:
0f:d6:9f:08:22:46:4b:db:52:f9:c5:f9:d9:4b:03:
94:85:34:cd:24:82:74:25:9f:3b:1b:e7:98:32:12:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:93:2D:3A:26:18:07:F2:F3:B4:98:37:BD:65:AA:DD:42:0E:99:F1
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bb:03:19:51:6d:a6:0c:12:a4:55:f8:a8:67:67:9c:71:0a:
47:c4:e5:00:16:11:1d:5c:76:b1:ab:3c:20:1a:0e:ef:f8:56:
e3:9a:da:27:76:ec:cb:19:f9:18:f8:3d:e9:1c:b6:dc:1c:2e:
21:c8:d3:a0:3d:b9:de:98:c8:d4:9c:36:8e:87:05:69:5d:dd:
6f:38:fe:4a:eb:bb:0b:17:07:b6:67:27:09:07:60:fa:a9:97:
8e:27:95:fe:fc:cd:1d:d2:b9:92:ee:4e:0a:fe:8d:64:2f:02:
14:61:83:5e:fb:f8:d3:9d:2f:c8:0d:60:84:07:37:79:8b:14:
7e:ed:4e:30:de:f9:60:39:b3:c5:d4:4d:a8:0a:10:d0:1c:e4:
89:3d:0a:0a:e0:b0:11:85:7c:5b:9e:ca:cf:38:14:62:12:b9:
af:b7:5e:63:76:9e:94:27:d9:62:8d:a8:fc:56:73:99:04:cf:
ac:e5:69:04:07:5d:66:8b:fd:37:65:cc:ce:74:31:09:39:9a:
1f:a1:d3:5c:51:94:ce:57:45:43:30:1e:19:ee:d5:2b:c1:e1:
58:fe:20:94:e4:c2:4a:5a:d8:7d:e8:10:48:8d:ee:70:77:c0:
65:23:72:f7:2d:fc:50:97:a1:cb:ed:cc:ec:60:34:9d:a1:19:
0e:15:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:56 2026 by rpki-client