Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier: h/DCnEB0S/9Q5g8QhRwHogfwLa7yn/mnWSa6YWLZq1Y=
Subject key identifier: 53:1D:EC:7D:D8:34:78:E5:F5:B9:EA:3F:66:B1:A3:40:53:20:3F:EC
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 019CAD229B974CF15038753BF65C1A7B52F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number: 1560
Signing time: Mon 02 Mar 2026 06:00:52 +0000
Manifest this update: Mon 02 Mar 2026 06:00:52 +0000
Manifest next update: Tue 03 Mar 2026 06:00:52 +0000
Files and hashes: 1: 4JooT1dtaJ-Oj9ZxTyi2WnEpKME.roa (hash: cyoCTuFn1vjpLgXxKEUMlZpj5yZCfKc5JRVXpWpJdPM=)
2: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: b9r2H1CiNLRtXDGxkqZAtIFRN/Fj9vj2y6DNHESBLV0=)
3: UGbEkxCpgIgbGLxk27Wm3SPCyJ4.roa (hash: 9BAJwC8dHNf7o1oGSFxTfLRm+0EXXChq88i9t5OvHD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:9b:97:4c:f1:50:38:75:3b:f6:5c:1a:7b:52:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Mar 2 06:00:52 2026 GMT
Not After : Mar 3 06:00:52 2026 GMT
Subject: CN=531dec7dd83478e5f5b9ea3f66b1a34053203fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:00:64:2d:cc:f9:ab:8e:56:6b:1e:ab:bd:
87:4f:80:93:a5:3c:29:a6:4f:c1:17:37:99:91:cf:
25:04:59:cb:50:7b:10:c6:1d:f1:4b:23:a9:4d:5b:
53:e6:3e:65:a0:86:58:dd:43:34:6d:d0:bb:9a:2f:
cb:15:45:e4:25:fb:ff:e5:12:89:f1:3c:8e:4e:bf:
06:f2:90:fa:d0:8b:3b:f6:73:33:27:0a:64:d7:d8:
22:69:d0:43:b6:d5:8b:68:db:1c:93:a6:dd:c2:4d:
40:93:dd:c3:ec:0c:5d:07:5c:21:84:87:5c:28:94:
49:4c:86:41:b7:62:3c:f0:39:cc:6d:66:da:c0:e1:
df:f2:e7:8e:34:21:07:dc:5e:47:6f:c1:2f:88:60:
b1:c8:87:9c:0a:3d:14:e5:58:52:01:63:ff:30:56:
57:f5:3c:48:e1:23:95:95:a7:3a:32:b5:68:33:e7:
b7:0d:b8:47:55:3a:95:76:61:91:84:51:42:3b:74:
b9:5d:e1:3d:c8:b6:7f:50:12:bd:ba:9d:4c:f7:2b:
f4:69:66:06:14:ae:83:e8:de:14:83:52:ab:e6:0d:
43:0d:ad:74:46:e9:fb:a0:e8:97:16:7e:4c:2e:de:
79:e0:f6:66:64:13:ee:16:50:6e:fa:37:24:d0:c5:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1D:EC:7D:D8:34:78:E5:F5:B9:EA:3F:66:B1:A3:40:53:20:3F:EC
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2b:01:c8:90:b0:ab:ca:44:97:60:3b:b6:a5:9b:72:8d:ef:
64:29:19:1b:c0:c1:77:e1:e8:2e:a3:cd:02:05:4f:e9:2e:37:
3f:c4:b0:dc:6d:cc:87:a2:81:d2:b4:ca:18:e7:5c:1e:f7:01:
ef:d0:e7:d3:b9:e4:0a:7d:1e:41:35:8c:5a:4e:1a:b6:35:cb:
1f:85:e2:51:e4:fd:d2:e7:72:0b:9c:fa:55:c1:25:42:11:88:
7b:74:97:e0:e8:6c:2f:ba:6d:34:50:00:68:eb:88:41:64:12:
bc:78:61:51:3d:40:b3:11:7b:46:5e:e0:34:91:ba:e8:c6:45:
a9:38:4a:41:5e:ad:70:cd:a8:15:52:db:05:ee:b2:b9:06:5b:
a4:33:00:8c:fd:b2:1a:ee:16:c4:36:02:40:68:6a:2e:5d:1d:
51:fb:94:92:0f:a5:08:96:6c:ca:81:e5:2e:b1:54:cb:31:af:
e1:27:ae:a1:5e:df:ed:e6:60:18:f0:18:f8:e9:33:4a:18:f9:
c9:8e:8f:a1:69:66:7d:e9:6f:ff:cc:3b:12:7c:91:14:73:f8:
b7:84:75:ec:81:d7:3b:20:47:3f:63:9f:39:2d:47:74:ae:3d:
92:9a:1d:85:c6:9a:a2:d1:5a:9e:bc:44:94:39:9a:c0:e9:06:
c4:81:06:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIpuXTPFQOHU79lwae1L3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjQ3MGQ4MWIyOGRjNTI4ZTVmMjhkYjBiYjVmNmQyOTQ2
MTFhNjUwHhcNMjYwMzAyMDYwMDUyWhcNMjYwMzAzMDYwMDUyWjAzMTEwLwYDVQQD
Eyg1MzFkZWM3ZGQ4MzQ3OGU1ZjViOWVhM2Y2NmIxYTM0MDUzMjAzZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL0AZC3M+auOVmseq72HT4CTpTwp
pk/BFzeZkc8lBFnLUHsQxh3xSyOpTVtT5j5loIZY3UM0bdC7mi/LFUXkJfv/5RKJ
8TyOTr8G8pD60Is79nMzJwpk19giadBDttWLaNsck6bdwk1Ak93D7AxdB1whhIdc
KJRJTIZBt2I88DnMbWbawOHf8ueONCEH3F5Hb8EviGCxyIecCj0U5VhSAWP/MFZX
9TxI4SOVlac6MrVoM+e3DbhHVTqVdmGRhFFCO3S5XeE9yLZ/UBK9up1M9yv0aWYG
FK6D6N4Ug1Kr5g1DDa10Run7oOiXFn5MLt554PZmZBPuFlBu+jck0MVotwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMd7H3YNHjl9bnqP2axo0BTID/sMB8GA1UdIwQY
MBaAFAVkcNgbKNxSjl8o2wu19tKUYRplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAt
OTNhODgyMjFkZWYyLzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAtOTNhODgyMjFkZWYy
LzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSsByJCw
q8pEl2A7tqWbco3vZCkZG8DBd+HoLqPNAgVP6S43P8Sw3G3Mh6KB0rTKGOdcHvcB
79Dn07nkCn0eQTWMWk4atjXLH4XiUeT90udyC5z6VcElQhGIe3SX4OhsL7ptNFAA
aOuIQWQSvHhhUT1AsxF7Rl7gNJG66MZFqThKQV6tcM2oFVLbBe6yuQZbpDMAjP2y
Gu4WxDYCQGhqLl0dUfuUkg+lCJZsyoHlLrFUyzGv4SeuoV7f7eZgGPAY+OkzShj5
yY6PoWlmfelv/8w7EnyRFHP4t4R17IHXOyBHP2OfOS1HdK49kpodhcaaotFanrxE
lDmawOkGxIEGTA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:17 2026 by rpki-client