Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: A6CI7O69JdXV3lXUIQ0ZPciKLkJkau2itzk9kH69tLw=
Subject key identifier: DA:62:97:51:2C:78:12:E7:AD:E7:58:BD:70:8E:76:28:A0:18:AC:0E
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 01A0C3D73D9C7F88F910BC63F45AE85868BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 1A6F
Signing time: Mon 21 Sep 2026 12:00:58 +0000
Manifest this update: Mon 21 Sep 2026 12:00:58 +0000
Manifest next update: Tue 22 Sep 2026 12:00:58 +0000
Files and hashes: 1: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: vTlfnFgMS/eeSHhPvI8B+B4nnPgSUerGnn4vjm5ArA8=)
2: NaepKDUSFtPVzyjXT9VY683pv7k.roa (hash: ss+CQ2zxnFp/z8s24U9+WfPH3FxucLqO1Hzr/w2GZF4=)
3: tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa (hash: o/l+UfaRASye/WyLBJkfDvEuNMAWi4a+yJfDJFDSNrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:3d:9c:7f:88:f9:10:bc:63:f4:5a:e8:58:68:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Sep 21 12:00:58 2026 GMT
Not After : Sep 22 12:00:58 2026 GMT
Subject: CN=da6297512c7812e7ade758bd708e7628a018ac0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:65:38:21:34:38:88:d7:1e:a9:bc:45:d4:
ce:6d:3b:8f:c0:31:4c:a4:23:51:70:50:9e:ac:b7:
f8:ac:80:d8:8e:12:40:b5:ad:27:66:6c:02:70:94:
18:7b:e9:a5:fc:d8:29:dd:00:2a:58:80:a0:4d:8d:
fb:7b:c6:32:6e:ee:fe:ff:89:74:b7:58:a3:89:cc:
33:65:d4:02:f8:80:79:3b:b5:34:ca:f0:cc:f5:74:
57:e8:67:6d:6a:75:dd:80:72:51:6f:69:c2:03:28:
6a:83:fc:57:e6:13:60:83:4f:5a:d7:53:0f:e1:e1:
fa:00:98:76:fc:e7:9e:88:54:91:fc:3b:c5:14:e9:
bd:fc:bd:28:f2:5a:f9:ff:d9:32:19:d3:8c:87:55:
bf:61:24:1b:fd:b5:11:a3:a4:76:70:83:ab:04:42:
32:b1:2f:2b:b5:4a:23:58:55:52:b7:a4:01:86:d7:
59:aa:9c:94:70:2e:05:67:af:16:fc:5c:35:39:66:
a4:f1:e2:b8:71:99:66:5b:89:2e:06:0e:9e:2f:a2:
07:3a:ca:54:84:d8:a4:c9:b2:1a:54:c1:7f:52:21:
c3:b4:ed:5e:24:b0:a3:2a:06:cf:d2:09:ca:04:eb:
bd:7f:20:05:b0:74:36:29:12:e8:63:89:0e:0a:33:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:62:97:51:2C:78:12:E7:AD:E7:58:BD:70:8E:76:28:A0:18:AC:0E
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cc:d1:ed:f0:18:71:61:00:8b:0d:3f:4a:6d:18:26:d5:7d:
0c:b7:5e:d1:61:c6:7d:0e:d5:cd:64:91:59:6a:cd:9b:f9:28:
10:bc:e4:9a:4a:f5:3d:32:ad:2d:54:4e:e3:b2:de:33:53:2c:
66:98:2c:2d:1c:2f:75:56:93:56:77:63:56:a7:16:fe:2e:af:
e0:7d:1d:e1:1b:ec:17:3e:da:50:a7:28:dd:0f:49:99:9b:a9:
28:f7:1f:a9:68:0c:f1:12:fa:ef:e5:d9:2f:23:d9:6b:c2:08:
1d:df:34:2f:50:2e:76:93:53:9c:a8:98:61:8e:67:b9:9d:68:
db:dd:40:44:11:2e:4a:51:2c:7f:ea:f4:84:b5:10:52:09:d2:
9e:96:ad:bc:16:51:2f:85:26:ef:9a:31:34:8e:d6:0e:83:06:
67:2c:4a:16:83:65:1f:ca:8a:a4:69:ef:57:d3:2b:8a:5f:9a:
ec:ad:c0:f1:1a:14:12:f7:de:23:48:52:bc:7a:98:16:7a:5d:
8f:c3:d7:97:7b:be:48:1d:e4:03:70:60:e0:ca:b6:71:fa:1d:
9c:2d:28:50:a3:62:4c:1a:ee:80:0d:e5:be:21:a5:56:e8:49:
a5:c6:26:9f:0b:4c:a3:77:45:5d:84:d2:8e:ae:8d:fd:87:99:
26:23:51:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1z2cf4j5ELxj9FroWGi/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmFkMmY0ZmZjNTg3MmUzNWE0MjllNTNlZjE3OTkyNWZm
NDIxNWUwHhcNMjYwOTIxMTIwMDU4WhcNMjYwOTIyMTIwMDU4WjAzMTEwLwYDVQQD
EyhkYTYyOTc1MTJjNzgxMmU3YWRlNzU4YmQ3MDhlNzYyOGEwMThhYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv5lOCE0OIjXHqm8RdTObTuPwDFM
pCNRcFCerLf4rIDYjhJAta0nZmwCcJQYe+ml/Ngp3QAqWICgTY37e8Yybu7+/4l0
t1ijicwzZdQC+IB5O7U0yvDM9XRX6GdtanXdgHJRb2nCAyhqg/xX5hNgg09a11MP
4eH6AJh2/OeeiFSR/DvFFOm9/L0o8lr5/9kyGdOMh1W/YSQb/bURo6R2cIOrBEIy
sS8rtUojWFVSt6QBhtdZqpyUcC4FZ68W/Fw1OWak8eK4cZlmW4kuBg6eL6IHOspU
hNikybIaVMF/UiHDtO1eJLCjKgbP0gnKBOu9fyAFsHQ2KRLoY4kOCjPSywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpil1EseBLnredYvXCOdiigGKwOMB8GA1UdIwQY
MBaAFAVq0vT/xYcuNaQp5T7xeZJf9CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDkt
MWU0ZmNiMWM2MGNiLzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDktMWU0ZmNiMWM2MGNi
LzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeczR7fAY
cWEAiw0/Sm0YJtV9DLde0WHGfQ7VzWSRWWrNm/koELzkmkr1PTKtLVRO47LeM1Ms
ZpgsLRwvdVaTVndjVqcW/i6v4H0d4RvsFz7aUKco3Q9JmZupKPcfqWgM8RL67+XZ
LyPZa8IIHd80L1AudpNTnKiYYY5nuZ1o291ARBEuSlEsf+r0hLUQUgnSnpatvBZR
L4Um75oxNI7WDoMGZyxKFoNlH8qKpGnvV9Mril+a7K3A8RoUEvfeI0hSvHqYFnpd
j8PXl3u+SB3kA3Bg4Mq2cfodnC0oUKNiTBrugA3lviGlVuhJpcYmnwtMo3dFXYTS
jq6N/YeZJiNR2Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:12:52 2026 by rpki-client