
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: TMNdIPt0aUWJmcInpyleE2FofKmK5kfRpKbK0LUJG+g=
Subject key identifier: DF:F9:09:48:52:04:40:A2:72:0A:8F:6E:61:39:89:96:D1:3E:9D:C7
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 019D98BDFC1DC6E65E3BDE6EE1B9592A4DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 00:01:20 +0000
Manifest this update: Fri 17 Apr 2026 00:01:20 +0000
Manifest next update: Sat 18 Apr 2026 00:01:20 +0000
Files and hashes: 1: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: 4UJS5yu/aik7/GctSwApfRPD6zK4HdugHDLc+OAeYNQ=)
2: NaepKDUSFtPVzyjXT9VY683pv7k.roa (hash: ss+CQ2zxnFp/z8s24U9+WfPH3FxucLqO1Hzr/w2GZF4=)
3: tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa (hash: o/l+UfaRASye/WyLBJkfDvEuNMAWi4a+yJfDJFDSNrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:fc:1d:c6:e6:5e:3b:de:6e:e1:b9:59:2a:4d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Apr 17 00:01:20 2026 GMT
Not After : Apr 18 00:01:20 2026 GMT
Subject: CN=dff90948520440a2720a8f6e61398996d13e9dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:2b:4a:e1:8d:02:91:37:90:82:b1:44:01:
8b:74:96:db:21:1d:63:48:f9:31:50:5d:47:92:f8:
87:69:9b:d2:d3:c9:7c:22:6c:88:2b:83:e5:54:93:
52:c3:03:b0:4e:9b:23:1c:17:35:49:c1:82:45:29:
b8:08:4b:2e:2f:23:aa:35:87:2d:7a:ad:d2:b6:3e:
37:84:b1:e4:1f:d0:f3:52:6f:3d:b6:14:b8:ac:28:
7a:d7:b9:75:ce:35:04:86:52:5b:7d:b2:31:00:c1:
91:52:6d:96:79:47:72:71:5a:1d:94:a9:f1:d0:25:
11:9a:fe:81:59:92:a8:2d:83:4a:2a:73:e1:fc:38:
28:20:e6:96:bd:aa:5e:b7:a1:5e:49:e3:67:ed:12:
91:33:11:7e:38:80:a6:21:b5:69:53:13:e0:99:14:
6f:00:50:c1:f3:3b:a0:a1:6b:82:d3:35:be:dc:b1:
e1:d7:e1:2d:68:54:e0:fd:59:30:1c:15:f9:b3:4a:
d6:d1:64:ec:a9:06:5a:b4:2d:f7:a9:af:48:b9:38:
d2:2a:9b:ff:18:d3:a3:1b:9d:d4:67:58:e5:d3:2f:
d1:32:56:e8:bf:9a:b6:e0:e7:ce:33:57:bb:e3:3a:
a5:c3:ae:49:05:98:a1:7b:a5:36:b5:49:e2:55:60:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F9:09:48:52:04:40:A2:72:0A:8F:6E:61:39:89:96:D1:3E:9D:C7
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d2:ab:56:57:ea:35:97:37:94:fe:97:c6:24:3e:94:b8:ff:
32:f4:77:6c:93:ca:1c:1a:e2:b1:59:50:af:c9:da:56:b6:cc:
b3:ca:df:f5:16:74:3d:35:3e:6f:e1:39:ba:99:25:d1:a3:d0:
16:b0:61:44:cc:4c:2e:02:d5:7a:16:f1:c5:48:3a:87:cf:79:
79:ff:2c:6e:78:b6:c0:d4:f2:91:88:0f:0d:11:8c:b6:cd:7b:
42:d2:df:c2:17:2d:b2:65:95:b6:d3:48:5a:d6:f4:49:86:a4:
64:6d:8c:96:14:0e:7b:39:1c:70:1d:bf:8e:4d:d2:a4:47:42:
23:6a:08:37:a5:56:df:f7:bd:c9:f7:f4:be:c3:c8:76:e3:73:
ef:63:26:87:38:9d:ee:08:a6:66:28:0c:7c:17:de:6e:9e:ca:
30:02:6d:3c:85:7e:8b:3b:40:6c:70:6e:3e:92:05:2a:ba:9f:
08:27:20:d7:c4:18:c9:84:30:0e:16:d0:af:a6:41:26:24:9d:
b8:2d:b0:29:49:52:15:31:d1:ea:ab:97:18:3b:56:1c:14:20:
f0:d2:0e:07:95:79:23:82:79:b7:4c:9e:37:80:15:3f:36:06:
d8:d3:f0:41:71:94:fc:03:26:69:ec:40:20:a4:69:75:a2:db:
49:07:a5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:34 2026 by rpki-client