Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: X1kI+szGh5z11kftP/u84mVMAXsLRPgZEJ46ENi3la0=
Subject key identifier: 5B:D7:F1:23:CA:3F:12:5E:25:C3:95:AF:C5:9E:B6:32:07:04:5F:E3
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 01A0C6D80FE159310863E54B90E82AA48CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 02:00:43 +0000
Manifest this update: Tue 22 Sep 2026 02:00:43 +0000
Manifest next update: Wed 23 Sep 2026 02:00:43 +0000
Files and hashes: 1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=)
2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: W9yVBnR1wVHkLdfqGr4mAv/uBU0QDpLqpz0dsi08YA4=)
3: IrgZXbsjh204onicFzimaq0fKao.asa (hash: 9uFvP0C57royCY6ILUpJIJN8Q/WGwEUztAWeXpOyUhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:0f:e1:59:31:08:63:e5:4b:90:e8:2a:a4:8c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Sep 22 02:00:43 2026 GMT
Not After : Sep 23 02:00:43 2026 GMT
Subject: CN=5bd7f123ca3f125e25c395afc59eb63207045fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:d8:0e:67:42:96:70:2e:d9:35:eb:ed:ce:
ef:66:ab:a0:d5:44:6b:c9:79:6c:41:ca:b6:c3:1b:
78:d4:49:69:0b:cb:73:64:62:61:c5:44:90:c3:9c:
c7:20:e9:fb:35:c9:b5:92:52:40:22:8b:8e:f2:d2:
f9:8d:64:32:1f:aa:c8:0b:1e:c8:b5:ea:dc:07:b0:
df:ea:78:c4:c8:87:fe:ab:05:dd:f8:bf:fe:3d:cf:
e2:3e:86:c3:ca:a6:39:3d:ef:a0:97:b9:ce:06:a6:
62:53:68:0f:65:8b:2a:50:34:dc:12:d7:34:3f:75:
cb:79:c9:cf:9e:98:b7:12:78:03:93:58:d1:59:0f:
f9:57:96:41:70:fe:ed:53:19:ed:b6:84:c7:85:b4:
d4:ae:7c:a8:3c:0f:83:25:cd:09:e6:59:8b:4d:be:
c5:e3:a2:a2:76:59:b2:7d:17:d7:29:41:7e:e5:94:
66:9f:47:38:1a:46:af:42:4d:d8:a6:80:6b:bf:37:
ba:db:3d:f3:09:6d:28:fe:64:15:71:e2:b7:f7:18:
07:a5:4d:5f:e5:11:c2:4d:67:52:83:39:94:79:d9:
41:fe:d7:02:ee:bf:9b:93:d0:b5:8c:31:9d:1b:63:
d2:ff:f1:78:9a:36:46:6b:04:21:66:7d:bb:91:1c:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D7:F1:23:CA:3F:12:5E:25:C3:95:AF:C5:9E:B6:32:07:04:5F:E3
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:47:54:bb:02:35:84:cb:aa:34:8a:e0:29:72:bb:19:f0:29:
fe:74:60:50:36:6d:9c:f0:ca:fd:aa:3b:11:d1:30:1f:30:2e:
11:ee:60:36:89:3a:28:bb:ff:e8:48:e2:91:25:71:48:3f:44:
cb:dc:a5:04:b7:19:f4:0a:a5:0c:58:21:18:3b:78:ef:66:da:
18:d2:5f:5e:8b:50:d1:d7:1a:e2:b7:ce:26:1e:c7:fa:39:40:
92:b1:34:50:a1:0c:83:18:23:9a:4f:e2:29:4f:14:78:5a:c8:
f1:fd:43:42:80:da:cb:1a:04:9f:37:7a:b9:38:f1:e5:5c:93:
04:7d:28:5c:2a:01:6d:a8:df:dd:b9:a4:b7:f9:e4:ec:00:28:
ca:07:8e:09:81:09:90:a3:9a:24:76:eb:7b:70:28:05:62:99:
9f:7c:0e:fb:15:21:44:a6:04:a8:1a:66:78:eb:ea:9b:78:81:
57:f8:a0:f4:34:02:f6:f9:18:31:96:c2:65:14:f7:bc:d8:06:
2b:6e:e7:ea:7e:c8:8c:c1:dd:30:e3:12:c7:db:e3:e3:97:c6:
b7:55:34:94:1b:06:b7:09:23:0e:a9:d4:f2:61:bc:cf:44:a7:
d4:e2:2b:cb:18:b5:36:28:20:3c:2d:e8:fb:8e:08:97:97:0d:
34:46:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:30:42 2026 by rpki-client