Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: v1iEVA9dZvNBcEuvA9DfQVR6/2Rd0r3f6hW+yD6sUZY=
Subject key identifier: 51:39:68:44:90:10:C8:B8:C6:7B:1D:FC:7C:63:2A:B2:C2:5C:4F:96
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 019CAA21ACE976BC2BDBC2097D726345A08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:00:59 +0000
Manifest this update: Sun 01 Mar 2026 16:00:59 +0000
Manifest next update: Mon 02 Mar 2026 16:00:59 +0000
Files and hashes: 1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=)
2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: QOidizrykxV71ivGg368vSd/TSEnoPCG4rR7oHIBYws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ac:e9:76:bc:2b:db:c2:09:7d:72:63:45:a0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Mar 1 16:00:59 2026 GMT
Not After : Mar 2 16:00:59 2026 GMT
Subject: CN=513968449010c8b8c67b1dfc7c632ab2c25c4f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:e8:35:79:de:93:85:a9:de:0b:d6:4f:7a:
ab:91:19:94:a3:4f:d9:54:22:e7:b3:43:28:18:3b:
23:0a:29:f4:85:3f:d2:a4:37:67:a2:57:8c:24:6c:
4f:90:4e:7f:ba:77:6f:5d:d5:be:11:d5:94:2c:d1:
34:e3:a3:92:ff:4a:16:7e:a3:5d:4c:23:76:63:ad:
74:3f:44:ba:24:8f:5d:89:36:5b:ac:cd:35:18:7f:
0e:21:32:91:92:52:5e:d6:a9:ca:77:d7:5a:f6:f6:
3a:2e:09:b7:17:a2:e3:ff:0c:a2:9b:0e:58:5e:fa:
84:56:e5:4f:a4:b6:ef:98:98:cb:e6:ca:65:85:11:
5c:36:0a:46:16:99:04:4d:fd:d4:55:90:13:53:39:
32:d3:06:36:cd:25:1e:95:cb:c2:1b:0b:7a:56:67:
aa:15:aa:2f:e0:cc:d9:f7:10:b1:68:e2:5a:3a:ca:
5c:9a:51:b8:0f:15:49:49:1e:87:78:91:60:40:61:
a4:c8:4a:ea:91:f6:5e:cf:af:00:40:a6:93:0f:48:
a8:3d:ec:c4:a9:b8:1b:80:5a:d1:aa:52:6d:c4:2c:
82:68:a5:02:eb:fd:01:39:15:18:5b:33:47:ff:06:
f2:6a:94:48:0c:11:ff:8d:68:df:b7:f3:07:ad:a3:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:39:68:44:90:10:C8:B8:C6:7B:1D:FC:7C:63:2A:B2:C2:5C:4F:96
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:46:ff:28:ef:b0:fb:26:a9:2c:f5:18:11:99:05:b5:f6:57:
ba:7c:d0:24:3f:8f:53:56:82:0c:10:78:2b:4b:e2:04:16:76:
74:dc:99:c1:c2:92:ba:fc:f3:be:03:d7:71:08:77:f8:32:6e:
a0:a4:aa:7b:c0:e6:8b:43:01:8f:5f:c0:03:26:7d:a0:26:3e:
db:a8:a6:71:99:7c:07:31:40:15:68:70:f2:9d:1e:ae:9d:d9:
59:8c:9f:b8:47:e5:e3:5f:24:b9:d9:66:20:8f:0a:ba:db:2e:
a1:a8:12:6c:1a:56:78:46:5f:50:ef:f7:37:99:8d:34:35:1d:
68:b2:d1:5e:11:db:c9:9c:ab:b7:36:6c:2a:7f:dc:8e:ab:7b:
ef:b7:37:0f:0e:2d:d0:21:c6:a1:d5:08:43:32:ba:22:c7:18:
cb:4d:fa:39:64:c6:0b:f8:8a:f6:9e:85:4b:d3:20:f2:d0:af:
21:ab:ff:74:3a:0a:88:79:fd:5d:e2:a9:cf:d6:43:93:52:13:
96:b7:c3:d1:bc:39:e7:ce:a9:e1:6b:f3:84:85:3b:57:11:7a:
ca:fd:91:f5:d1:6d:57:e9:0a:57:40:e2:26:a8:6c:dd:b4:93:
6d:97:54:d7:7d:ef:3f:26:d1:36:17:b5:52:b4:f6:4a:f0:dc:
de:e3:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:34 2026 by rpki-client