Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: wOtVM1ez7YwyagJpcUUTJ7Vb2itGBei/qZaHdOT+H7E=
Subject key identifier: FB:4F:53:CF:69:48:FA:94:C4:C3:BF:F0:E8:B6:BB:FC:78:FC:2E:24
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019D9886DA2FEEF3965D72C2090B226EA1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 23:01:07 +0000
Manifest this update: Thu 16 Apr 2026 23:01:07 +0000
Manifest next update: Fri 17 Apr 2026 23:01:07 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: ax7dKOt2pHEOrtlJZbRV1uRSE3ZnCw0W5DKXGlstVyE=)
2: WHq-HnXpka6rpneJHgIs142O010.roa (hash: vIU6EqtRsEPuNd3qk5b/5wKThF8xlpJsgvmp83AjeXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:da:2f:ee:f3:96:5d:72:c2:09:0b:22:6e:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Apr 16 23:01:07 2026 GMT
Not After : Apr 17 23:01:07 2026 GMT
Subject: CN=fb4f53cf6948fa94c4c3bff0e8b6bbfc78fc2e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:14:7a:3c:5b:44:fc:73:30:c3:fd:c2:b5:
ef:c0:9c:e2:fe:42:1a:c0:82:1e:cf:cb:5c:d2:95:
14:29:93:d3:18:1c:17:bb:bd:6d:88:18:59:5d:ac:
65:9f:34:22:f0:6e:07:60:22:de:3f:31:0b:7d:61:
c5:f9:03:af:60:e7:3e:a1:14:e9:e4:46:58:e5:28:
fb:61:5c:5c:ba:3a:ec:23:4a:f2:95:33:ef:63:ae:
f0:fe:fd:ab:4e:0f:49:31:b6:06:86:96:fd:f8:52:
aa:a8:1a:b0:b2:88:9c:27:1a:e3:ad:42:ce:de:be:
3c:4e:3f:a2:10:98:9f:b4:4f:a4:07:3e:b6:90:c5:
63:bb:0c:b6:c7:ca:23:a8:66:5e:cb:05:62:48:c6:
4e:03:fc:cc:ed:3b:3c:d5:ed:54:b1:e7:a5:70:d0:
50:d7:a7:44:aa:1d:45:ce:f4:c2:5d:cf:d8:35:3b:
11:cd:7c:f2:05:7b:6b:43:60:19:bb:b9:d0:8c:3c:
ae:64:4b:71:fb:17:e5:aa:82:38:e2:41:76:d3:ac:
a7:41:15:74:8b:5f:2e:22:24:5d:51:8f:d6:70:80:
31:e6:71:c4:e1:f9:5c:33:9b:16:ad:51:85:04:6e:
ce:3e:98:3f:a1:f5:d8:b6:74:45:ba:c7:8e:14:6e:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4F:53:CF:69:48:FA:94:C4:C3:BF:F0:E8:B6:BB:FC:78:FC:2E:24
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:65:68:94:74:bb:3f:76:a3:7c:65:ea:bf:21:68:92:bc:20:
fb:1a:74:ff:a2:cf:83:00:91:7a:01:b4:ae:ba:d5:eb:5f:57:
59:11:50:2f:68:46:3c:48:b6:b0:21:86:fb:05:5c:31:b1:8e:
fe:a8:52:54:5a:0e:a8:01:77:f0:dd:10:ba:5c:a9:1a:f6:a4:
a1:fc:54:6c:10:48:5a:cc:5b:e9:39:9c:e2:82:bd:2e:a1:da:
bf:c0:8c:e5:e5:eb:a7:79:e4:63:c1:25:96:2a:e8:d5:74:53:
69:18:f8:cc:de:5f:fc:ba:c1:a3:8e:e8:91:27:46:c2:8c:4d:
1a:c1:a4:7c:f0:ad:de:cb:67:78:08:98:ae:20:27:77:3f:45:
db:96:48:c3:61:8c:28:4e:1f:f6:a9:e2:b0:12:90:9a:27:f5:
c1:63:b3:48:b6:17:ab:1b:e8:b6:e8:7b:dd:0a:37:74:bb:2d:
47:7e:53:dc:52:99:0a:da:e2:25:1f:88:4b:46:c6:6a:61:bd:
bf:83:c9:91:8a:b1:78:45:31:fe:d4:62:65:e8:e9:c4:56:f9:
cf:92:03:1e:24:3d:05:8e:40:d9:c3:71:d2:1f:69:b3:0b:5e:
cb:3a:06:1a:1e:19:8b:99:ea:3e:29:af:dd:20:3d:92:40:25:
44:4f:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:41 2026 by rpki-client