Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: NKA4nq4ziTrF1NaHVWFGPVEFcYL16nFA+QRSc35tGB0=
Subject key identifier: A0:1E:74:69:00:C4:53:2A:D4:35:F5:FE:19:25:DD:31:AC:C4:E8:F7
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019FAB9A72A83163E280028CEB0E30F82BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 02:00:53 +0000
Manifest this update: Wed 29 Jul 2026 02:00:53 +0000
Manifest next update: Thu 30 Jul 2026 02:00:53 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: PPrQNnVosOIjhHmZ2Pi3pOiUj1rS3gjHdVmS3pTKA8M=)
2: WHq-HnXpka6rpneJHgIs142O010.roa (hash: vIU6EqtRsEPuNd3qk5b/5wKThF8xlpJsgvmp83AjeXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:72:a8:31:63:e2:80:02:8c:eb:0e:30:f8:2b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Jul 29 02:00:53 2026 GMT
Not After : Jul 30 02:00:53 2026 GMT
Subject: CN=a01e746900c4532ad435f5fe1925dd31acc4e8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:19:ad:c8:4b:9c:29:30:bd:95:d5:1e:b1:
6c:43:df:80:31:db:7a:83:2e:bb:bf:54:44:cc:48:
e7:08:a1:c9:de:87:9e:d7:61:51:95:38:28:35:29:
4a:96:ee:ec:59:7c:9c:c2:08:97:71:55:9e:11:7b:
58:c4:3b:77:c5:58:ec:2c:b6:e6:10:ef:72:9e:14:
bb:c8:65:2d:d4:5d:a2:99:15:55:47:98:49:57:07:
34:17:33:58:ca:b6:81:cc:bd:ba:84:5a:08:2b:c2:
00:a3:60:9c:81:10:a2:7f:0f:07:aa:36:f6:ce:4c:
cf:a6:55:16:2d:8c:59:f0:7b:8e:0a:38:a2:a5:f1:
b5:28:88:38:91:5c:3f:d4:31:23:fb:98:a3:bd:9d:
62:08:ac:dc:d3:00:6c:76:14:f7:72:95:30:54:62:
4a:80:21:60:e6:99:23:51:ce:d6:9f:7f:92:ca:b4:
ec:94:cf:35:1d:66:ab:e0:fd:74:06:ed:af:13:e3:
f4:cb:4c:cc:fc:be:f0:2c:21:ed:5d:66:79:92:1c:
d6:15:01:41:61:46:c4:99:b2:8c:4d:98:25:8e:68:
e0:1c:04:99:4f:53:04:bd:8e:cd:64:25:7f:d4:89:
b5:42:2f:9c:a4:a7:3b:84:57:da:0c:fd:3d:65:8b:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1E:74:69:00:C4:53:2A:D4:35:F5:FE:19:25:DD:31:AC:C4:E8:F7
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:18:89:4a:5b:24:6c:c8:36:70:94:26:4e:82:84:01:e0:
7b:34:6b:31:83:1a:1e:41:a7:f3:a3:b0:3a:7d:c0:93:82:5a:
39:2e:6e:5a:0d:b1:bd:e0:3d:54:01:42:2c:1b:f8:bd:28:73:
18:31:8d:e8:65:27:a2:5a:0d:0c:2c:c3:03:9d:e6:3a:a6:3f:
b2:8b:ab:b9:88:d0:39:ba:52:18:64:52:3e:ec:24:c0:43:dc:
e4:91:85:ce:18:c4:da:61:c2:9d:59:2f:44:0b:38:3d:80:d3:
53:3c:ff:6a:2a:aa:d6:b7:66:82:00:3d:fe:bc:4a:a3:4e:d1:
63:5a:47:76:d1:2f:9f:cf:64:65:01:79:23:6f:4a:54:ea:9a:
52:ff:e4:9d:97:3e:08:b5:14:8e:4e:15:8c:dd:12:be:29:73:
24:4b:76:a3:38:3f:9f:05:2e:3b:ee:10:b5:4a:92:67:b7:8a:
a6:9f:c9:5b:38:8a:69:8c:58:7f:cf:6b:8f:b5:da:72:0a:cc:
da:a8:de:7b:ba:e9:5c:26:d7:a4:58:66:be:02:33:1f:f6:30:
dc:d3:40:1a:41:cd:92:99:6e:09:bb:c6:2f:14:b9:48:8c:80:
f8:dc:82:a2:ad:6a:27:ce:44:67:61:82:ce:f4:93:c8:15:6d:
42:ab:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:53 2026 by rpki-client