Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: f+Fo6DzONtflQglNL/iZxgoAgeueIbMEqadEIT32xYY=
Subject key identifier: 0D:3A:58:AF:24:10:0E:86:E8:59:4A:D6:37:73:EA:1C:BA:7D:04:0B
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019CACEB7AD89C05085DD32DF950964F5686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 05:00:39 +0000
Manifest this update: Mon 02 Mar 2026 05:00:39 +0000
Manifest next update: Tue 03 Mar 2026 05:00:39 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: InoldkzTi/QdeLfTo1v5kjAM1RB2sDgw9OvcHTPDUpY=)
2: WHq-HnXpka6rpneJHgIs142O010.roa (hash: vIU6EqtRsEPuNd3qk5b/5wKThF8xlpJsgvmp83AjeXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:7a:d8:9c:05:08:5d:d3:2d:f9:50:96:4f:56:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Mar 2 05:00:39 2026 GMT
Not After : Mar 3 05:00:39 2026 GMT
Subject: CN=0d3a58af24100e86e8594ad63773ea1cba7d040b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:6f:ff:ad:e8:3d:85:fa:64:8d:09:85:ae:
ce:88:49:b7:f8:e7:f1:a4:ff:76:16:9d:01:1f:77:
e0:2f:87:1f:57:c6:b6:5d:f9:a9:d2:8b:0f:cf:0b:
11:14:88:02:c2:53:d2:d9:52:34:62:2a:c8:06:77:
ff:27:02:98:d7:eb:c8:36:9c:33:1c:78:9a:e2:0b:
2c:d2:24:f7:4e:f7:fd:d2:6c:79:89:13:e0:54:17:
3b:9c:ad:57:b1:24:35:4f:44:f1:b9:6b:24:97:6d:
56:0a:5a:31:85:2b:06:75:90:49:0a:27:4b:1d:5c:
58:69:62:cc:cd:b7:56:e6:1d:44:61:c0:2e:bb:00:
92:83:0c:5f:d2:e0:de:d2:63:1d:e4:a2:b0:cc:36:
2a:0c:3d:d1:b4:95:a8:69:ee:46:85:18:e3:94:08:
ea:14:02:b0:f9:e1:98:81:71:d3:76:72:46:a3:f5:
03:73:2e:8a:7a:cd:e1:3b:84:88:4f:ba:91:47:64:
84:46:09:6e:d8:f5:b8:32:0d:14:4f:9b:bc:6d:ec:
af:8c:84:75:12:62:58:4a:a0:06:a5:95:1d:87:ea:
89:06:10:7f:06:8b:73:ba:3b:81:55:dc:6b:e4:3c:
11:e2:76:98:de:9c:19:36:ea:81:64:3b:91:c9:2d:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3A:58:AF:24:10:0E:86:E8:59:4A:D6:37:73:EA:1C:BA:7D:04:0B
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:43:1b:ab:df:10:08:d0:1b:91:2f:95:96:71:b5:59:3e:58:
6a:94:92:cf:d0:d8:79:a7:af:ff:84:ae:d1:21:89:2b:fd:ca:
1b:aa:73:78:dc:67:c5:3d:d6:9c:a7:94:ac:01:99:fa:e4:9f:
5e:8d:f0:ed:49:1d:23:25:68:1b:d6:87:0b:99:cb:c2:31:36:
35:15:a1:4a:3a:66:41:cf:8e:50:70:ed:08:14:d8:59:30:6d:
f5:aa:a4:68:57:7d:2d:dc:85:69:06:ab:cc:e5:c7:62:3c:d4:
55:9c:d1:bc:16:77:88:37:ef:d3:a7:d1:09:b6:20:bf:3d:16:
15:86:7e:74:05:a3:1d:00:fd:f7:37:b3:9f:6f:f0:3c:b4:df:
be:69:f7:8e:08:5f:5b:46:e6:98:7a:97:83:20:5b:97:1b:da:
ac:32:91:4e:03:fc:4b:42:a6:8d:4f:a2:f2:70:6c:95:f5:45:
b5:5f:71:95:59:4d:fc:28:e2:2f:2e:b0:11:c7:25:17:f6:77:
c4:a6:48:d9:e6:36:34:62:14:2d:81:a6:37:7c:a1:ac:53:77:
f1:8b:8f:9f:4e:31:37:1d:7c:e7:a1:60:be:20:39:bc:5b:e5:
84:54:16:96:fb:f5:d5:9a:e6:97:88:63:0b:e7:cf:11:c7:51:
c3:eb:69:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:43 2026 by rpki-client