Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: 487dodQVz6HsKXAtryR3ErGycob8rwhbDL1nAjtTMY0=
Subject key identifier: 97:0F:25:DF:85:8A:AA:9E:13:1D:8D:27:0E:49:74:19:E6:0A:38:1B
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 01A0D04870CE4F7DF8279BE6FEB6E42FEF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 22:00:03 +0000
Manifest this update: Wed 23 Sep 2026 22:00:03 +0000
Manifest next update: Thu 24 Sep 2026 22:00:03 +0000
Files and hashes: 1: 2h4xI3Z9i2TeCjfdLwk7IRmZOzc.roa (hash: mTKUoeR1D0ra95Q17JeglPwLy4xwDPEBszuUsaOUHPE=)
2: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: 7iPlWHxYlqa8AqKxYfK5YOAxeKBJMRBGuPbehs9GTdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:70:ce:4f:7d:f8:27:9b:e6:fe:b6:e4:2f:ef:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Sep 23 22:00:03 2026 GMT
Not After : Sep 24 22:00:03 2026 GMT
Subject: CN=970f25df858aaa9e131d8d270e497419e60a381b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c6:84:fb:69:4a:0c:79:40:d5:42:8f:c1:33:
d0:ce:78:dd:76:18:c8:ed:7a:f8:46:28:18:68:6d:
7f:29:05:13:3e:76:a8:91:9f:ee:d5:0c:5e:c1:12:
33:c5:44:c9:ff:fe:32:fd:95:10:e9:0e:29:62:e9:
cc:bc:04:fa:da:42:a1:33:52:08:3b:f0:43:e9:62:
1b:7c:cc:69:66:3a:31:25:75:6b:1b:90:3d:91:71:
7f:dd:ce:d8:4c:a6:19:4d:ff:66:84:f2:e6:3f:1e:
47:ca:a9:c9:64:63:0e:82:6f:85:9a:6e:ac:da:33:
dd:f2:cc:01:f9:f3:7d:ac:82:51:0f:76:b3:fb:61:
b4:e2:16:b8:b1:c0:1d:4a:c9:d1:56:08:c8:25:42:
56:eb:de:5a:41:24:21:20:24:af:51:e2:08:d9:a8:
1c:9b:72:f5:be:75:8f:e9:9a:c0:9b:3b:d5:03:66:
bd:c4:ac:1c:17:c7:3b:11:cc:a7:11:cd:69:61:87:
ad:2d:a8:9d:f4:bd:bb:ea:23:ba:85:36:55:b3:a1:
e1:dc:fb:be:2c:4b:c3:0d:45:24:52:ac:63:ba:b0:
83:65:55:44:fd:e9:ac:a3:3c:c0:c3:8b:26:4b:01:
22:f9:74:56:08:06:2e:f0:20:36:61:64:90:7d:0d:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:25:DF:85:8A:AA:9E:13:1D:8D:27:0E:49:74:19:E6:0A:38:1B
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ec:de:96:93:49:9f:5e:2c:20:e3:65:79:83:68:d1:fd:20:
12:34:2b:8f:ce:b9:94:53:8d:51:9b:ac:fb:f7:cf:c1:d3:0c:
33:69:8e:4e:be:16:79:41:b3:43:17:c8:3a:d3:7e:bb:7f:84:
fb:88:69:5c:d7:ca:b7:f0:f2:a3:ab:af:37:a5:03:62:3a:6a:
b0:f4:6f:fc:a3:84:52:39:3a:a5:09:aa:61:c2:53:de:c8:08:
0a:6e:dd:83:f7:f8:03:c8:2f:14:a5:cc:85:89:6a:67:ba:e5:
0d:4f:37:99:6d:f4:80:d1:5c:8d:1a:5e:a4:1a:21:a4:86:ce:
9f:16:b9:13:2d:75:e2:e0:60:7e:df:fb:b2:01:13:66:83:cc:
ba:1f:68:29:df:85:5e:07:06:cb:22:ad:4c:0c:d7:af:be:cf:
01:7a:6d:66:bf:88:42:cd:73:2e:60:05:6e:75:89:e4:5d:af:
46:3e:c2:1f:bc:b2:fa:b1:90:8a:6f:8e:4f:72:f3:13:a4:53:
b8:15:39:71:b6:d6:79:11:72:80:09:f1:64:ee:fa:62:7d:ed:
9f:69:cb:ce:be:03:75:9a:1a:54:16:24:dc:9a:6a:be:13:e4:
a2:16:31:ae:15:99:a8:65:75:5f:93:25:bb:95:7d:61:c6:28:
91:7d:2c:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSHDOT334J5vm/rbkL+8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDkwZmJhNjYzYjA3MmJiNTRjYzdkNDllODhhMDM4MDM3
NGNiNmUwHhcNMjYwOTIzMjIwMDAzWhcNMjYwOTI0MjIwMDAzWjAzMTEwLwYDVQQD
Eyg5NzBmMjVkZjg1OGFhYTllMTMxZDhkMjcwZTQ5NzQxOWU2MGEzODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+caE+2lKDHlA1UKPwTPQznjddhjI
7Xr4RigYaG1/KQUTPnaokZ/u1QxewRIzxUTJ//4y/ZUQ6Q4pYunMvAT62kKhM1II
O/BD6WIbfMxpZjoxJXVrG5A9kXF/3c7YTKYZTf9mhPLmPx5HyqnJZGMOgm+Fmm6s
2jPd8swB+fN9rIJRD3az+2G04ha4scAdSsnRVgjIJUJW695aQSQhICSvUeII2agc
m3L1vnWP6ZrAmzvVA2a9xKwcF8c7EcynEc1pYYetLaid9L276iO6hTZVs6Hh3Pu+
LEvDDUUkUqxjurCDZVVE/emsozzAw4smSwEi+XRWCAYu8CA2YWSQfQ1h+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcPJd+FiqqeEx2NJw5JdBnmCjgbMB8GA1UdIwQY
MBaAFAcJD7pmOwcrtUzH1J6IoDgDdMtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzct
MDFhMjhhNzZjY2Y0LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzctMDFhMjhhNzZjY2Y0
LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuzelpNJ
n14sIONleYNo0f0gEjQrj865lFONUZus+/fPwdMMM2mOTr4WeUGzQxfIOtN+u3+E
+4hpXNfKt/Dyo6uvN6UDYjpqsPRv/KOEUjk6pQmqYcJT3sgICm7dg/f4A8gvFKXM
hYlqZ7rlDU83mW30gNFcjRpepBohpIbOnxa5Ey114uBgft/7sgETZoPMuh9oKd+F
XgcGyyKtTAzXr77PAXptZr+IQs1zLmAFbnWJ5F2vRj7CH7yy+rGQim+OT3LzE6RT
uBU5cbbWeRFygAnxZO76Yn3tn2nLzr4DdZoaVBYk3JpqvhPkohYxrhWZqGV1X5Ml
u5V9YcYokX0swQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:45:23 2026 by rpki-client