Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: G81sm1TJliKNi4lHh6BgutJdRIzzRxZECYZVH4Xex8E=
Subject key identifier: 11:89:05:2D:10:DA:09:A8:E5:34:2C:BF:BD:12:75:BE:7C:92:50:6D
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 019CACB4B1C7EF2872F2B69F5D041BCECA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 092E
Signing time: Mon 02 Mar 2026 04:00:49 +0000
Manifest this update: Mon 02 Mar 2026 04:00:49 +0000
Manifest next update: Tue 03 Mar 2026 04:00:49 +0000
Files and hashes: 1: IfGCpj85Q4o-UGyQ31NliYn-gNM.roa (hash: x5pzaYdpKRd4mBuwlpRlCZ/BZdgSlAglcVpLNOFR9GU=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: tguWXezXvn3paNGycvQ9gnPpkD8IfTkm39Y12yZsM2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b1:c7:ef:28:72:f2:b6:9f:5d:04:1b:ce:ca:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Mar 2 04:00:49 2026 GMT
Not After : Mar 3 04:00:49 2026 GMT
Subject: CN=1189052d10da09a8e5342cbfbd1275be7c92506d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:2a:77:be:53:42:54:a3:d0:56:85:58:16:
ad:74:06:6c:5e:47:fe:ee:0d:1e:4d:70:d3:a5:0e:
77:f9:e7:57:df:c3:bd:a8:f9:0c:9c:d3:48:21:15:
73:59:0a:9a:66:d1:04:d9:a4:c9:2c:e7:ba:77:0d:
cd:c3:f6:0c:a2:e2:ea:e8:23:d3:2b:f7:54:a0:d4:
13:f0:58:d4:44:b4:85:93:a1:a8:33:e0:97:86:73:
c0:89:b9:20:d2:7a:b1:6f:a2:db:8b:b2:10:78:11:
92:6e:c6:f9:58:6b:38:b2:83:c5:56:d8:88:45:49:
c3:fd:f9:49:75:ae:d2:e0:ce:48:d0:4f:83:97:1d:
3d:bd:02:51:a6:ef:29:88:e2:ee:e5:8c:c2:0d:63:
57:be:5b:aa:47:88:ba:c3:0e:79:78:f1:cc:51:da:
24:47:ff:35:24:4d:6b:77:e1:85:a6:0e:cb:5d:68:
6e:d4:18:f7:88:55:c1:a0:2a:76:89:22:48:a5:45:
93:8b:3e:9e:fd:29:2b:95:80:7d:8d:7b:ec:cf:59:
d6:58:ef:72:e7:30:85:c1:03:55:ba:b8:ac:97:5c:
fc:fb:39:85:40:a8:3c:41:b0:39:d3:9c:3f:d7:05:
c4:fe:ef:4c:7b:a8:62:46:d9:35:83:1f:dd:84:5a:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:89:05:2D:10:DA:09:A8:E5:34:2C:BF:BD:12:75:BE:7C:92:50:6D
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2b:7e:3e:e2:a1:3d:74:ae:61:4a:f6:7f:51:81:4c:97:87:
a6:2f:f8:9e:7d:59:f6:f4:c2:a6:f9:4e:23:02:74:ac:ef:dd:
44:7d:e2:d2:ef:29:d2:31:39:f5:86:c1:e1:79:36:b3:cf:53:
98:0a:3d:8b:4c:73:45:7a:41:70:57:2a:b5:ef:27:99:8b:3f:
07:e6:0d:23:98:31:a3:df:1a:cc:5b:97:b0:79:f8:63:35:79:
45:d8:aa:07:b4:f6:f9:35:6e:6b:48:d9:cc:47:38:82:2c:c2:
7c:e7:67:d9:53:22:e5:9e:44:a6:dc:2d:1b:5c:69:0c:3a:59:
4b:55:bc:02:70:fd:16:7b:a7:f0:39:b7:ff:2f:e7:d6:a3:34:
2e:f1:50:d8:8c:18:73:21:62:d0:b2:57:83:6e:63:42:f0:17:
42:d8:bb:4b:05:fe:5d:b0:3e:98:86:d7:cb:84:9d:cf:44:80:
f4:c9:d8:b3:cf:76:60:d8:ee:27:a5:9a:ca:58:91:e0:81:ef:
cb:4b:67:59:35:c3:05:be:a6:f9:8f:d7:3e:33:64:0b:66:06:
d7:7e:8e:65:3b:b4:b2:ec:77:25:af:59:8d:56:04:4d:97:96:
0b:02:79:72:ec:ed:c4:3b:49:86:33:93:0e:4b:f0:1e:21:fe:
40:9d:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:24 2026 by rpki-client