
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: lbvG1f9cnuzn4aL4MnqkqIrpIFUuQttx9VNTQK2KfIk=
Subject key identifier: E7:C0:63:C6:A8:55:69:B8:12:C6:6C:AC:1E:CD:01:D0:0F:F2:F3:E9
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 019EC1B687AD5A54772B25C9F3D70B7A02BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 0A42
Signing time: Sat 13 Jun 2026 16:00:25 +0000
Manifest this update: Sat 13 Jun 2026 16:00:25 +0000
Manifest next update: Sun 14 Jun 2026 16:00:25 +0000
Files and hashes: 1: IfGCpj85Q4o-UGyQ31NliYn-gNM.roa (hash: x5pzaYdpKRd4mBuwlpRlCZ/BZdgSlAglcVpLNOFR9GU=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: 6hnzcVhFExdul5yQYTzhZlGDJt9NFeN4oPgiCxsY1oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:87:ad:5a:54:77:2b:25:c9:f3:d7:0b:7a:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Jun 13 16:00:25 2026 GMT
Not After : Jun 14 16:00:25 2026 GMT
Subject: CN=e7c063c6a85569b812c66cac1ecd01d00ff2f3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:d5:f0:a6:93:3d:35:d1:a5:a6:3e:a2:da:
0a:ba:dd:f3:d4:ee:30:b3:0b:9a:1d:d2:21:2e:c7:
63:f4:2e:42:61:22:08:1c:06:99:40:01:cb:07:46:
ca:89:f0:8c:fe:20:45:63:b2:9e:48:71:b1:ab:dc:
2d:3c:f3:37:c6:ce:e1:44:88:02:69:76:fd:29:67:
a0:a6:7b:54:ec:8e:5b:9d:82:28:4c:78:de:ca:37:
d0:69:68:9a:a4:83:7f:13:63:00:f0:73:14:d2:34:
cf:d4:14:06:a6:f4:7f:7a:6c:a5:a2:73:24:38:98:
9a:b6:6f:75:71:7c:a5:b5:e1:6c:e0:de:8a:b4:15:
81:bf:3b:84:2c:1d:8a:75:b1:83:05:a8:87:fd:89:
9d:61:53:45:5c:7c:f1:cd:fc:73:67:3a:34:01:f7:
2f:41:77:bf:f5:1c:56:b8:91:f2:03:41:8a:7d:84:
d3:5a:57:65:d1:12:9b:cd:d4:a7:3f:07:57:b8:d0:
e1:b0:7c:0d:7a:7f:20:f2:06:21:79:50:f6:91:e9:
a1:6b:17:59:9d:c4:3c:4d:12:ff:5b:16:92:98:12:
29:99:9f:36:8f:d1:cf:07:75:8e:ce:2c:34:21:48:
1a:9e:7d:1a:25:df:08:32:e6:37:62:e1:00:c9:39:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C0:63:C6:A8:55:69:B8:12:C6:6C:AC:1E:CD:01:D0:0F:F2:F3:E9
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ef:78:c4:94:01:09:2d:8a:51:e6:d2:8c:d6:b9:c7:ef:4a:
f4:33:14:62:aa:c5:16:55:78:d8:73:84:28:06:ce:f9:29:bb:
b0:be:61:e6:5e:6c:aa:f0:ce:ca:aa:e1:d8:ce:18:a5:0f:4a:
c9:98:cb:5f:c8:b1:26:cd:72:d3:fc:39:08:f1:93:84:fb:7d:
65:6b:60:eb:68:27:42:4f:aa:ac:55:04:28:09:eb:c6:f5:b3:
d2:2e:f0:13:fe:a2:16:7d:f7:88:de:43:df:a0:0b:5c:8c:71:
22:7e:2d:d7:98:9c:11:12:0c:70:ca:a7:24:07:b3:6f:cd:99:
0f:d3:08:78:44:90:1d:0a:bc:f3:4c:10:4f:71:f5:df:95:ba:
34:49:94:c6:a2:7b:34:00:0f:59:fd:0f:c3:ee:33:99:62:32:
c0:cc:3d:f0:9e:0a:06:20:59:b2:18:b3:e3:2b:e4:1b:c2:c9:
86:59:9c:91:3d:dc:47:4f:3c:fd:e4:01:45:bd:dc:c5:69:2e:
b4:8a:b7:21:9e:97:c8:94:e6:57:f3:32:e9:f6:42:84:75:1e:
f6:af:ce:e1:48:c8:a5:ed:55:8b:0d:e1:c4:fb:d2:c7:1c:c8:
e7:57:8a:a0:05:6f:48:07:b7:a1:13:4c:26:0e:0a:5d:97:3b:
eb:97:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:33 2026 by rpki-client