Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: 9vc+6kZctX+JDX7yW0Gcbr3QK7yZydtDmCL223v28Y8=
Subject key identifier: 22:40:5D:06:8E:42:17:96:B2:47:66:FF:6E:AC:D4:AE:77:11:84:50
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 019DA378AACF5EF121221BFB92ECD2FB9539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 1478
Signing time: Sun 19 Apr 2026 02:01:27 +0000
Manifest this update: Sun 19 Apr 2026 02:01:27 +0000
Manifest next update: Mon 20 Apr 2026 02:01:27 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: bZ6eiZKguKnWDB/b56dWGJ77s7lzjY2v4JMhKXTzhN4=)
2: G8Q8U9PXAXyP6GSlPYqobfziQzA.roa (hash: 34ZB7ek6+uTjMbRni0oLjT93sAaYBaeAPO9eFx4+uCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:aa:cf:5e:f1:21:22:1b:fb:92:ec:d2:fb:95:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Apr 19 02:01:27 2026 GMT
Not After : Apr 20 02:01:27 2026 GMT
Subject: CN=22405d068e421796b24766ff6eacd4ae77118450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:aa:bc:9f:0a:92:3e:73:84:12:c9:d8:90:
09:f0:20:e1:9e:64:5f:6c:62:71:bc:3b:83:fd:5b:
a8:c1:a6:25:d9:ad:3b:e4:94:68:9d:43:54:48:a7:
c4:cb:dc:87:6a:d2:fc:96:07:8d:4a:90:24:a3:ee:
ce:3a:91:6d:a6:c9:f2:1f:e9:e3:41:0c:f8:c2:db:
08:0d:0b:1f:b3:63:31:b9:1b:02:9a:47:e0:e1:0f:
bd:cb:86:c6:47:b5:6b:14:a8:fa:e9:03:83:89:4c:
0d:e9:18:15:62:f3:62:59:88:40:39:33:61:ec:a1:
4a:5b:85:50:5a:dc:6b:91:de:20:69:ce:a9:74:13:
9a:4e:ce:73:bd:08:b5:92:40:83:ed:72:93:7f:44:
06:c3:6e:bb:c4:5d:7b:c0:da:57:e8:9a:54:d9:ae:
e7:59:60:8b:8c:17:73:48:b0:13:f7:92:7e:7b:5a:
58:a0:1b:9d:0a:5c:97:a0:cc:8b:1e:4b:d5:7b:e7:
f6:63:fe:87:48:9e:0b:85:de:be:30:ac:da:3a:8b:
04:a1:59:c7:68:71:31:5b:04:a2:d2:87:6e:b4:9c:
71:ae:15:25:12:3e:2c:1d:fd:4b:b4:16:b4:cd:92:
95:f0:08:23:3f:37:c0:27:49:23:57:ca:43:b9:f5:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:5D:06:8E:42:17:96:B2:47:66:FF:6E:AC:D4:AE:77:11:84:50
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:06:76:ed:97:0b:34:7c:6d:b4:f4:e9:4e:e3:36:53:c1:e2:
70:1b:c8:72:28:71:e4:d1:6c:53:23:45:e9:08:fb:34:08:60:
81:c2:64:a7:2c:34:6d:a5:62:89:1b:4c:e3:8c:7f:63:77:ed:
4e:d7:56:30:fc:cb:df:b9:f3:db:db:de:1a:05:3d:9c:c7:68:
3c:ac:c5:94:c3:e8:ae:1b:d6:3e:49:67:80:90:41:a5:3a:01:
66:7e:ea:f1:30:70:06:40:3d:01:6a:ba:db:16:9e:b6:32:9d:
cf:7a:00:79:24:52:2f:49:90:6c:f1:5f:e5:61:5c:d8:d0:14:
aa:0a:59:35:13:34:c6:7b:84:45:8c:ed:c6:0d:4e:5c:58:73:
65:6d:92:e8:fe:c5:64:70:e0:af:cd:77:38:e9:b6:72:8e:14:
24:3f:d4:8d:d6:a3:1f:01:11:48:85:b5:bb:12:32:f6:b8:6f:
74:40:5d:e8:04:fc:d2:79:2e:70:2d:6a:10:2a:3f:f8:f4:76:
3d:06:28:c2:ac:9e:e2:df:be:e1:c6:d7:d1:94:4c:ec:f9:1d:
2c:75:c5:6b:c5:51:dc:9f:99:67:8a:f7:67:f3:6a:60:81:e4:
9b:72:30:f0:8a:44:5b:11:2b:ce:58:95:70:91:7d:ea:3c:2a:
2e:0a:11:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:40 2026 by rpki-client