Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: JkdbzHPBO9xXfZd9YOrfZ1kDCNc4cixFBA1m21YH0oM=
Subject key identifier: A1:A8:3A:94:3D:01:AE:CE:D4:AB:1B:54:41:A0:33:39:99:F7:14:FF
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 019FAAF62069BA2DAFC4AB7BE62557ED3E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 1585
Signing time: Tue 28 Jul 2026 23:01:24 +0000
Manifest this update: Tue 28 Jul 2026 23:01:24 +0000
Manifest next update: Wed 29 Jul 2026 23:01:24 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: JVc2NwXeGbDr/oCXOkY9IYUjctXdgzjyRyg/LXTHyRM=)
2: G8Q8U9PXAXyP6GSlPYqobfziQzA.roa (hash: 34ZB7ek6+uTjMbRni0oLjT93sAaYBaeAPO9eFx4+uCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:20:69:ba:2d:af:c4:ab:7b:e6:25:57:ed:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Jul 28 23:01:24 2026 GMT
Not After : Jul 29 23:01:24 2026 GMT
Subject: CN=a1a83a943d01aeced4ab1b5441a0333999f714ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:8f:27:1b:e6:db:28:eb:9d:94:f9:df:0b:
e8:1e:18:31:9e:84:3b:cf:ae:97:ce:7c:c3:93:14:
3e:87:b2:03:c9:05:1d:07:a8:49:02:00:8f:a6:fe:
49:d3:24:21:e1:ef:e7:1a:e5:92:d4:dd:fb:0d:7f:
2b:3c:62:01:99:22:9c:e7:0e:16:42:73:8b:8c:91:
e9:47:2b:3b:da:b7:4f:30:ec:7e:b4:4f:1f:68:b8:
b8:ea:26:71:11:16:e4:47:b6:d8:3f:a0:52:21:85:
64:02:5b:08:4a:26:c2:36:46:16:31:4b:38:5a:3c:
ff:d6:8e:17:04:b9:15:0a:8f:3f:bf:83:b9:62:fe:
99:83:6b:d3:74:d1:d0:22:df:e7:d2:0f:b2:98:e8:
77:9f:1f:19:b0:a2:14:14:e5:b2:70:5a:79:57:42:
5e:ce:92:df:b8:e4:0c:92:f0:e8:a4:f2:ac:14:ee:
3b:5f:63:14:34:18:52:45:0f:69:00:ec:ae:b7:7f:
63:af:6e:45:2d:0f:40:a5:ba:9d:d3:49:7e:3b:ba:
e1:58:c4:61:e8:5b:b3:09:e9:e5:48:03:26:ed:3e:
9b:c3:3d:b2:7a:33:e7:2f:86:3e:50:ad:fb:27:1e:
e3:18:fb:96:72:b1:15:a3:4a:34:49:7e:ec:0d:ae:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A8:3A:94:3D:01:AE:CE:D4:AB:1B:54:41:A0:33:39:99:F7:14:FF
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b3:ec:f4:b7:74:d0:e5:f8:3c:b6:10:c8:ff:91:bb:c6:41:
bb:97:86:2f:a7:f4:94:08:15:1a:b3:24:09:19:69:fa:4d:61:
ff:9d:05:3d:91:07:c5:df:d2:dc:cf:df:bf:a2:7e:eb:26:40:
d0:ca:a7:14:29:3c:45:aa:d1:9b:a6:8c:70:91:cc:b6:61:44:
70:c8:d9:8c:ea:6b:bc:b3:00:21:53:6d:6c:14:ed:59:f4:e9:
2e:4d:4f:cb:ca:20:0c:74:ec:62:19:fc:2b:28:06:e0:de:c3:
84:70:a8:30:87:4f:a2:65:5e:39:7f:a5:32:58:6a:08:8c:cd:
15:b1:a5:15:86:92:3a:3d:de:1c:22:8b:8b:a0:50:e8:e7:55:
60:14:28:e9:7a:73:43:1c:db:d9:f6:24:a6:60:ae:c4:01:f7:
7b:7a:0c:d7:77:b5:e5:fd:d1:e7:5f:86:c0:1a:c7:6c:64:b6:
0f:bb:34:e3:ba:d9:c5:78:d0:52:7f:1a:e3:20:d7:be:03:3d:
18:05:39:e1:a5:c4:91:4f:7f:64:7f:a7:25:64:aa:98:f8:58:
6e:03:dd:94:d0:a3:e5:ea:b0:20:30:74:c1:e2:8d:9b:95:b8:
29:01:2f:39:7f:94:c9:4f:8e:85:cc:c2:94:2c:bd:85:58:d6:
4d:72:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:13 2026 by rpki-client