Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: s4H6x03tF0P0DJyQu54S+5n72SY5kTD44yEb7WJR650=
Subject key identifier: EF:1A:7B:4F:A6:49:72:C1:F3:CB:44:E0:97:AE:8B:02:F3:28:3F:62
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 019CAA58B5520A4DE579C07C8AA8BCDA8518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 13F7
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: bipA6o4UDWI4vUUgITQRYtALE1VnCRUBhGcQcFnzvTU=)
2: G8Q8U9PXAXyP6GSlPYqobfziQzA.roa (hash: 34ZB7ek6+uTjMbRni0oLjT93sAaYBaeAPO9eFx4+uCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b5:52:0a:4d:e5:79:c0:7c:8a:a8:bc:da:85:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=ef1a7b4fa64972c1f3cb44e097ae8b02f3283f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:5a:c6:03:48:17:70:4e:2d:2a:0f:f3:b3:
08:e9:d1:f2:15:3a:18:04:ff:eb:9b:50:96:97:4b:
60:97:82:51:38:d4:82:a6:f2:83:a2:e0:7a:13:bc:
c3:3d:dc:9a:ff:bd:58:d3:c1:87:fc:ed:f1:f2:3b:
a7:b1:6e:cf:35:71:4d:0f:e3:0a:3e:a5:af:99:27:
a1:d0:bc:aa:19:6f:1f:2d:c9:f7:b7:93:bb:ea:29:
33:56:bf:81:a4:16:ac:d1:13:7d:b4:bb:77:04:c3:
69:4b:6b:33:fa:82:4d:06:f3:e7:bd:a4:72:3e:9d:
3a:58:3b:80:e5:05:05:d0:7d:45:cf:54:bd:6a:ca:
bd:0c:7c:37:28:2f:9e:82:b1:9e:88:28:c8:9f:54:
c8:58:08:9c:d3:20:40:a6:35:12:a5:f0:ee:3e:41:
1d:f3:56:c7:dc:1b:86:f4:fe:d3:64:ca:8c:51:43:
64:b2:7c:43:51:42:2a:f3:05:02:a3:ec:96:d2:f8:
c1:50:23:db:fe:f4:e6:42:f6:ad:34:ba:c4:a4:c6:
4c:a8:b2:2b:3c:85:00:ba:59:74:62:39:59:4b:fe:
f6:e3:9a:a7:f8:78:8e:92:7a:1e:87:21:4b:52:af:
0a:f8:33:93:86:21:6f:83:68:8d:97:2a:24:09:20:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:7B:4F:A6:49:72:C1:F3:CB:44:E0:97:AE:8B:02:F3:28:3F:62
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d8:43:16:a4:94:64:21:7b:9a:72:38:a5:17:5a:ba:87:5c:
18:5b:ef:db:c7:af:74:09:f2:0e:6f:3f:ab:2d:30:12:68:47:
d0:6c:ab:86:b0:09:82:3b:b3:26:a2:f0:51:0f:ac:ce:07:9a:
d4:73:84:4a:41:eb:50:e3:b1:d8:b5:72:84:c7:7d:4f:04:95:
30:2f:72:24:0b:e1:60:9b:9f:09:fb:ab:7e:c0:2c:0f:fc:52:
31:fe:03:1c:90:6b:eb:3e:98:10:c1:24:e2:eb:b7:a3:0f:f4:
e3:92:4a:22:7e:db:56:34:73:aa:3b:a4:5e:37:ff:9c:fe:8b:
20:88:59:83:fe:a8:51:86:01:bd:a5:94:2c:92:0b:35:80:97:
c7:4a:8d:27:7a:ad:02:03:1d:d9:94:e2:e5:d6:05:97:df:0a:
69:65:9c:3d:bb:41:fa:81:44:78:06:1c:cc:27:53:c8:51:5a:
1c:d2:a3:06:12:54:fd:26:93:96:9f:21:68:59:bf:8a:7c:53:
43:c9:d1:5c:df:7a:1a:24:62:9c:06:c9:97:c0:25:ed:c7:29:
5e:90:6e:74:7d:89:85:93:69:c9:c8:ef:de:1f:8b:aa:69:11:
68:49:40:8c:ea:16:83:f8:82:58:71:89:67:3c:04:20:e1:6c:
2f:60:31:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:57 2026 by rpki-client