Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: Hr7pSpCvCyJ7ideqf5hHyBwUZYCxr7dkyijG6pmo6Wg=
Subject key identifier: 77:9C:8D:63:86:4B:33:E4:AE:66:60:9A:E4:23:9E:26:E1:D0:30:10
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 01A0C8C7045CA451DFF6837DE60931768012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 1619
Signing time: Tue 22 Sep 2026 11:01:20 +0000
Manifest this update: Tue 22 Sep 2026 11:01:20 +0000
Manifest next update: Wed 23 Sep 2026 11:01:20 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: xa1VnE+0KjgJTj/vz74ScXdmIjnDYU2/3+x6c88VO0I=)
2: G8Q8U9PXAXyP6GSlPYqobfziQzA.roa (hash: 34ZB7ek6+uTjMbRni0oLjT93sAaYBaeAPO9eFx4+uCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c7:04:5c:a4:51:df:f6:83:7d:e6:09:31:76:80:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Sep 22 11:01:20 2026 GMT
Not After : Sep 23 11:01:20 2026 GMT
Subject: CN=779c8d63864b33e4ae66609ae4239e26e1d03010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:6e:a9:95:3a:26:3f:9f:83:0a:c2:80:e3:
38:f3:38:92:78:9d:98:5d:01:20:27:1a:d8:a0:d2:
d2:44:aa:07:60:85:23:b6:59:10:bc:82:50:83:a8:
99:ed:09:af:81:0a:0f:4a:d9:4d:d0:0a:27:68:71:
e6:d4:78:4c:e1:96:88:48:41:57:22:00:17:65:4e:
9d:72:d9:15:c1:36:72:ee:3a:e7:df:f9:2d:17:02:
67:f6:4f:ab:3f:4b:85:80:72:7e:c4:ba:22:10:af:
66:b1:b0:ce:a2:3a:d6:b2:ff:45:ad:87:e7:2e:b7:
b5:8f:fb:24:94:29:b1:b9:eb:ef:9b:f8:35:5a:0d:
7e:86:a1:91:0c:44:e6:d5:6b:24:df:df:46:69:00:
1a:d4:40:a7:57:52:30:24:c0:99:fc:c9:ac:fc:ae:
4b:12:81:ad:10:36:c2:38:82:4b:8a:b2:c3:9c:9d:
66:44:c5:c4:d5:b8:20:c4:0a:4b:14:d1:a8:b4:e2:
05:52:09:b1:bb:8c:b6:8b:7c:ac:3b:ee:7f:5f:ac:
39:8f:34:44:e9:8f:e0:d0:b3:14:b6:d1:4a:ff:f7:
e7:11:87:7e:ed:19:59:0a:d8:43:6a:95:42:b1:99:
5c:34:9a:71:7c:af:2f:a1:45:a4:37:71:4f:9c:2c:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:8D:63:86:4B:33:E4:AE:66:60:9A:E4:23:9E:26:E1:D0:30:10
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:91:87:1c:87:9d:9a:94:7d:6f:e4:98:88:6b:ad:1c:a4:fe:
33:b5:d2:bc:17:32:bf:63:b0:21:80:bb:d3:52:de:0d:e2:68:
75:1a:47:11:f1:53:b4:96:1d:e0:c7:4f:75:70:1a:dc:c7:51:
fa:c5:49:6f:87:41:a6:3d:0b:28:f9:53:99:22:ae:86:8e:72:
40:c1:7e:74:9c:40:c6:1d:99:92:47:1c:19:fb:36:d7:8d:8d:
9e:23:33:24:6b:88:61:e7:7b:8f:0d:dc:39:f9:bd:80:37:c5:
55:3d:df:97:ae:41:29:9c:53:50:c0:d3:70:27:7f:26:01:28:
d2:79:96:b4:aa:18:95:35:ca:e4:99:4e:d6:a1:c5:d5:a7:f3:
1f:67:82:10:87:7f:82:6c:9c:84:7e:0b:26:c5:2c:e0:f7:da:
44:17:c8:8d:98:4d:11:8e:f5:ce:4d:00:d1:32:61:81:39:d7:
1e:93:bb:0c:57:cd:2d:e6:61:dc:91:35:06:b1:ea:2a:19:7f:
50:e0:f4:8f:7d:15:4f:60:44:3c:3b:89:36:e6:61:00:ec:70:
b7:5a:51:ef:ed:b4:8e:fa:93:e1:d8:a4:c7:62:fb:85:87:87:
93:a0:cf:4b:3b:8f:bc:53:3d:9f:d4:68:8e:88:01:1a:80:99:
40:2d:8c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:16:46 2026 by rpki-client