Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.mft
File: baE8YP8HTHDfBAnD4Cit1o-j5_c.mft (raw, json)
Hash identifier: JMzVrIjAsdON54bc/nEOEPgzebVqx47rdjW/LztbgB0=
Subject key identifier: 22:C3:22:1A:15:E3:10:A1:6E:91:5A:3C:F3:41:58:8D:94:40:D6:16
Authority key identifier: 6D:A1:3C:60:FF:07:4C:70:DF:04:09:C3:E0:28:AD:D6:8F:A3:E7:F7
Certificate issuer: /CN=6da13c60ff074c70df0409c3e028add68fa3e7f7
Certificate serial: 01A1B9BF2B67330B3EDEE8E3DE3E012E4294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baE8YP8HTHDfBAnD4Cit1o-j5_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.mft
Manifest number: 14
Signing time: Sun 08 Nov 2026 06:01:15 +0000
Manifest this update: Sun 08 Nov 2026 06:01:15 +0000
Manifest next update: Mon 09 Nov 2026 06:01:15 +0000
Files and hashes: 1: 5MqdxpUmoPY0bkcMlWL7dENbtdA.roa (hash: u8SWQnB7C+omfAWYG7xNKu3vZp7zWn9mbs68/2gQNuc=)
2: aPlzBYXtsyeO6PH_fMDg1G2Nep4.asa (hash: UFS2CpQisA/Vt6Qqe2g6tjx3tiqUBAaUfXGg/kFsXuk=)
3: baE8YP8HTHDfBAnD4Cit1o-j5_c.crl (hash: 0CA18MjSYQMNYXoGgZHA7rCLOlwxqi1XiTXYyCvh4rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/baE8YP8HTHDfBAnD4Cit1o-j5_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b9:bf:2b:67:33:0b:3e:de:e8:e3:de:3e:01:2e:42:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da13c60ff074c70df0409c3e028add68fa3e7f7
Validity
Not Before: Nov 8 06:01:15 2026 GMT
Not After : Nov 9 06:01:15 2026 GMT
Subject: CN=22c3221a15e310a16e915a3cf341588d9440d616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:b0:10:ca:7e:6c:ce:25:5a:be:bd:ac:ad:
98:39:17:77:8b:0e:da:fd:a6:72:2f:aa:14:f3:21:
c7:6e:76:44:20:2b:40:48:6b:e0:b2:e0:86:ee:d8:
1c:c6:67:34:06:ea:f1:9f:a6:94:94:fe:f2:bd:09:
ae:a7:fe:62:3c:9b:b7:82:de:0d:9a:57:ea:56:e4:
ba:13:57:7e:a2:05:f1:b9:35:6c:a5:f3:e2:94:00:
b5:c5:c8:8d:38:f6:d2:92:97:6c:78:b5:70:ab:74:
d6:27:da:46:a7:39:a7:ec:46:8a:60:d2:56:82:3e:
9f:81:53:14:e5:f4:ee:22:40:4a:f7:34:92:16:2a:
42:d6:0c:21:1b:b1:9a:68:6b:d1:99:9d:98:b3:bc:
42:fb:1c:57:1f:3c:23:cc:6d:53:b1:a5:50:d6:a5:
f8:2f:a4:e7:d5:e9:13:52:23:2f:28:29:5d:8e:5d:
eb:d0:ff:53:1f:02:af:a5:dc:03:c1:76:d2:4c:c8:
6b:a7:da:6a:a1:b3:3c:26:8a:25:25:c2:ba:71:3f:
8a:e8:1b:3f:7b:62:97:27:44:1a:f6:98:1b:d6:b2:
5a:75:84:c9:fc:96:70:26:d0:10:a7:dd:7e:2f:1e:
b2:48:07:c5:a2:12:ff:2c:3f:7c:69:7b:6c:8a:5c:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C3:22:1A:15:E3:10:A1:6E:91:5A:3C:F3:41:58:8D:94:40:D6:16
X509v3 Authority Key Identifier:
keyid:6D:A1:3C:60:FF:07:4C:70:DF:04:09:C3:E0:28:AD:D6:8F:A3:E7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baE8YP8HTHDfBAnD4Cit1o-j5_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a6:7b:32:0d:4e:46:ec:d7:10:53:d3:e3:0d:9c:bd:8b:d3:
e3:50:95:6d:4e:21:7f:f2:89:ed:53:61:af:12:88:a3:5a:58:
dd:7e:55:db:9c:c5:5f:57:db:bc:34:0e:95:c1:06:fc:3c:14:
54:e7:da:48:ee:36:fe:b5:5f:ff:4b:1e:2c:32:b1:e2:d8:7a:
09:b5:7c:1a:1d:5f:d1:6d:a5:e6:2a:c2:e5:c0:d2:26:ce:e4:
73:de:04:f6:2b:8e:cd:21:4e:8c:99:77:6f:fc:b7:ed:44:83:
84:24:68:75:12:db:6c:1c:75:bd:19:b1:32:24:59:76:75:c6:
b9:11:21:50:b5:5e:6d:ec:08:75:c7:51:63:83:f3:2c:85:ce:
76:67:a2:33:f0:65:66:05:cf:a0:60:cc:fb:64:bf:42:79:86:
bb:c6:10:aa:f0:69:10:58:91:46:69:ff:92:2d:f8:34:91:4f:
3f:0f:8f:29:0a:2d:cc:9e:02:86:db:d4:90:9e:f5:8c:8c:b9:
16:bb:51:ed:e6:b7:7b:31:7d:8a:2d:f6:eb:70:45:9b:b4:14:
14:70:a5:50:75:95:5f:f7:57:7d:0a:1e:4e:6c:99:1f:af:1b:
fe:d2:28:9e:7e:38:7c:6d:7d:14:06:96:d4:47:14:c1:77:de:
7b:de:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 17:40:33 2026 by rpki-client