Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: qVCmSbD+n+wjAmX6kmHa5VVgVScDCTm5NjhnB9r4B/U=
Subject key identifier: D7:F0:D9:31:F6:9E:E7:3D:24:31:04:F4:34:21:EF:2A:AE:C3:09:32
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 019CAA585703D722B811CCCB43C9AD470687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0C34
Signing time: Sun 01 Mar 2026 17:00:41 +0000
Manifest this update: Sun 01 Mar 2026 17:00:41 +0000
Manifest next update: Mon 02 Mar 2026 17:00:41 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: r7Z93Gbfezh3S4dZZtoDTDoLBxWnwjj9jB65ybn/TcE=)
2: hVWAONuzeazGNdnWSgmA3i9K9C4.roa (hash: uImqFCqVZwZHHyqryIJNgNimhq6Y9tDjYPxtIUj1zD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:57:03:d7:22:b8:11:cc:cb:43:c9:ad:47:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Mar 1 17:00:41 2026 GMT
Not After : Mar 2 17:00:41 2026 GMT
Subject: CN=d7f0d931f69ee73d243104f43421ef2aaec30932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9d:02:bb:aa:82:eb:15:c5:ce:ca:c5:0a:96:
a5:49:0f:2a:db:6c:49:8a:66:a7:33:2a:ee:26:88:
d0:20:f4:64:0b:8e:ba:99:98:39:e4:db:95:2f:ec:
d4:f6:39:90:54:98:e4:08:8c:67:5e:e1:8f:63:46:
e8:4c:77:74:cf:b0:da:0e:bf:a9:c8:50:f7:81:eb:
d5:28:46:08:99:85:af:86:08:38:a2:62:bd:92:43:
8e:2f:9a:12:c2:fb:80:40:8e:8a:29:19:b2:c9:e4:
12:7d:32:6f:fb:03:f1:9a:13:7a:da:60:27:8f:b5:
f6:ab:e5:d1:13:ea:88:d0:f6:2c:9a:05:1f:d0:51:
40:a4:b9:8e:31:4d:6a:de:d1:70:36:f5:d4:76:ac:
a2:cb:cd:30:75:e1:63:09:87:fa:ff:13:b8:35:fa:
bd:85:00:d3:1d:1d:04:d0:13:76:6e:fa:de:70:55:
45:82:b2:1e:fc:ea:00:7a:e1:e2:5e:44:b5:61:13:
c2:67:3e:eb:ff:91:ae:77:cb:89:b7:70:15:f4:5f:
f1:20:7f:71:da:9a:44:c0:80:c7:72:02:cf:19:06:
1e:fd:09:c9:f2:2c:73:61:82:ff:ba:97:1e:fc:3e:
82:82:a9:ba:5d:fc:6c:81:9a:d6:69:c9:22:6b:0e:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:D9:31:F6:9E:E7:3D:24:31:04:F4:34:21:EF:2A:AE:C3:09:32
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:58:ae:69:87:5d:e4:fb:26:37:72:5b:9f:dd:28:8d:c9:8c:
5e:c5:90:f4:a8:56:c6:aa:a5:a7:a7:92:bd:6f:e4:4d:80:f9:
76:98:b2:31:1d:8b:79:ee:18:5a:7d:d2:ac:02:d7:49:cb:41:
07:4a:9b:63:56:db:6a:cd:2b:7f:0a:43:c4:7c:b8:f6:ad:a2:
ca:4d:cc:82:28:12:ab:db:96:5c:9e:13:a0:a5:67:04:c5:83:
80:b5:d9:7e:f3:ad:fc:27:8a:31:84:6f:88:25:5b:40:a4:db:
9f:14:2d:95:6c:fe:7c:bf:83:18:d4:27:15:2d:0c:24:7a:c7:
5f:4a:f5:c6:0c:91:7c:30:74:5a:9f:75:f8:5c:11:ce:23:86:
04:bc:af:f8:6b:6b:f4:fc:08:86:ae:01:4a:a1:16:f7:99:58:
76:14:39:61:66:0d:10:21:ac:66:9d:4c:88:8d:9e:8b:86:00:
ca:49:6f:73:2a:af:4a:bf:e2:c9:04:73:df:d2:32:92:e9:28:
68:c4:a8:34:6a:b7:f7:88:93:d0:db:06:c0:ad:24:f7:00:43:
2f:25:eb:6d:b1:42:93:25:a3:ff:4b:ac:40:ce:29:84:3d:16:
87:26:7c:1d:22:84:76:3f:d1:21:c8:45:6f:9a:29:b5:4b:66:
dd:26:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:54 2026 by rpki-client