Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: JVz3+mO7N4LLJDRXWhdtGRw57LtaFw33t8kXvUsuI9A=
Subject key identifier: 77:7E:11:E0:55:3F:32:E8:A5:2D:8E:5A:DB:2B:BC:49:D5:E5:32:E1
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 019FA907CECFEC5F4BD53C87C2F75955F811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0DC1
Signing time: Tue 28 Jul 2026 14:01:28 +0000
Manifest this update: Tue 28 Jul 2026 14:01:28 +0000
Manifest next update: Wed 29 Jul 2026 14:01:28 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: 9q8kxJTLa+nnwc5Matd4l1HNACx0zyBjA5zQKuOTOpM=)
2: hVWAONuzeazGNdnWSgmA3i9K9C4.roa (hash: uImqFCqVZwZHHyqryIJNgNimhq6Y9tDjYPxtIUj1zD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:ce:cf:ec:5f:4b:d5:3c:87:c2:f7:59:55:f8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Jul 28 14:01:28 2026 GMT
Not After : Jul 29 14:01:28 2026 GMT
Subject: CN=777e11e0553f32e8a52d8e5adb2bbc49d5e532e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:07:4a:16:5c:2b:3d:e4:b3:39:c9:b2:e0:62:
f3:ec:5e:27:6a:29:04:20:3b:5d:0f:3b:42:5a:0e:
46:64:97:94:2e:c7:55:d6:0c:92:e8:27:ea:29:ab:
62:23:b3:ad:cb:8d:5d:f6:a2:6a:fb:90:df:5f:12:
8c:b7:8e:da:3b:24:80:5c:65:e3:36:49:56:a8:69:
46:38:df:c1:ea:ae:06:56:85:30:f0:67:71:da:04:
b8:49:3a:ab:0c:30:b1:9a:88:14:4b:38:69:0b:88:
2c:4a:cf:bb:25:fb:c3:e1:84:12:5c:63:a0:b5:29:
6e:7b:ae:13:17:fc:bb:e6:d2:c9:80:b9:2e:86:a5:
01:a1:64:18:02:6f:be:f8:d2:ec:8f:82:f5:b7:0b:
d7:07:93:6b:8f:c5:fe:24:53:3c:18:1d:da:94:25:
9c:2f:9b:ea:a5:85:e6:51:bd:d6:0f:4d:ed:c7:53:
f3:9a:81:e6:74:eb:cf:bd:3f:83:b5:48:1a:30:7b:
7d:88:c6:98:6d:52:25:a2:01:1d:9c:40:b8:d5:6e:
41:0e:02:1d:47:52:e7:25:78:9b:f7:85:e8:9c:c5:
a1:92:b2:a1:b3:86:8f:29:d4:4c:04:c6:46:ad:f9:
e2:79:a4:e5:db:e2:c5:65:a0:1a:0a:75:5a:4d:6d:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7E:11:E0:55:3F:32:E8:A5:2D:8E:5A:DB:2B:BC:49:D5:E5:32:E1
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0d:fe:ca:08:2b:60:dd:38:6a:ce:5c:33:53:21:d1:64:0e:
42:8e:14:4c:92:94:d3:d2:ba:b1:c2:99:1e:90:d0:39:41:7b:
2a:06:63:f3:f2:be:64:10:99:92:18:e6:59:4c:0d:41:8d:8e:
59:56:bf:22:7f:25:b9:d9:fc:c3:5c:f4:c3:f1:31:b3:7d:c9:
0f:69:38:5c:44:f2:53:51:d6:1d:dd:0a:e6:f3:0d:80:5f:9f:
33:c2:02:ab:51:e0:be:50:75:1f:1b:50:09:9b:33:ea:40:11:
98:fb:6e:a5:ff:0f:66:c3:74:2b:4f:d6:5b:3d:bd:33:eb:06:
a8:bd:0d:25:d0:be:80:12:3e:7b:40:e1:94:f9:15:e6:54:37:
b3:4e:83:55:8e:73:63:d4:44:b8:e8:af:4f:98:63:32:8b:c3:
59:a5:19:1d:84:03:56:35:12:92:a4:6a:d5:61:8b:9e:f4:04:
23:98:8d:d1:90:5c:c7:19:81:8d:02:3e:29:52:e8:ee:49:e0:
f2:37:66:21:e6:34:e9:5c:1a:2a:a3:df:09:26:74:a9:70:d6:
da:87:b9:ce:80:b8:21:56:42:78:7c:10:8b:0d:af:06:7b:b8:
1d:7f:20:30:b9:b3:6a:19:fb:46:01:38:f4:f5:f6:73:55:3f:
5c:da:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:29 2026 by rpki-client