Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: CUnh1HdMFAyyF1jUN5p0Rejc/8cjS5GHEZ/1qSUUDAE=
Subject key identifier: 19:9D:B0:60:D4:DA:E0:EB:B8:22:12:01:8C:68:09:BD:1C:AE:D6:F4
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 01A0C2FB96618D73DA878809EAE03FFDA1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0E53
Signing time: Mon 21 Sep 2026 08:01:02 +0000
Manifest this update: Mon 21 Sep 2026 08:01:02 +0000
Manifest next update: Tue 22 Sep 2026 08:01:02 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: UkxOyJFiO8MGdUM9oQKPN2P7Rglt3nTOmG8XahIDplQ=)
2: hVWAONuzeazGNdnWSgmA3i9K9C4.roa (hash: uImqFCqVZwZHHyqryIJNgNimhq6Y9tDjYPxtIUj1zD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:96:61:8d:73:da:87:88:09:ea:e0:3f:fd:a1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Sep 21 08:01:02 2026 GMT
Not After : Sep 22 08:01:02 2026 GMT
Subject: CN=199db060d4dae0ebb82212018c6809bd1caed6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:02:43:be:3c:9b:13:1f:01:1e:3c:34:f2:
73:a5:e7:df:4d:30:f1:c8:1c:b3:70:cc:46:2a:4c:
47:41:81:49:d8:7e:e9:57:3b:ea:18:86:db:01:ca:
4a:36:88:f7:49:ed:25:8f:96:c5:0e:1e:a0:bc:50:
8d:88:df:51:f4:ca:23:9c:fa:36:4b:14:b8:5a:b2:
0e:d1:24:ab:c3:6a:3c:6e:77:e6:9e:f9:4e:75:fd:
fa:5b:c2:d7:04:52:0e:f3:ac:4f:3e:d2:3d:01:0e:
84:6c:12:bd:a8:9a:64:95:ad:cb:1f:a9:71:5a:d8:
75:b0:e6:45:03:4d:d2:b2:2d:74:7f:be:1e:0e:b6:
14:1b:51:36:49:c5:e9:7c:a5:04:bf:67:17:9e:69:
d6:2f:83:0f:f7:38:3c:fd:fa:03:94:dc:f7:4d:cb:
e3:9e:51:56:45:eb:21:f7:44:29:f4:b5:82:e5:31:
45:a2:51:a1:82:86:e5:b5:4a:d9:7d:68:c6:73:e1:
f5:f3:49:39:ba:9e:fe:66:c7:d4:71:52:24:5a:65:
54:be:cf:db:d9:68:94:d7:11:5d:a6:e4:5f:2c:e7:
dc:84:20:95:1e:fb:2f:19:69:ac:f6:f6:d3:ad:6e:
87:f6:e0:20:2b:84:0f:22:35:9f:a7:1d:d1:06:b0:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9D:B0:60:D4:DA:E0:EB:B8:22:12:01:8C:68:09:BD:1C:AE:D6:F4
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ab:e5:33:97:11:29:aa:75:84:a9:47:97:54:b2:4b:02:59:
9c:2f:70:85:f3:f6:c7:5a:e9:e5:5a:56:a2:71:9b:78:93:0a:
25:4a:c5:c2:dd:25:26:21:95:39:ea:5c:d3:5c:64:33:96:78:
75:fe:37:25:7e:ff:72:c9:12:e2:29:bb:d5:02:b1:1e:72:94:
10:bd:f5:41:8a:e8:42:34:9e:81:ee:13:a1:4c:4a:d4:df:4b:
c0:4a:7a:bc:85:a2:bc:a1:9f:9e:d7:22:89:cd:ba:9c:b2:34:
36:51:ef:ef:91:e5:d8:c3:eb:f1:05:de:50:95:d8:24:0c:17:
f3:b3:58:22:32:00:f9:1c:00:2a:8c:50:8f:21:29:01:a7:4b:
97:55:58:bf:57:90:77:86:f1:52:da:2d:22:8d:ef:be:f8:eb:
65:20:a2:6d:50:50:83:5f:ba:1b:d9:33:42:a2:68:bc:84:45:
31:39:8e:dd:5d:36:cc:8e:8e:28:47:59:4f:b1:ed:a5:1f:0d:
84:03:4b:3d:a8:fa:36:b6:6a:95:75:e7:9b:e5:c2:cd:a0:6c:
35:34:18:ff:bf:eb:43:d2:ea:55:90:9c:64:d3:64:a2:d9:d1:
56:a7:9e:55:6c:f4:57:d1:db:9e:50:65:42:03:8f:0d:23:7e:
d0:3c:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:31:44 2026 by rpki-client