Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: 2pQ/GXAo29bnqh2C5yNdDgEV7Weda2XKv2jz2R7dBvM=
Subject key identifier: 90:99:B7:B6:02:B3:15:7F:2D:7B:9A:BD:41:14:A7:E8:07:23:8E:C2
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 019DA377FE51B5E0F65E780D4502F2CBFCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0CB5
Signing time: Sun 19 Apr 2026 02:00:43 +0000
Manifest this update: Sun 19 Apr 2026 02:00:43 +0000
Manifest next update: Mon 20 Apr 2026 02:00:43 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: sr1EYr+WNMMo1W8XOV5dO0VAXW5x70eWKDnV3aNQ3nA=)
2: hVWAONuzeazGNdnWSgmA3i9K9C4.roa (hash: uImqFCqVZwZHHyqryIJNgNimhq6Y9tDjYPxtIUj1zD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:77:fe:51:b5:e0:f6:5e:78:0d:45:02:f2:cb:fc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Apr 19 02:00:43 2026 GMT
Not After : Apr 20 02:00:43 2026 GMT
Subject: CN=9099b7b602b3157f2d7b9abd4114a7e807238ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:11:b1:7b:36:8d:ac:80:8f:0a:e7:dd:c5:
be:e4:f9:90:ee:de:4e:14:4c:c1:d5:06:f2:98:32:
1b:ad:ca:c3:5e:38:3d:cb:5b:25:26:d7:e5:f3:7f:
41:a0:63:69:be:08:e7:a6:2e:05:de:c1:8c:a8:dd:
6b:8c:ea:9f:44:90:f7:1f:5e:56:67:22:32:28:0d:
23:65:1b:41:4b:07:8d:9b:6f:3b:08:e1:89:40:6d:
fc:64:64:89:32:e8:49:13:63:d0:5b:c9:e2:c0:47:
f0:3a:24:cb:3e:68:bf:a8:f2:ef:64:0d:4f:89:31:
14:24:aa:84:68:fb:98:a8:1a:f0:b7:51:cf:1c:82:
2e:a2:68:2a:8f:e6:96:44:f6:20:ee:66:98:0e:93:
c2:6b:61:42:24:76:e0:03:77:17:86:f1:43:a5:85:
a2:d3:f7:51:2d:a7:a1:84:d3:af:a2:3d:59:5f:43:
c7:bc:ca:21:57:b9:56:61:69:e1:68:e4:57:17:ea:
64:3d:7c:84:00:55:85:c0:6c:1c:69:2c:1d:b2:55:
15:3c:0d:c5:ca:e6:01:7b:63:a5:e0:5d:1f:91:9f:
6a:eb:8f:ae:94:b2:29:2b:a3:8a:27:86:0f:f2:85:
83:95:0f:3e:9e:fc:ee:cd:90:b0:51:9d:10:10:64:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:B7:B6:02:B3:15:7F:2D:7B:9A:BD:41:14:A7:E8:07:23:8E:C2
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:56:41:de:29:cd:56:ee:00:19:f0:8f:d8:61:10:c4:99:74:
39:10:c7:07:5d:de:63:a3:ea:00:4a:38:bd:61:9a:00:6f:92:
52:fa:c8:6b:0b:a0:02:c3:4f:ae:8e:2e:0d:45:0f:3f:4a:d1:
ec:d7:b1:e8:8b:78:00:bd:e1:70:8b:a4:cd:da:e9:cd:49:35:
35:58:9d:03:1a:df:4f:33:46:4d:2d:1e:f4:f3:7b:c2:e9:5e:
12:60:d5:5c:2f:91:4f:e4:92:4d:8a:69:92:ff:18:55:e8:2b:
d4:b1:fb:34:fa:55:a3:7a:8f:b8:05:8e:fa:eb:f0:5d:98:2a:
c2:7b:4f:d7:ff:6d:8a:15:a1:12:d2:11:c2:76:ea:3a:87:2e:
dc:65:6e:84:9c:d3:83:20:37:83:77:8c:ff:c9:57:60:59:ec:
41:3d:de:e5:fc:96:e3:cb:99:67:da:66:68:0c:cd:5a:00:7c:
4c:d8:10:e9:d7:25:80:32:da:31:0a:17:dd:fa:bf:2e:e7:76:
95:2d:ac:bd:4c:90:17:2b:64:53:15:84:ee:f9:46:ec:34:59:
1a:32:b5:20:d9:af:7e:dc:4b:f6:90:8c:ed:b2:5f:89:08:c2:
0f:86:39:72:4d:05:d1:13:87:55:e4:48:91:0b:d0:ec:1e:53:
0b:f3:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:23 2026 by rpki-client