Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: 5/x1qtfBNkxyIvHMO6Ax5HoBncYyn07aWQJ3GBnquQ0=
Subject key identifier: F6:A7:47:F8:C1:D0:61:DC:D1:9A:B2:46:F0:9F:09:0D:F5:32:41:C2
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 019DA56660B8F89F3494C501C00B9722FD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0CB6
Signing time: Sun 19 Apr 2026 11:00:43 +0000
Manifest this update: Sun 19 Apr 2026 11:00:43 +0000
Manifest next update: Mon 20 Apr 2026 11:00:43 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: aCHL1b3Tsuj037lYOmy81f+u2t37GI0PamLXI7+a5IA=)
2: hVWAONuzeazGNdnWSgmA3i9K9C4.roa (hash: uImqFCqVZwZHHyqryIJNgNimhq6Y9tDjYPxtIUj1zD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:60:b8:f8:9f:34:94:c5:01:c0:0b:97:22:fd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Apr 19 11:00:43 2026 GMT
Not After : Apr 20 11:00:43 2026 GMT
Subject: CN=f6a747f8c1d061dcd19ab246f09f090df53241c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:53:4a:2f:a4:48:26:de:cc:69:e7:09:64:
14:49:44:e0:c4:6c:f4:ac:ba:ba:32:b2:00:5f:76:
17:ac:aa:92:f8:63:b6:3b:b9:da:9f:f3:b2:01:a3:
cd:54:df:15:01:8f:c9:15:71:48:1d:27:b2:70:5a:
c9:3f:21:75:35:c9:ee:17:c1:c6:40:68:ba:26:4c:
47:07:b8:09:ef:3c:fe:11:32:17:4f:12:a8:f5:6f:
96:bc:c2:a8:08:fe:94:05:20:85:2f:e1:e1:31:6f:
0f:7d:86:7c:7e:51:74:e6:9c:ba:cb:ec:f5:59:78:
9a:b8:ca:9f:23:63:e3:17:85:57:e9:0d:92:04:93:
c1:68:9a:82:e2:5a:69:94:a3:d0:63:5d:94:7b:f5:
de:86:97:bd:c6:3a:14:fc:a5:a7:62:3d:ba:a1:29:
d9:1c:36:1f:e9:3d:c5:6d:ab:0f:ce:64:6d:84:3a:
d9:81:73:93:da:b2:56:1d:9f:18:57:71:14:c0:2d:
ca:0f:3a:b5:58:b8:76:ee:77:a5:62:ad:be:9a:c4:
ed:f1:f1:b6:bd:62:2c:d5:94:78:44:45:d0:ac:3f:
74:66:35:71:ab:d3:46:ff:01:a2:6a:77:88:1e:b1:
93:05:90:90:8c:bb:a4:b4:f6:2f:6d:f3:a3:f5:54:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A7:47:F8:C1:D0:61:DC:D1:9A:B2:46:F0:9F:09:0D:F5:32:41:C2
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f0:d0:6b:22:77:8a:4b:40:37:de:7e:35:d2:3a:08:a1:1b:
55:08:cb:c9:91:cf:6c:f9:f9:7d:c3:6b:38:2b:de:b5:a4:b9:
aa:14:e0:66:8e:a8:f5:ad:52:75:3a:33:3e:5c:c6:30:d5:34:
66:ef:e6:33:58:60:45:d9:b0:0a:4b:c3:c8:ed:6b:f2:68:08:
82:96:0f:70:c4:fb:e3:ce:de:5b:09:3f:a5:3b:8a:20:42:42:
24:7a:6d:b4:44:fd:4e:cb:23:50:e0:48:9e:69:72:05:fc:a8:
4d:6f:be:aa:c0:f2:fc:6e:c1:58:6d:3b:32:82:5f:a2:d0:6f:
ee:99:34:31:5c:c1:1b:f8:2f:de:72:02:47:49:f6:83:2f:de:
88:ee:34:ca:b8:fa:ff:00:e8:4c:f2:0d:a3:92:c8:59:01:55:
81:2b:d9:6d:d9:c3:b9:56:a8:36:78:1e:02:7b:cd:53:ae:92:
25:e5:e7:fc:1f:c5:3e:a0:7e:22:f7:40:06:d1:41:55:a6:53:
b8:0a:a2:13:43:bc:f8:8f:24:6e:52:fa:6c:96:a9:d2:9e:eb:
b0:69:7d:f4:18:37:e0:ff:6e:a9:bc:54:01:82:e1:a8:e6:f1:
66:5f:73:b5:b7:99:bb:5a:74:08:be:0a:06:28:70:30:da:0c:
e5:60:65:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:09:10 2026 by rpki-client