Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: rvyWngrQGm/Jzcaruqv08lLEtUc08XdzgECexFoIT+I=
Subject key identifier: D3:D4:80:55:B8:9B:D9:C5:6F:E9:C2:9A:32:7D:0F:79:65:7F:5F:31
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 01A0E88937E7237181B9F8CBF1A7820FFD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 1A75
Signing time: Mon 28 Sep 2026 15:01:41 +0000
Manifest this update: Mon 28 Sep 2026 15:01:41 +0000
Manifest next update: Tue 29 Sep 2026 15:01:41 +0000
Files and hashes: 1: 8Cyiu9TGgmUOUznTzwuimvpBz-0.roa (hash: fxDhOvakeaBpONzylzbpa6MC2T2cHPWJh3ryLVED65Q=)
2: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: XxHybvH1c10gYWBzBOUder+qvO20MB+v4t/COwatK3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:37:e7:23:71:81:b9:f8:cb:f1:a7:82:0f:fd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: Sep 28 15:01:41 2026 GMT
Not After : Sep 29 15:01:41 2026 GMT
Subject: CN=d3d48055b89bd9c56fe9c29a327d0f79657f5f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:b8:fe:a9:ec:c6:1c:4e:20:ec:ca:69:62:
19:2c:40:a3:25:95:30:ec:0e:c7:ae:ad:0b:20:0e:
07:14:6d:bb:c3:26:56:a3:cf:70:86:23:81:ab:0b:
ac:fd:4c:4e:b9:1d:63:03:67:5a:8b:87:d3:cb:c0:
92:a1:eb:a4:d8:14:59:71:16:3e:cc:7d:41:80:11:
c1:e6:5e:9e:1f:3b:3f:da:f7:70:45:a0:d5:96:d8:
22:0f:b5:8e:46:25:dd:7c:e8:58:df:26:6a:f5:96:
02:d0:e5:0f:4a:d5:95:cb:c3:ac:98:27:29:08:18:
4f:8e:2e:22:9b:fc:49:7e:e1:13:3b:93:9a:ee:f0:
f2:71:a8:e4:5a:63:f9:c8:85:db:85:e7:48:93:ad:
bb:e8:60:d4:c9:57:12:04:58:ce:bb:6b:af:26:04:
bb:56:ce:d7:3e:9a:a3:8b:30:21:ca:5b:d7:2e:d5:
1f:81:d4:fe:eb:a7:56:4c:31:b9:4d:89:5d:81:96:
c2:7d:4d:c6:71:ec:3f:bc:88:10:d7:dd:d3:7a:c4:
8f:0d:e9:a6:40:57:d9:57:9e:c6:bc:c7:48:84:a5:
17:da:29:96:db:2d:85:94:60:56:63:c5:c7:92:e7:
8b:0e:36:1c:bb:6a:f8:fb:5e:80:86:07:fc:78:e8:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D4:80:55:B8:9B:D9:C5:6F:E9:C2:9A:32:7D:0F:79:65:7F:5F:31
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:42:f2:0a:c7:a2:4c:43:af:e2:24:6b:f6:0d:80:9d:01:a3:
fd:9b:30:1a:a1:57:24:ba:f3:db:d9:8d:f9:24:98:9c:96:1d:
5c:df:f2:84:5c:20:01:a9:aa:c4:93:e4:cc:ba:e0:31:75:db:
73:ea:7d:15:7f:16:13:4b:a3:bb:81:d8:9d:21:b0:83:af:b9:
96:77:05:a7:b0:3b:11:30:44:e4:0c:0d:22:11:36:53:fc:1c:
b9:0e:70:27:07:50:9f:fc:a7:fd:ba:03:d0:4a:db:3a:65:9f:
72:39:2d:55:86:9b:18:5c:44:85:49:f6:34:10:83:bf:b7:18:
e3:a2:6f:61:15:6c:6a:39:b6:bc:32:c1:ae:04:78:ed:fc:33:
96:84:e0:ee:a1:73:5a:cb:08:b4:cd:11:57:1b:2d:c8:9b:d6:
f5:d5:0f:dc:8c:34:34:87:f5:26:48:83:ae:87:63:d0:82:1d:
44:d4:9b:5e:c3:0a:55:15:aa:50:f7:f4:5b:5b:bd:66:23:3b:
78:6d:c3:22:c0:73:9a:24:4e:c1:70:81:4b:b3:e4:1d:7e:bb:
34:e0:e1:0a:a0:12:92:e9:cc:81:75:74:e7:ce:ac:17:d5:91:
76:ff:7a:45:0b:09:37:a4:ba:0f:96:e5:f6:41:99:a6:99:07:
ab:fb:11:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:08:33 2026 by rpki-client