Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: /qDcv4OErt5UB3BZJ/EXF8UCR6bJdE00u7HBXnVeDYU=
Subject key identifier: F9:3D:88:CF:5B:AC:66:BD:1C:86:B8:8E:07:01:4A:2C:46:25:96:7A
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 019FA9E2985E35FFD4B6410CF02D024A2A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 18:00:27 +0000
Manifest this update: Tue 28 Jul 2026 18:00:27 +0000
Manifest next update: Wed 29 Jul 2026 18:00:27 +0000
Files and hashes: 1: 8Cyiu9TGgmUOUznTzwuimvpBz-0.roa (hash: fxDhOvakeaBpONzylzbpa6MC2T2cHPWJh3ryLVED65Q=)
2: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: MGwHXXo5rrRFG6RIwYsV7aJa8XaHvMkx1NQHOw92HXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:98:5e:35:ff:d4:b6:41:0c:f0:2d:02:4a:2a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: Jul 28 18:00:27 2026 GMT
Not After : Jul 29 18:00:27 2026 GMT
Subject: CN=f93d88cf5bac66bd1c86b88e07014a2c4625967a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:a7:ea:3f:0a:5c:0f:ec:50:02:28:c7:75:
cd:54:ae:ac:4b:27:d7:18:ca:a3:f7:b6:f2:71:ee:
12:66:00:df:b6:39:e1:99:27:6a:32:e7:1c:aa:70:
28:6d:c5:9b:5c:9b:ee:9f:92:eb:14:c3:b5:e6:15:
6a:5d:5b:d2:93:29:65:e7:68:a4:79:88:42:f3:f7:
df:f1:8b:e0:56:bc:90:35:ae:68:18:af:be:b4:dd:
54:a3:20:95:75:3f:cd:81:3b:73:d1:89:a2:8e:6e:
2e:88:82:ff:43:87:db:d6:77:9a:ad:73:2b:32:5d:
11:f5:69:b4:a0:f7:04:4d:3f:ac:d2:72:cd:ad:c2:
2f:6b:20:83:ce:d9:93:32:f2:d7:bf:94:6b:d0:e3:
38:5d:7a:e4:5f:c3:c6:9c:cf:d7:23:59:25:cf:29:
6a:1e:e9:5d:20:52:f5:61:95:5e:09:4f:68:bc:b9:
7b:65:6d:d9:00:bd:7b:51:51:ba:6b:9a:a3:50:db:
34:6d:60:a3:44:f3:37:3c:47:5f:5b:10:3b:4e:a1:
34:a2:da:97:18:d4:fb:1c:4f:d5:e0:cc:98:20:05:
d3:0d:ef:1d:06:3c:79:42:4e:95:cf:2a:7c:c1:39:
3c:b8:0b:61:34:9d:bb:27:f8:d9:02:53:75:4a:7c:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:88:CF:5B:AC:66:BD:1C:86:B8:8E:07:01:4A:2C:46:25:96:7A
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b4:57:0a:77:5f:19:87:7f:4a:1f:fd:6c:2d:1d:08:48:8a:
e4:f7:27:52:d6:b1:20:32:fe:da:f3:1a:a0:fc:13:8d:14:1b:
91:17:ac:a5:3b:dc:d6:a5:d3:23:b9:69:c6:85:d0:7e:17:70:
dd:24:fd:0f:9f:0f:5a:9b:96:89:ab:66:09:e9:ce:40:af:3c:
2d:00:92:8c:53:14:ed:69:1e:a0:b2:97:86:35:5d:ad:d7:ef:
99:54:51:ab:74:a2:72:5f:85:6c:0e:f4:1a:b2:63:b0:cb:c8:
44:5f:fd:fc:a7:b6:5e:6c:30:4b:4b:da:39:25:b5:5c:22:61:
ae:d5:c0:87:74:76:00:62:bd:99:ea:b2:c9:87:e5:23:4e:92:
3c:c4:3c:75:84:20:cf:75:c4:27:cd:34:85:51:22:08:30:d8:
f1:36:d4:34:4a:59:de:15:45:27:e3:d2:ea:d5:08:10:6d:61:
3e:1c:e6:a1:41:78:65:e6:18:99:7e:de:8d:47:22:6b:4d:72:
77:62:ae:76:7c:3b:b4:46:de:84:0b:7c:98:79:31:6e:cf:67:
9e:16:f8:30:48:ec:cb:62:5e:8a:1a:5e:28:4d:01:8e:83:3c:
3f:1f:c0:a7:ac:ae:91:24:2b:30:11:98:d8:80:ac:70:a5:26:
dc:4c:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:01 2026 by rpki-client