Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
File: bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json)
Hash identifier: LuKsnm1GKguar/RXOAFtPk064uc11d9cS/zLAU1YS1U=
Subject key identifier: 5A:CD:33:AE:24:A3:A4:D7:5C:FF:E7:CE:7E:61:C7:2A:5B:CE:D9:FF
Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Certificate serial: 01A0D501D9775B27D15A99883F9F01BF8F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
Manifest number: 0398
Signing time: Thu 24 Sep 2026 20:01:03 +0000
Manifest this update: Thu 24 Sep 2026 20:01:03 +0000
Manifest next update: Fri 25 Sep 2026 20:01:03 +0000
Files and hashes: 1: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: Hd714TGjzMD/P4KhFEX9tXxN8L+x9ILg3kZLGmpBqdQ=)
2: nL_aguQpzIBZS3kFzk0GEh4Kv14.roa (hash: gVKNRs2PmMSobccBYIWx5t0HLiyk7RnkUIOuOgpaP2A=)
3: rtWwTl9MBmDLdQSKYIL-yECsxyQ.roa (hash: +411KUF7k/iuzsKKk7k0b7Q2qWA88IGJo6IfbnCC2V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:d9:77:5b:27:d1:5a:99:88:3f:9f:01:bf:8f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Validity
Not Before: Sep 24 20:01:03 2026 GMT
Not After : Sep 25 20:01:03 2026 GMT
Subject: CN=5acd33ae24a3a4d75cffe7ce7e61c72a5bced9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:d4:e4:5f:80:d2:f5:ce:c1:94:26:73:df:
87:44:48:f4:1f:19:83:c7:16:9d:3e:b9:5e:30:83:
03:1c:08:ec:aa:af:6a:1f:f7:37:74:76:e9:6c:7a:
04:47:90:fc:5b:55:36:d9:36:c6:e2:bf:18:5e:db:
c9:09:e6:59:ef:df:72:4a:a1:3b:17:e2:10:56:8d:
fd:6c:88:1c:5a:38:41:b8:82:db:d9:28:ce:2e:d2:
4d:c4:65:57:d4:98:43:e3:a7:26:10:f5:73:f8:1b:
46:89:63:15:c1:b3:ae:5b:1a:70:63:0e:3b:2a:3d:
a2:cb:c9:11:6e:e7:b0:4f:04:de:db:19:20:e2:7a:
4b:e4:c7:f0:28:2a:ff:07:58:ca:6e:cc:30:d0:90:
96:6c:87:90:45:fe:95:7f:7a:8e:d2:6a:fc:8f:68:
9c:01:4b:a7:c6:97:f1:de:de:ef:5c:11:f4:66:f3:
08:28:24:c2:98:64:91:0a:6f:e4:0f:d9:2d:39:ac:
80:14:9f:db:a1:07:0f:45:d3:b1:e2:96:dc:32:8d:
37:25:ed:7f:14:37:9f:06:98:59:2a:34:5f:53:dc:
ed:c3:bc:bb:01:88:df:50:88:c3:e9:84:f0:cd:1f:
fd:64:07:17:89:c0:d3:8d:c9:56:00:7e:af:ae:32:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:33:AE:24:A3:A4:D7:5C:FF:E7:CE:7E:61:C7:2A:5B:CE:D9:FF
X509v3 Authority Key Identifier:
keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ba:af:ad:32:d8:c9:26:86:5d:34:8e:3f:84:76:38:4f:9e:
fb:4b:16:45:2e:88:4b:10:8c:a5:5d:c8:48:1a:68:e7:e7:5f:
0e:44:77:7a:85:28:9a:b8:8f:fc:83:81:16:4f:77:3f:aa:e0:
cd:9c:c7:56:b8:be:ff:47:26:44:be:1c:a9:08:94:1d:d6:f8:
65:cf:a3:08:d8:60:05:f7:4b:a9:7e:ea:4c:a6:8e:35:23:23:
19:ba:55:83:85:c4:b1:86:0d:33:f2:d0:1f:64:2f:af:e0:6c:
a1:b1:11:4b:63:85:e9:6d:e9:89:94:ec:25:60:2a:2d:05:4e:
1c:96:d5:aa:1c:47:45:c7:58:00:b0:9c:c6:5d:1b:c2:c3:09:
c4:17:99:7d:7a:3d:f5:d0:b7:75:ac:a9:c5:57:e5:81:3b:8d:
d0:7c:db:30:10:92:d6:1d:17:8c:1b:15:95:6a:d0:10:f0:75:
45:1f:a6:e9:11:4e:69:99:d4:57:ee:6b:37:41:59:47:7e:7a:
da:14:e9:92:18:99:aa:a3:4f:6d:35:0f:be:1f:49:59:cc:cc:
88:07:8d:af:bd:4b:58:22:6f:5f:0a:ec:6d:50:d2:1a:2b:f6:
11:6d:cc:be:97:92:b7:59:7e:58:47:c2:e0:c1:8c:c7:61:ce:
53:d6:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:42:37 2026 by rpki-client