Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier: HClUzjcS4Mf1+3ELdZSPy1oPA3aiVe+wY5npg0MeT5k=
Subject key identifier: EB:D0:6F:B5:19:EC:66:9B:45:01:B8:41:6C:81:7B:F3:58:06:45:D9
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 019EC111B9638A65622E321074D11C8D65B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 13:00:24 +0000
Manifest this update: Sat 13 Jun 2026 13:00:24 +0000
Manifest next update: Sun 14 Jun 2026 13:00:24 +0000
Files and hashes: 1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: M8sRfI8v14R9ULx+1iHbTFhy3v2kzEbZIw5dhn9cl8g=)
2: Lqd1mryq0eI3XAJCMSKyJDpltOI.roa (hash: NKrZd+8ubVZMRdGL7RM/ghy07bvO6vCdLTdgz04D2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:b9:63:8a:65:62:2e:32:10:74:d1:1c:8d:65:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Jun 13 13:00:24 2026 GMT
Not After : Jun 14 13:00:24 2026 GMT
Subject: CN=ebd06fb519ec669b4501b8416c817bf3580645d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:30:60:c3:83:b4:d2:10:70:24:c1:01:56:
4b:8b:5c:5d:3b:1d:21:4a:09:05:b0:46:c7:f8:9b:
40:d7:5b:0c:9b:d6:31:c0:28:b3:33:bf:25:5e:84:
91:a2:08:b4:ac:c9:59:18:3a:5f:ea:14:b2:03:02:
cd:23:26:e6:d3:ed:16:19:22:05:70:83:5d:71:b2:
b2:d7:24:33:16:67:bd:2f:45:d2:82:77:b2:49:ee:
ed:ec:41:9c:55:c1:38:f5:48:a1:f4:e8:0b:a6:18:
33:bb:bd:57:65:e5:a3:6a:91:54:c1:e4:58:ae:31:
41:b3:f3:89:a0:2e:63:c6:b6:d3:6a:af:e4:41:19:
e1:95:a1:17:0a:6d:8b:a0:3d:de:f9:69:14:99:82:
b2:f9:39:09:a4:f9:24:23:92:f3:ef:ae:1e:70:3b:
64:45:42:4b:d4:d5:0e:39:5e:fa:47:4b:b3:a6:ed:
7a:de:8e:65:c9:ca:74:ce:74:21:4b:9a:ba:f4:0a:
b4:d3:e5:ae:8a:e8:11:e9:a7:da:a3:5a:ae:48:49:
da:11:f8:40:2b:17:76:e9:4d:48:a9:ac:a3:25:2d:
e1:f1:c7:41:1f:ac:aa:b9:43:87:26:f2:c7:36:92:
ed:c5:72:13:d4:a2:dc:b8:12:fb:64:bf:77:f0:9f:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:6F:B5:19:EC:66:9B:45:01:B8:41:6C:81:7B:F3:58:06:45:D9
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4f:47:98:67:60:61:a5:24:0b:83:6c:83:83:0d:35:cc:33:
2d:30:48:ff:89:4b:04:e5:57:92:f1:d0:3d:10:4b:f1:e4:da:
84:56:30:da:87:93:3a:74:58:18:35:c2:92:f4:67:6a:bf:ec:
ce:5c:f0:0f:9b:43:cc:03:6d:b8:bf:95:2e:c2:11:3d:45:0a:
76:87:07:62:97:e9:42:fd:75:38:56:d1:e4:8b:9f:24:6c:05:
70:85:10:d6:f8:62:a2:48:0b:d1:34:0b:51:d0:27:e0:a9:f0:
46:47:15:08:2f:4e:0d:a4:3f:c7:da:e6:87:7c:32:8d:a7:5a:
e2:30:24:e7:bc:09:df:ac:0b:bf:e9:40:d9:02:0b:a1:27:df:
90:88:60:32:b9:04:c6:a0:da:69:fc:d7:8f:de:27:9a:a5:70:
e2:1d:e5:8a:cd:f1:9d:9d:90:d9:11:06:af:34:4e:5d:6d:50:
61:43:bc:85:04:da:f7:5a:19:9b:cc:9e:27:f4:ca:61:2f:ae:
9d:c0:82:ef:02:d4:86:ca:6f:53:87:de:a7:b6:7a:24:c9:21:
f7:05:bd:dd:cc:04:21:1c:b7:e2:5c:03:ab:d3:9f:f6:b9:8e:
44:87:3a:68:a4:d0:cc:3f:f2:36:08:cd:90:0b:53:ed:0d:3a:
e8:a9:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:41 2026 by rpki-client