Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier: lW3G+LVS/qFz2MEwKjL8eAsNmTwIG9jAv7TXOqF/xCY=
Subject key identifier: 55:22:0C:0D:BE:C3:36:94:F8:38:0B:16:85:CF:6B:77:12:E9:8A:27
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 019FA8D02BDD4ED3D21E6EBCFDAE071C6BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 13:00:42 +0000
Manifest this update: Tue 28 Jul 2026 13:00:42 +0000
Manifest next update: Wed 29 Jul 2026 13:00:42 +0000
Files and hashes: 1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: uqDMO1ElfTFQyBcH5AjTOJMoB8ISNMt6XMQ88zhlfSw=)
2: Lqd1mryq0eI3XAJCMSKyJDpltOI.roa (hash: NKrZd+8ubVZMRdGL7RM/ghy07bvO6vCdLTdgz04D2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:2b:dd:4e:d3:d2:1e:6e:bc:fd:ae:07:1c:6b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Jul 28 13:00:42 2026 GMT
Not After : Jul 29 13:00:42 2026 GMT
Subject: CN=55220c0dbec33694f8380b1685cf6b7712e98a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:06:26:a5:53:3b:a1:3b:53:a0:24:eb:17:
78:b6:87:16:64:e9:c5:b7:82:8d:72:b0:f0:0d:32:
5a:d5:1f:60:f4:40:2c:6c:d5:78:ca:9b:37:36:d4:
8c:65:41:05:88:ea:aa:f7:6a:6b:cc:46:8b:f2:f0:
4d:bf:19:13:f5:2b:0c:c6:5f:04:e1:1b:5b:1a:a7:
e8:9d:ed:5d:f3:0a:d2:b5:66:e3:fd:38:59:f7:ff:
aa:7a:a1:1b:bb:61:98:f7:bc:22:22:2d:a2:0b:c6:
5e:0d:65:21:5c:0d:9e:b6:71:4d:ae:73:29:86:f9:
83:a9:22:b0:f8:24:87:de:94:50:8d:6e:3e:cf:80:
f6:83:d1:36:5f:6a:37:56:b0:55:85:a8:07:7f:00:
50:64:f1:61:a2:f5:e3:b0:ab:b3:2c:78:58:3d:6f:
88:22:72:ca:70:31:91:ec:14:26:fb:29:75:6b:8f:
86:3a:51:f8:28:29:ea:44:2c:cb:03:8a:cb:11:9d:
96:45:87:e4:71:7e:6c:20:9b:06:20:9e:27:b5:15:
26:58:80:7c:47:92:86:d1:40:c1:bd:f4:e9:f5:07:
be:f0:3a:23:ee:43:41:2f:8d:14:13:b8:1e:13:7d:
e4:52:45:fd:cb:5a:d3:06:aa:e7:84:25:fb:3c:83:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:0C:0D:BE:C3:36:94:F8:38:0B:16:85:CF:6B:77:12:E9:8A:27
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:09:81:ef:62:fc:6c:97:22:b8:03:e6:9e:db:ce:8e:cd:30:
63:7e:6e:ea:43:58:a4:1f:d9:26:0c:52:81:f1:c1:a6:ad:59:
f4:53:5e:a5:61:4d:8c:1a:9d:fa:f7:ce:67:d0:4d:20:c7:07:
94:49:5b:56:43:9d:fc:05:8c:ba:c7:8c:4e:75:5a:69:d2:59:
c7:20:54:1b:d6:3c:10:a1:76:22:5a:4e:aa:66:0f:ca:f9:1e:
5f:ca:cd:db:bd:f8:af:db:c9:05:ff:b4:7c:4c:c5:d1:f7:0c:
73:84:0c:d1:cb:d7:78:53:a5:cd:5d:0a:8f:57:a3:9c:d6:f3:
af:0d:14:ec:ab:8e:06:f7:e1:dc:cc:d5:3e:8d:23:b8:78:1c:
ff:cc:f1:54:8a:d4:2c:27:77:85:63:d0:17:ef:27:28:e2:28:
c7:cd:2a:ea:ab:7d:c3:40:21:69:18:31:05:54:8d:db:a7:b9:
5b:54:db:84:a5:db:39:7c:28:05:9b:ab:2a:82:02:a9:7d:22:
b4:09:a7:85:4e:14:37:06:3d:a3:9c:19:91:fc:cf:fb:63:13:
fb:24:21:e2:0e:ad:d1:60:ad:56:0d:8b:9d:f6:27:d2:40:2d:
73:02:bb:16:9e:c1:f1:e2:52:f9:0e:36:c3:49:2b:be:32:1e:
ec:8c:03:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0CvdTtPSHm68/a4HHGvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YWU1ZjIzZGI5ODNmZDEzNmFlOWQ3MWU4N2UxZTUxMzBi
Y2Y2ZDQwHhcNMjYwNzI4MTMwMDQyWhcNMjYwNzI5MTMwMDQyWjAzMTEwLwYDVQQD
Eyg1NTIyMGMwZGJlYzMzNjk0ZjgzODBiMTY4NWNmNmI3NzEyZTk4YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkcGJqVTO6E7U6Ak6xd4tocWZOnF
t4KNcrDwDTJa1R9g9EAsbNV4yps3NtSMZUEFiOqq92przEaL8vBNvxkT9SsMxl8E
4RtbGqfone1d8wrStWbj/ThZ9/+qeqEbu2GY97wiIi2iC8ZeDWUhXA2etnFNrnMp
hvmDqSKw+CSH3pRQjW4+z4D2g9E2X2o3VrBVhagHfwBQZPFhovXjsKuzLHhYPW+I
InLKcDGR7BQm+yl1a4+GOlH4KCnqRCzLA4rLEZ2WRYfkcX5sIJsGIJ4ntRUmWIB8
R5KG0UDBvfTp9Qe+8Doj7kNBL40UE7geE33kUkX9y1rTBqrnhCX7PIP81QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUiDA2+wzaU+DgLFoXPa3cS6YonMB8GA1UdIwQY
MBaAFAWuXyPbmD/RNq6dceh+HlEwvPbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NDVmY2ItZjQ3Mi00MDM5LThiMWQt
NDRlZmQxMzA2NTljLzEvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NDVmY2ItZjQ3Mi00MDM5LThiMWQtNDRlZmQxMzA2NTlj
LzEvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgmB72L8
bJciuAPmntvOjs0wY35u6kNYpB/ZJgxSgfHBpq1Z9FNepWFNjBqd+vfOZ9BNIMcH
lElbVkOd/AWMuseMTnVaadJZxyBUG9Y8EKF2IlpOqmYPyvkeX8rN2734r9vJBf+0
fEzF0fcMc4QM0cvXeFOlzV0Kj1ejnNbzrw0U7KuOBvfh3MzVPo0juHgc/8zxVIrU
LCd3hWPQF+8nKOIox80q6qt9w0AhaRgxBVSN26e5W1TbhKXbOXwoBZurKoICqX0i
tAmnhU4UNwY9o5wZkfzP+2MT+yQh4g6t0WCtVg2LnfYn0kAtcwK7Fp7B8eJS+Q42
w0krvjIe7IwDgA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:28:19 2026 by rpki-client