Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier: 4FsxdRfJV/7URoxvU5Bqhvq4JaVmjRtrO7RtgXzJgDc=
Subject key identifier: 4F:EF:35:1E:FD:34:89:01:CE:37:B2:6C:14:92:10:7C:DA:AB:CE:82
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 019CAC0FF068D80B4F61AC665D8D7F44DB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: 88NqSpPGxQ4UJgR6NPFH7rW/u2l0ySjaAszCFBMOH8k=)
2: Lqd1mryq0eI3XAJCMSKyJDpltOI.roa (hash: NKrZd+8ubVZMRdGL7RM/ghy07bvO6vCdLTdgz04D2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f0:68:d8:0b:4f:61:ac:66:5d:8d:7f:44:db:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=4fef351efd348901ce37b26c1492107cdaabce82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:43:e2:c2:2b:b2:2c:d6:69:95:18:65:63:
96:fd:10:5f:25:cf:8c:82:18:44:9d:9f:d9:99:2a:
34:7f:a3:f7:06:23:87:f2:ca:ca:1a:94:de:5d:ed:
49:42:83:e0:d7:fe:cb:19:c9:1d:be:11:bb:72:5e:
89:ba:0b:49:d3:8e:09:bf:1e:13:c0:f3:bf:bc:e3:
9b:39:d5:87:fa:2c:a1:a6:db:de:ca:64:03:e3:f5:
81:4b:9a:e7:79:78:f4:fd:c0:9b:9d:38:86:7d:55:
b0:04:60:51:e7:39:0e:c1:53:aa:a2:19:18:95:47:
dc:24:be:8b:fd:de:80:e0:e3:6c:ad:07:15:da:24:
c5:2e:4c:ef:c8:0e:9d:a7:8d:ea:9e:66:d8:c8:6e:
0e:bb:e7:b7:3e:09:5a:aa:d6:1a:69:6a:f8:9c:46:
d8:af:92:2b:f2:77:58:fe:f9:71:d6:b4:85:05:4f:
94:2d:9e:6f:eb:e6:f9:3b:9e:59:43:f8:50:34:75:
06:ff:20:82:5a:c3:25:b9:a8:a8:86:12:2e:f7:62:
4b:de:6b:33:24:90:a4:88:18:d3:c3:83:5d:53:46:
e9:f0:6e:b4:0d:a9:c7:7f:58:ca:33:74:bf:d8:71:
c8:76:6d:9b:ff:71:7c:78:50:77:df:38:28:5f:12:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EF:35:1E:FD:34:89:01:CE:37:B2:6C:14:92:10:7C:DA:AB:CE:82
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:eb:28:54:13:8b:93:42:10:6d:0b:48:cb:50:72:24:72:c6:
37:8b:3d:f7:65:10:28:35:70:0d:f2:0e:fd:f4:b2:4c:74:64:
f5:ca:b9:ee:cf:ea:cd:ce:e7:ab:2c:9d:c0:06:16:35:5b:f0:
77:19:76:02:10:11:ab:a5:cb:5a:c2:5d:de:cd:a8:d3:e7:5d:
db:21:eb:dd:44:61:3c:86:29:da:c7:d4:7c:a5:3d:b4:53:0d:
6b:fa:a4:2e:f1:2a:1a:66:14:dd:c0:77:ce:27:1d:18:ce:a7:
e6:36:00:07:16:06:9f:c1:8e:6a:4e:74:89:4b:79:28:61:bf:
19:a9:37:a8:1d:97:99:fe:31:1d:14:76:b6:fc:38:f0:35:ee:
09:d7:be:64:98:8a:b8:45:4f:d1:4c:a1:cb:b0:6a:a7:d6:3c:
57:27:6b:56:4d:12:ef:92:8f:32:e9:2a:29:46:74:8f:7a:ba:
5a:12:d4:13:da:f0:2f:d2:27:17:c9:93:48:50:c3:d6:69:75:
e1:f4:1b:6a:8c:dc:b0:d2:8f:4e:e7:32:29:09:43:b7:d5:60:
7f:00:f3:27:e8:75:f4:4e:3c:1f:9b:8e:68:1c:db:2e:9e:f4:
c6:ad:d1:79:7d:0c:38:19:e4:06:61:38:09:6d:cc:d4:73:a8:
7a:e3:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:55 2026 by rpki-client