Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
File: Bag948ZgIx8iMPHCcA4gUFobz1c.mft (raw, json)
Hash identifier: zn1nUC/tRG7EPYVcOaKNSk9syHQTwkGJ8j09QcDDaNA=
Subject key identifier: 7A:3F:B3:82:C2:3A:93:B6:E6:24:83:6D:18:9C:A2:99:BC:51:DA:11
Authority key identifier: 05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
Certificate issuer: /CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Certificate serial: 01A0DBA8B65DD30AFFC97299EBCEB3EF55B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:01:02 +0000
Manifest this update: Sat 26 Sep 2026 03:01:02 +0000
Manifest next update: Sun 27 Sep 2026 03:01:02 +0000
Files and hashes: 1: Bag948ZgIx8iMPHCcA4gUFobz1c.crl (hash: gduN79MVYFL1Rcx2gdhkkWKvWzlFgJvpIR7nEYXuMVM=)
2: HrgtmuW0yN0hsWEMTA8IRe5Ow-I.roa (hash: nkWf0uUkwJsAxVtSv5Gas9B1Em/eu7evo6LbD0YqyuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:b6:5d:d3:0a:ff:c9:72:99:eb:ce:b3:ef:55:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Validity
Not Before: Sep 26 03:01:02 2026 GMT
Not After : Sep 27 03:01:02 2026 GMT
Subject: CN=7a3fb382c23a93b6e624836d189ca299bc51da11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:7d:ee:01:dc:11:3f:43:c4:6a:3f:4e:c1:
ab:12:83:29:08:31:ae:b8:b5:c4:b3:00:1a:e6:38:
bf:4b:ac:4f:6d:8e:82:80:6c:29:a6:e5:31:ef:1d:
e6:52:66:ff:68:36:69:23:20:6a:71:b7:8e:f1:b9:
bf:b7:2e:6f:f6:86:19:ea:5f:c3:f4:bb:43:97:21:
35:c0:ad:b5:1f:4a:ab:af:ae:21:df:c0:53:f4:ed:
77:77:23:a7:69:6f:45:d1:28:d1:74:5c:0d:8a:02:
f5:e3:7a:d8:db:a9:16:05:84:f9:14:7e:8d:dd:78:
af:6c:87:e3:86:67:ff:21:86:a0:df:4e:44:6c:11:
39:49:dd:a5:2c:cf:cc:29:86:d0:98:b5:79:30:6f:
f5:81:42:f2:f4:4a:29:3a:b0:73:ec:cf:e9:90:f0:
81:8e:2b:91:71:bc:b1:89:86:1e:b1:61:ee:a4:41:
29:42:87:16:9b:5d:96:d1:71:10:0b:70:12:52:fd:
77:97:a2:4d:0f:76:2c:6b:99:13:69:4c:58:01:d9:
72:48:0c:88:07:08:2f:2d:78:26:ec:8b:da:d7:1a:
31:5a:5b:81:86:1f:31:d9:99:16:8a:a5:ad:6d:84:
d2:48:6d:a7:9a:80:1d:12:27:99:9c:59:1b:09:27:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3F:B3:82:C2:3A:93:B6:E6:24:83:6D:18:9C:A2:99:BC:51:DA:11
X509v3 Authority Key Identifier:
keyid:05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2a:6f:53:09:8c:f1:c7:d3:c6:01:19:66:cb:bf:11:10:62:
e0:a7:b0:1e:dc:81:04:26:a4:3f:74:1e:ec:5a:d3:95:9b:fb:
74:9d:19:ef:42:98:37:d2:26:f4:95:d4:29:91:7b:5d:ba:ea:
0d:bc:71:13:77:94:45:f7:b1:bc:74:3b:a9:37:d3:5e:a3:a9:
6b:20:5c:59:9f:d3:05:65:c5:a9:bd:b3:7e:a3:41:19:11:2f:
f6:95:51:ee:d8:4c:f1:ec:78:22:26:3a:a4:1c:c5:9c:a6:d7:
4c:2e:2c:75:fd:61:d7:60:7c:9d:2f:94:69:e6:30:bc:5d:54:
0b:e4:12:ab:ce:7e:3d:18:8c:2c:0a:67:cb:08:ce:56:70:77:
08:04:90:bf:30:01:93:dc:08:a0:16:53:39:7e:dd:74:1a:d7:
a5:8e:8b:47:f4:31:3e:05:f9:b3:88:e1:18:83:73:3a:95:19:
52:5b:c3:27:26:51:06:5c:9e:af:d9:fd:4a:9d:26:67:d2:f6:
ac:75:71:ad:85:38:2a:2c:9d:b6:ab:83:d4:3e:ae:e7:85:38:
41:bc:34:90:ff:94:10:e1:2e:63:1b:05:63:af:58:f1:20:f1:
e4:51:8a:f1:91:1e:8d:b6:e3:7a:c1:43:cc:1a:63:ff:86:01:
f7:d9:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:47:02 2026 by rpki-client