Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier: 53pcDM5GRBnqFgyPxc5zVASzJ7vJbj8p5mblyTl0mMg=
Subject key identifier: 88:DD:FA:48:A4:7F:CC:A2:D6:DD:42:D9:AA:DF:F3:53:62:25:AF:DF
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 019DA453C5F171EC5B4BAA73D42E80365066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number: 0D0A
Signing time: Sun 19 Apr 2026 06:00:46 +0000
Manifest this update: Sun 19 Apr 2026 06:00:46 +0000
Manifest next update: Mon 20 Apr 2026 06:00:46 +0000
Files and hashes: 1: 5T7ElemNC6g4KLG0_8xrYW5fehU.roa (hash: 1yULm6jsqwJXi2ojiG48hP/e+HZZVs+RhK8qR3uDV70=)
2: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: 410JrH79BQ67ZRd+hh5AO4qa5g2YW58AbeS5MnEyB7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:c5:f1:71:ec:5b:4b:aa:73:d4:2e:80:36:50:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Apr 19 06:00:46 2026 GMT
Not After : Apr 20 06:00:46 2026 GMT
Subject: CN=88ddfa48a47fcca2d6dd42d9aadff3536225afdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:c3:c3:5e:c2:03:e9:cf:02:12:f0:62:b0:
25:0f:12:af:1a:6a:2c:88:82:38:2e:87:e1:37:d9:
d8:a7:e9:bb:51:c9:1f:e8:22:47:b2:bb:61:ff:7a:
88:5f:b5:cd:a9:bf:da:12:c9:42:23:7f:5e:89:2b:
79:da:55:0c:31:50:e9:f9:1d:1c:9b:04:97:32:2b:
62:c2:53:fd:19:24:df:1a:83:4b:fb:9e:70:bc:ec:
82:79:ad:36:e5:45:4a:b4:a8:5d:82:a9:d2:56:22:
70:40:35:4a:c0:30:5e:00:25:34:57:76:05:cf:c3:
34:fa:1c:e7:8e:d2:3e:0b:14:6e:4e:d0:d5:53:92:
5e:e9:25:17:24:4e:ae:77:3a:7a:5e:8d:75:19:d1:
cc:b5:05:ed:60:a8:f0:df:a9:2c:98:b5:94:3b:59:
f8:ab:a5:85:34:4f:19:5f:eb:16:cc:c0:9e:5d:ee:
21:84:4e:61:44:aa:12:80:f7:9a:21:1a:5e:01:e2:
ac:9f:46:f2:e5:40:cf:a5:3e:63:12:f1:46:e0:d3:
69:7f:42:54:a7:28:f7:cf:c2:af:21:d1:0a:d3:7b:
78:ea:2e:1a:45:2e:73:c2:f2:1f:88:4f:97:12:ec:
a9:65:a1:bb:ce:3e:46:56:f5:a0:ef:74:cf:f7:79:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DD:FA:48:A4:7F:CC:A2:D6:DD:42:D9:AA:DF:F3:53:62:25:AF:DF
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0e:3f:17:e1:4b:a7:f6:ae:ff:0b:bf:05:53:db:53:f6:10:
06:ee:1e:4c:3c:c3:16:99:c6:8f:dc:a2:bd:7c:59:ce:6f:20:
41:bf:cc:83:60:6f:99:63:f2:1a:cb:15:3c:67:33:a2:6b:f2:
8d:48:ec:3f:97:e3:05:64:4c:60:fb:05:87:ec:c2:17:5c:f8:
54:28:e2:fa:0c:ac:07:3a:38:f9:b4:5e:26:f2:46:29:99:8e:
b9:c8:ff:1f:71:22:a5:cc:87:f4:60:18:62:23:05:e7:0e:54:
0e:00:6a:00:54:d7:51:7a:14:e2:df:3d:30:e6:78:af:93:0e:
c5:ef:fa:53:d7:ea:e1:7d:8a:a8:87:87:10:27:1c:d6:48:87:
e3:53:4d:ad:ac:45:59:b9:5f:a8:f9:e5:98:95:08:da:07:a2:
0d:aa:2d:47:cf:97:b9:76:24:e2:36:39:6d:c5:aa:47:65:52:
a8:e6:42:14:28:cb:4b:00:bd:50:4b:5d:b9:58:43:f2:58:68:
d9:3a:45:1c:67:cc:a3:d6:f3:91:99:05:76:0c:49:39:94:5c:
5e:1d:e3:e6:5b:cc:a4:22:43:d9:52:e3:25:94:2c:a0:6c:30:
49:b3:9d:3e:e6:ed:c2:49:7c:1d:b5:fe:37:3d:93:12:8c:f5:
f8:a4:20:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU8XxcexbS6pz1C6ANlBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk5MWFjZDdiMjI3M2Q5ZTE4NjVhZmEyNzU1ZTZmNWU2
NzJlNTUwHhcNMjYwNDE5MDYwMDQ2WhcNMjYwNDIwMDYwMDQ2WjAzMTEwLwYDVQQD
Eyg4OGRkZmE0OGE0N2ZjY2EyZDZkZDQyZDlhYWRmZjM1MzYyMjVhZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi//Dw17CA+nPAhLwYrAlDxKvGmos
iII4LofhN9nYp+m7Uckf6CJHsrth/3qIX7XNqb/aEslCI39eiSt52lUMMVDp+R0c
mwSXMitiwlP9GSTfGoNL+55wvOyCea025UVKtKhdgqnSViJwQDVKwDBeACU0V3YF
z8M0+hznjtI+CxRuTtDVU5Je6SUXJE6udzp6Xo11GdHMtQXtYKjw36ksmLWUO1n4
q6WFNE8ZX+sWzMCeXe4hhE5hRKoSgPeaIRpeAeKsn0by5UDPpT5jEvFG4NNpf0JU
pyj3z8KvIdEK03t46i4aRS5zwvIfiE+XEuypZaG7zj5GVvWg73TP93liQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjd+kikf8yi1t1C2arf81NiJa/fMB8GA1UdIwQY
MBaAFAWpkazXsic9nhhlr6J1Xm9eZy5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMt
ZDdjNmZmOTMzYzIzLzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMtZDdjNmZmOTMzYzIz
LzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhA4/F+FL
p/au/wu/BVPbU/YQBu4eTDzDFpnGj9yivXxZzm8gQb/Mg2BvmWPyGssVPGczomvy
jUjsP5fjBWRMYPsFh+zCF1z4VCji+gysBzo4+bReJvJGKZmOucj/H3EipcyH9GAY
YiMF5w5UDgBqAFTXUXoU4t89MOZ4r5MOxe/6U9fq4X2KqIeHECcc1kiH41NNraxF
WblfqPnlmJUI2geiDaotR8+XuXYk4jY5bcWqR2VSqOZCFCjLSwC9UEtduVhD8lho
2TpFHGfMo9bzkZkFdgxJOZRcXh3j5lvMpCJD2VLjJZQsoGwwSbOdPubtwkl8HbX+
Nz2TEoz1+KQgcA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:18:51 2026 by rpki-client