Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier: hEFR9VQjWfOajUeaBHxpWsu4jtkzM2YusFrTLVST4yM=
Subject key identifier: 7F:4D:7E:72:44:0D:5B:34:2D:D7:7F:23:9C:3F:72:7F:1C:F4:D4:30
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 019CAB34A5CA24EFE148F2ABADAD09A235D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number: 0C89
Signing time: Sun 01 Mar 2026 21:01:20 +0000
Manifest this update: Sun 01 Mar 2026 21:01:20 +0000
Manifest next update: Mon 02 Mar 2026 21:01:20 +0000
Files and hashes: 1: 5T7ElemNC6g4KLG0_8xrYW5fehU.roa (hash: 1yULm6jsqwJXi2ojiG48hP/e+HZZVs+RhK8qR3uDV70=)
2: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: T2EqLnDGWQ1PL6W9CSlZgRgZiA6JD0YXq7FsWMFYCcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a5:ca:24:ef:e1:48:f2:ab:ad:ad:09:a2:35:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Mar 1 21:01:20 2026 GMT
Not After : Mar 2 21:01:20 2026 GMT
Subject: CN=7f4d7e72440d5b342dd77f239c3f727f1cf4d430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:82:88:48:c8:50:4e:4f:11:f0:26:38:ca:
4f:42:cf:b2:03:85:61:53:1a:b7:bd:58:42:ba:f7:
e3:7f:a8:9c:7c:74:0d:81:fd:c3:d9:3e:fe:af:fa:
b6:05:5e:a6:9c:1f:dc:e0:35:c9:79:e3:93:7c:df:
58:bf:96:ba:83:ca:c0:93:d9:99:36:2c:4d:32:01:
01:37:7f:50:a2:cf:a5:a6:c2:b2:ea:6c:b7:e2:89:
88:e4:0e:f8:71:6c:23:84:75:6d:43:ba:ab:75:94:
2b:0b:74:3f:4b:7f:b4:fc:43:6f:65:55:4a:9c:c0:
67:ac:c4:e2:bc:25:61:a0:ce:96:9b:31:7a:4b:a6:
f0:62:e8:9e:72:27:c4:68:99:d2:dc:b6:e1:3d:2d:
0f:16:a5:c8:91:32:ed:87:05:60:ae:68:8a:78:18:
2a:1a:71:b4:dc:c3:dc:6f:82:4e:6f:57:dd:a3:4c:
6a:1d:ca:02:49:26:ce:c2:7d:71:6e:8e:d3:7c:a2:
98:26:02:7b:0d:27:42:43:bf:3a:4b:77:4e:e4:51:
d1:17:c5:36:6b:51:68:70:c8:03:82:d7:1b:27:c7:
e0:b7:62:bf:e6:14:77:d8:06:5f:21:5a:af:cd:17:
ae:41:f0:e1:47:7d:30:0a:80:6b:0d:4e:d7:69:7d:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:7E:72:44:0D:5B:34:2D:D7:7F:23:9C:3F:72:7F:1C:F4:D4:30
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:29:8a:2b:17:74:b6:7c:5f:c7:f4:e4:d8:7a:e3:e4:85:7f:
99:b5:2d:db:9e:19:57:c2:06:ac:f5:b5:0e:b5:e6:12:95:db:
09:46:f8:68:c4:84:ff:8e:f2:df:e6:ff:85:e6:2c:5f:fa:b4:
f0:93:0a:bd:6b:c9:85:f7:c2:db:02:3f:7a:17:3f:00:c4:53:
6b:37:2f:fb:c0:77:a2:ba:63:ba:6b:b6:59:56:ca:02:9f:b5:
45:59:c0:2c:75:00:1a:46:15:0c:8f:a7:76:67:01:33:4c:b2:
c1:e6:a7:7b:d9:bd:3e:6a:cc:6e:77:90:46:8c:14:8c:62:09:
34:64:fd:ef:21:ba:df:a6:51:63:17:ab:67:09:e6:c1:f3:f9:
78:41:84:08:4e:3d:ee:8d:c8:3a:6a:ed:61:4f:9d:79:bf:c3:
0e:9d:90:73:a9:c5:22:09:ce:d9:d5:ae:f6:a9:8a:3a:b8:a3:
76:c2:7f:01:f7:66:98:84:a9:31:e5:8d:66:67:24:bf:ad:fa:
c8:c1:b6:ed:e0:fb:9d:61:ed:54:73:6f:3a:87:1a:ac:65:7d:
92:bc:b3:95:c0:b6:36:02:ef:0c:38:ef:cc:df:b6:fd:18:44:
cc:55:3b:5e:da:fe:9d:a7:4a:fe:9f:c9:54:94:bb:0a:9b:e4:
93:c1:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:03 2026 by rpki-client