Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: jTkRaWobdPs4XOJb9yQbYGh6uKqZaiwtOBsdrLmuStw=
Subject key identifier: DA:96:5E:8D:54:1E:28:46:57:F4:5C:F2:72:4B:82:79:57:6F:6B:5C
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 01A001DD7A047CA6A7B39C946134EBF2174D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0DEF
Signing time: Fri 14 Aug 2026 20:01:26 +0000
Manifest this update: Fri 14 Aug 2026 20:01:26 +0000
Manifest next update: Sat 15 Aug 2026 20:01:26 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: AYf8pNU0ru5NJlGbdXgmP64o3ClHjrhRmZRZJKbzJBc=)
2: hVWAONuzeazGNdnWSgmA3i9K9C4.roa (hash: uImqFCqVZwZHHyqryIJNgNimhq6Y9tDjYPxtIUj1zD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:7a:04:7c:a6:a7:b3:9c:94:61:34:eb:f2:17:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Aug 14 20:01:26 2026 GMT
Not After : Aug 15 20:01:26 2026 GMT
Subject: CN=da965e8d541e284657f45cf2724b8279576f6b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:af:73:63:a0:61:e3:e9:c3:bc:26:a3:39:
19:84:78:56:24:16:f9:ea:d3:92:47:c3:55:57:ad:
a7:d8:f1:81:60:19:18:b8:b3:11:0c:37:79:22:a7:
f0:65:6e:2d:b5:53:ff:71:c5:d6:10:5e:f2:31:97:
24:73:5b:a0:91:3d:13:2f:ec:17:dd:c7:07:ac:31:
5a:46:ef:59:fd:93:52:15:bd:48:90:38:fb:b6:85:
b0:df:5b:8c:14:5c:c9:b1:f3:bc:b8:04:eb:ec:56:
1b:89:ca:05:30:2f:12:d7:a4:29:0c:58:10:42:52:
f9:99:a5:28:81:de:2b:48:04:9b:47:7d:e9:52:e5:
ab:f8:50:27:46:b5:79:6d:a1:17:83:01:d5:e7:40:
74:a9:6f:1d:56:f7:b4:fc:46:ef:8d:90:b2:ec:19:
70:fe:3e:1d:eb:af:76:79:5e:f9:e6:fe:9f:c9:04:
9a:af:af:01:29:4a:27:2c:d3:f4:40:b8:c1:57:dc:
4a:5e:d9:4b:85:af:7f:2d:87:8d:a8:df:fe:43:9b:
d9:d1:de:83:5b:2c:26:c4:d6:c0:25:87:d1:55:23:
49:50:b0:52:dc:62:50:f4:e1:69:31:fb:39:88:cb:
dd:f4:01:03:57:ba:03:22:4f:7f:2e:9e:cd:1a:b2:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:96:5E:8D:54:1E:28:46:57:F4:5C:F2:72:4B:82:79:57:6F:6B:5C
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a0:a0:d2:ef:a8:2c:1e:a4:23:23:86:2d:28:fb:c6:ca:5c:
32:20:47:5c:74:0a:c9:0b:69:0a:cb:56:29:ed:d8:06:81:d6:
2e:1e:25:fa:ce:3d:88:be:dc:ce:5f:44:75:28:ac:55:2d:d0:
77:49:c3:c5:cb:5d:14:e1:e2:7c:b2:59:93:97:a2:85:d1:6e:
cc:b1:b5:63:ef:78:d4:72:e3:7d:5f:a8:aa:06:a9:e7:a6:a4:
e8:a2:26:10:12:83:f9:4c:c1:f9:e4:02:91:b9:ce:cc:f5:c3:
07:3f:35:77:ed:a3:00:c3:6d:d7:9a:e7:79:6b:f4:31:25:0a:
ed:4e:42:a7:60:3d:d6:3e:1e:11:e4:7e:2d:bb:93:f6:77:ca:
81:c3:d2:b5:d0:44:6a:e6:a0:2b:02:b6:aa:d9:f6:2b:6c:7a:
5b:5e:6d:dc:c6:87:5a:99:81:67:b1:80:6d:4f:d7:d5:a2:ec:
3d:59:70:52:84:4c:e9:82:58:f4:e6:38:5b:dc:65:4a:0f:c7:
ec:64:c9:2a:a9:0f:1b:36:a0:0f:67:82:68:79:5b:b0:53:bd:
e7:13:00:b5:7b:b2:3f:03:4d:cd:d8:f5:2a:84:43:0b:f4:19:
0e:a9:fe:79:d1:c9:97:fa:d9:50:c7:8d:ee:79:0b:ea:55:2b:
06:9d:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:34 2026 by rpki-client