Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: xqLcjTnLo9UjXJn/26CMSQgaaWjXSVTv5SG7aIbjaTE=
Subject key identifier: 6E:3F:4C:78:68:63:50:D1:2B:EE:3C:25:AB:D1:C2:06:94:49:1B:B8
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 01A0F531F8DD398473E9025EE3CFC43BE2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0E6D
Signing time: Thu 01 Oct 2026 02:01:27 +0000
Manifest this update: Thu 01 Oct 2026 02:01:27 +0000
Manifest next update: Fri 02 Oct 2026 02:01:27 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: fxCcisjTPLkVywTY1xQH6faTOAtZQi9nTNkLBLkNC74=)
2: hVWAONuzeazGNdnWSgmA3i9K9C4.roa (hash: uImqFCqVZwZHHyqryIJNgNimhq6Y9tDjYPxtIUj1zD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:31:f8:dd:39:84:73:e9:02:5e:e3:cf:c4:3b:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Oct 1 02:01:27 2026 GMT
Not After : Oct 2 02:01:27 2026 GMT
Subject: CN=6e3f4c78686350d12bee3c25abd1c20694491bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:44:dd:61:a5:df:cb:ad:63:cf:0e:55:f6:
85:2f:e6:2b:3b:9c:eb:0b:47:96:0b:1e:f9:a6:3f:
2e:1d:92:d2:2f:b7:5f:5c:d0:33:5e:34:a3:70:9d:
1f:5f:f0:ce:9a:fc:1b:a8:b0:6c:69:bd:8e:4e:fb:
eb:c9:31:65:30:73:e8:8f:25:20:7a:84:d4:bb:09:
fe:8c:ae:3a:42:2f:7b:0a:e4:20:db:e4:72:82:e8:
26:8f:bd:38:30:73:a8:d7:14:c3:b8:1c:6f:5e:ba:
3e:28:38:12:2a:f7:36:c5:5b:da:62:db:1a:70:b1:
7f:d7:8d:62:04:94:f6:19:02:b0:31:9b:b8:0a:c0:
94:7c:84:6e:51:17:61:e9:d5:ac:1e:af:19:ef:05:
7c:6b:b1:a9:bc:dc:3b:55:23:ee:38:c2:1c:7a:39:
0e:7e:a1:34:bc:66:8a:fe:0d:12:de:a2:5b:b4:a5:
6f:af:63:57:94:57:8a:f6:7b:81:fe:6a:bf:5f:49:
ca:d0:67:93:91:a1:e6:c2:0d:ae:21:a6:02:62:d3:
8d:d7:87:5e:83:ee:2c:a0:27:43:67:36:cc:1b:ef:
d2:b5:2b:3a:a2:a0:dc:dd:9e:75:6b:9f:2d:3b:e3:
f0:7b:9f:da:52:df:af:d4:95:36:34:f9:b5:bd:6e:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:4C:78:68:63:50:D1:2B:EE:3C:25:AB:D1:C2:06:94:49:1B:B8
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:a2:cb:8a:da:42:b8:0a:84:05:24:34:65:42:65:c0:73:
83:e9:13:c9:83:fa:f2:93:75:c4:b8:b9:b9:bf:d5:38:f1:23:
06:63:5f:be:9c:14:4c:a9:20:c7:61:fd:b0:e1:be:43:1e:65:
ce:d6:8b:cb:2e:1f:e4:86:a6:24:ed:08:e2:fa:9d:d8:5b:e5:
ec:cc:10:b9:4a:2f:3e:9d:e1:90:27:16:bb:3c:ee:64:7f:86:
e6:30:11:0c:4b:4f:80:ef:99:1f:2a:fd:66:be:54:69:aa:2a:
04:af:38:7c:4c:11:63:59:31:65:06:fb:e0:83:f5:de:d0:de:
ca:70:25:f1:90:4e:75:85:e8:ce:bd:36:d2:05:1f:0e:01:84:
5b:00:d3:4f:3f:14:a7:f6:90:89:e2:b3:c1:bc:9e:b5:25:bf:
3c:a6:96:58:97:5e:4a:aa:27:3e:41:51:07:de:ab:63:28:81:
cd:2a:92:33:24:35:95:12:e0:39:d0:eb:30:16:5e:49:91:d1:
75:60:1f:ef:57:bd:e9:51:59:c9:cc:75:bd:b6:e1:ab:fe:00:
30:9d:e9:00:78:dc:7a:c5:28:4f:67:15:e8:89:de:50:63:c0:
af:6a:59:c9:1f:c3:d3:ad:86:85:71:ae:b5:66:a6:b9:41:31:
3e:43:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:10:22 2026 by rpki-client