Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: hJODzP+l2/DkC+2ZpBhSBPL9kDqwuy9N/BeK4umwGJw=
Subject key identifier: D0:49:93:A6:7F:5F:72:91:3E:F4:28:24:89:A1:93:58:0F:72:71:90
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 019E2F5F973A85F63BDFC5EBE6C22D2292B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 190C
Signing time: Sat 16 May 2026 06:00:54 +0000
Manifest this update: Sat 16 May 2026 06:00:54 +0000
Manifest next update: Sun 17 May 2026 06:00:54 +0000
Files and hashes: 1: 8Cyiu9TGgmUOUznTzwuimvpBz-0.roa (hash: fxDhOvakeaBpONzylzbpa6MC2T2cHPWJh3ryLVED65Q=)
2: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: I0w0fh2zXSLOJ7HbzuiahTmfxZl1VVLrYpqFJMDWyJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:97:3a:85:f6:3b:df:c5:eb:e6:c2:2d:22:92:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: May 16 06:00:54 2026 GMT
Not After : May 17 06:00:54 2026 GMT
Subject: CN=d04993a67f5f72913ef4282489a193580f727190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:69:8e:d9:f3:c1:46:43:e6:f8:93:b8:41:
34:65:bd:0a:a4:22:32:5f:82:73:71:27:ea:01:09:
15:89:23:5d:11:3f:5d:73:8f:35:be:ab:f8:cc:97:
61:f9:e7:38:99:a7:df:57:10:fb:38:68:b1:b6:3e:
c5:11:a8:49:d1:d7:c0:5e:77:5b:f0:4d:95:1a:f8:
37:a1:65:3e:db:12:49:81:4c:8f:c4:f7:86:84:f1:
e4:09:fb:38:91:a5:73:03:a1:54:ef:c2:40:54:18:
4b:a4:64:1c:2b:0b:89:df:c2:46:90:03:08:5c:fc:
9a:48:c6:e0:f6:f0:e7:94:25:4b:68:0d:d2:7f:4b:
95:6f:aa:bc:b6:2a:c8:7d:ec:da:d0:be:4e:f0:bc:
9e:75:2e:58:23:af:a5:d9:e0:30:df:6c:f6:26:01:
c5:e9:af:f9:44:c9:6e:86:82:d6:2c:3c:9b:ca:26:
bb:9b:ab:f2:78:b4:58:94:8f:ca:fe:47:6f:e1:ac:
ba:90:1a:07:12:f5:2c:b3:b7:ba:c9:35:57:f5:18:
3c:31:a5:ac:27:2d:3a:b3:6a:0d:b4:c0:22:da:ba:
88:43:4a:0f:a1:92:42:fd:83:f2:f8:c6:b8:7a:e9:
78:cc:b7:1f:31:65:54:f4:84:d1:75:d0:31:39:ad:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:93:A6:7F:5F:72:91:3E:F4:28:24:89:A1:93:58:0F:72:71:90
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:02:52:3b:1d:11:8d:2d:b7:1c:f5:fe:c5:90:02:99:91:e0:
61:64:b9:d3:bd:b8:5e:d7:ac:51:81:a4:e3:6f:d7:29:51:a9:
db:d8:ec:c8:6e:81:e2:25:87:b9:38:2c:e3:82:0b:53:9a:e6:
0c:04:82:0e:a8:db:a3:8e:48:92:5e:89:4b:32:1e:70:f5:83:
92:34:cf:92:53:64:fd:0b:03:88:8a:f3:8d:ee:c4:bb:c6:86:
d3:5d:30:a9:b7:0c:e7:fb:3b:1f:5e:6e:1d:0a:71:1d:b7:94:
f4:80:d1:8d:cb:93:6c:aa:fa:54:6c:2b:17:3b:a7:fd:09:f7:
25:0f:7b:46:0f:e3:87:09:88:63:48:4a:92:01:88:3b:79:68:
6a:94:5c:9d:ce:af:0e:75:d8:ea:37:47:38:27:82:cf:23:96:
5a:e8:ca:ef:72:7c:3f:45:ed:03:bb:3f:7b:bb:b9:54:b2:9f:
46:b4:77:51:7d:13:8d:71:94:8c:ec:d0:af:49:e0:16:d0:92:
ab:64:49:7b:92:89:c9:20:fa:75:6e:2d:c1:31:da:6a:31:ef:
db:34:9e:a1:d7:5b:d3:41:20:65:64:09:0d:3d:a6:ed:af:5c:
99:97:51:54:9b:27:61:42:eb:b7:75:47:f4:c1:df:2a:8b:c9:
25:aa:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:45 2026 by rpki-client