Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: xXttUiNT0nA1CZoCdk01vGr2/LhV7TSUH5F1y7mJXRY=
Subject key identifier: 93:33:B0:5F:6F:8F:B0:FC:37:6E:81:55:76:60:EB:9F:F3:54:0C:E5
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 01A11CACB0D85C2537210857F2651C5F8F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 1A90
Signing time: Thu 08 Oct 2026 18:00:41 +0000
Manifest this update: Thu 08 Oct 2026 18:00:41 +0000
Manifest next update: Fri 09 Oct 2026 18:00:41 +0000
Files and hashes: 1: 8Cyiu9TGgmUOUznTzwuimvpBz-0.roa (hash: fxDhOvakeaBpONzylzbpa6MC2T2cHPWJh3ryLVED65Q=)
2: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: PmnYh+AdnYVUZNbQKdVmE7K95PmKc5JUECcSpJchGts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:b0:d8:5c:25:37:21:08:57:f2:65:1c:5f:8f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: Oct 8 18:00:41 2026 GMT
Not After : Oct 9 18:00:41 2026 GMT
Subject: CN=9333b05f6f8fb0fc376e81557660eb9ff3540ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:d0:62:dc:c3:9b:d0:ef:55:d6:b4:69:ab:
5f:ee:73:42:39:e8:ad:3c:e1:ea:8e:e1:4e:59:c5:
b2:f0:c5:5a:4f:ea:3a:12:bd:cd:b5:67:4f:1d:b5:
ee:9b:c9:1c:87:a6:10:bb:09:3c:b3:5d:47:44:1a:
6c:44:f8:16:d2:e8:93:1d:45:0c:f3:02:d9:76:2e:
c4:5d:40:64:b8:55:92:53:09:74:df:a5:60:8d:95:
46:12:82:a2:8e:ff:39:c3:6c:ea:15:04:1a:0f:4d:
12:d3:bf:b9:85:10:36:ca:62:76:8c:8f:47:2d:9c:
0b:0a:36:5d:d0:3e:d2:4a:4b:cb:4b:25:9e:10:df:
19:58:73:29:28:1e:e3:e8:0e:15:7e:38:f6:2e:32:
36:17:52:06:f9:fa:75:b2:b2:35:93:1e:06:7b:54:
6d:61:89:2b:b7:1f:25:9c:5c:e7:3e:bb:00:6d:ec:
f7:20:f2:d8:39:47:75:72:af:4b:23:3e:b4:01:11:
49:8a:d1:d3:6c:f9:69:42:6f:16:15:72:8b:34:e9:
9e:63:0a:e6:2c:bf:fa:f0:06:de:cd:31:9b:e9:80:
91:56:26:20:1b:36:a8:66:7f:a3:73:54:70:fa:e8:
85:18:cc:73:9b:41:fa:23:6f:10:ff:44:d5:70:8f:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:33:B0:5F:6F:8F:B0:FC:37:6E:81:55:76:60:EB:9F:F3:54:0C:E5
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:de:3c:39:3a:9d:67:db:78:05:67:63:b5:1e:d7:02:69:8a:
91:fa:4b:70:f1:0c:f0:e3:bc:f5:a3:ab:be:f6:26:f8:d4:ad:
46:02:86:9f:36:da:28:c7:81:51:e4:74:f9:5f:a4:bd:91:77:
d9:8d:18:58:dd:0f:e2:84:2d:63:61:7e:21:8c:9d:3d:82:89:
47:f2:e9:d3:af:b7:fa:72:85:fe:13:9d:ef:24:f6:09:c9:50:
f8:55:0a:35:39:24:6f:fa:59:72:46:ed:3f:f6:49:aa:41:77:
19:fe:57:94:3a:8b:66:57:73:6a:de:fa:9b:1c:10:6e:eb:bf:
12:08:ec:75:65:21:ab:b0:06:fd:c6:09:74:54:84:6e:be:bb:
81:33:a8:3c:14:a8:35:af:a3:60:c5:5d:ef:87:36:e4:c3:ca:
68:63:cf:a5:37:fa:db:d1:f8:55:e6:df:fa:48:6a:82:85:1d:
4f:1a:91:f4:4d:b0:0a:42:dd:c5:91:c3:63:c7:5f:dc:e9:55:
4e:68:e8:b6:83:16:81:f9:f7:6f:da:e7:b3:b5:a3:56:a6:0b:
3f:b0:4b:81:a6:e8:b2:b8:39:9e:3f:a0:cd:5b:27:bf:f0:2a:
d7:b4:9f:cf:8d:ed:4a:66:4b:56:23:ce:c0:07:3a:cb:9a:20:
ac:1c:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:58:51 2026 by rpki-client