Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: VX7ubUYr9i43zi1yjK/7Tr9BIv+M5wlQ6jyg2Z9vRIA=
Subject key identifier: F8:91:73:16:14:25:89:B5:7C:17:4D:B6:60:8F:CB:6D:2D:9F:43:C2
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 019D382DDD6EE84D63238927312D5DAA771E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 06:00:23 +0000
Manifest this update: Sun 29 Mar 2026 06:00:23 +0000
Manifest next update: Mon 30 Mar 2026 06:00:23 +0000
Files and hashes: 1: 8Cyiu9TGgmUOUznTzwuimvpBz-0.roa (hash: fxDhOvakeaBpONzylzbpa6MC2T2cHPWJh3ryLVED65Q=)
2: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: r/aQTmuBo0i8mWQfXGGBoCyyOd2Fl6TZ0OYLFnHA+WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:dd:6e:e8:4d:63:23:89:27:31:2d:5d:aa:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: Mar 29 06:00:23 2026 GMT
Not After : Mar 30 06:00:23 2026 GMT
Subject: CN=f8917316142589b57c174db6608fcb6d2d9f43c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:64:c1:61:05:e2:9a:96:18:3a:72:d9:b0:
79:52:8c:e6:be:cf:b2:48:13:44:29:98:22:38:b0:
1d:aa:3e:ec:d3:2d:06:14:02:ac:09:f7:21:7f:96:
14:1f:e6:fa:b3:29:dd:45:7e:a9:4a:82:21:b1:58:
44:18:f5:36:de:30:d4:66:31:30:3d:73:33:dd:ec:
ed:51:a9:ff:4a:94:6c:4e:0d:f5:c8:9c:5d:53:94:
87:0a:44:52:48:0c:f2:d0:18:87:4d:3e:f8:f4:f9:
fd:03:f8:c4:17:9a:06:8b:a2:14:a8:b9:6c:19:45:
9b:bc:d1:89:6e:b0:6c:f4:97:ac:97:63:41:8e:ef:
47:68:9e:2c:d1:b6:d2:28:7b:7d:58:f9:f6:4a:08:
d2:03:33:1d:f6:91:70:d0:33:26:3d:ee:e9:2d:6e:
b3:58:a3:fc:43:0f:50:ef:c0:f6:df:9c:6a:93:17:
69:9e:45:30:10:e5:31:e4:e1:70:61:c4:78:29:00:
d5:50:a7:90:39:10:d7:8d:c3:fb:88:23:1b:fb:3a:
e4:e7:e2:5b:93:ec:9a:7b:d8:26:c0:39:68:87:c8:
bd:2c:05:1d:8e:c4:aa:7d:cf:7d:06:31:7a:1e:01:
11:74:43:87:d1:d4:10:39:f0:ea:76:81:a4:a5:ca:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:91:73:16:14:25:89:B5:7C:17:4D:B6:60:8F:CB:6D:2D:9F:43:C2
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b0:03:5b:18:d7:5a:ff:ee:ee:45:f7:cd:f6:2c:c2:d3:a7:
c5:7e:69:eb:df:04:8b:5c:6f:0a:7b:d9:25:a8:ef:77:4f:6b:
1d:2b:00:3d:d9:5f:8c:48:17:b1:0e:90:2c:f8:ce:cf:81:ea:
fd:ef:3e:aa:68:d3:87:2c:66:ae:e4:2a:bc:0b:fe:89:b5:f6:
c6:7d:81:d9:68:7c:4f:cb:9f:44:55:0b:9f:b0:69:14:15:4b:
4d:57:fb:ad:d3:1c:09:66:ff:62:ea:3b:9b:8f:1e:5e:9e:a8:
f3:a2:6e:41:7f:0c:9f:10:02:e0:88:34:3d:19:25:95:0a:61:
72:fd:b9:14:99:ee:01:66:e2:c0:e9:c9:b9:0c:d1:76:8f:7b:
b0:44:ba:b2:01:f3:fa:c6:2d:fe:95:bb:85:65:f1:21:14:9c:
ab:ce:55:c0:f8:1b:f1:14:ef:9a:0b:a8:68:c4:95:8e:c8:f8:
f0:0f:fd:b1:a5:7c:25:bf:6e:d9:dc:44:8b:b1:3c:59:3d:cc:
ee:49:3f:a3:d3:50:cb:74:5b:19:63:07:ce:ce:e2:13:9b:60:
aa:8b:cf:15:be:23:cb:87:b1:3b:27:2a:a2:84:66:07:df:e2:
4e:68:0c:c4:75:ab:2b:f0:28:36:8c:30:44:f2:05:b4:4f:fe:
c3:13:d3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:11 2026 by rpki-client