Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: ETfZNP8+HORYyrHauPzvSMVCHL+uf7qdBEkeo16Km1U=
Subject key identifier: F0:E4:39:52:DB:F4:0B:5D:23:1A:6F:49:BB:50:B9:AC:1E:AA:EB:3A
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 019F190C6A18CA29B9A758A7F06820F27BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 15:01:11 +0000
Manifest this update: Tue 30 Jun 2026 15:01:11 +0000
Manifest next update: Wed 01 Jul 2026 15:01:11 +0000
Files and hashes: 1: 8Cyiu9TGgmUOUznTzwuimvpBz-0.roa (hash: fxDhOvakeaBpONzylzbpa6MC2T2cHPWJh3ryLVED65Q=)
2: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: aMEcgEs3DhA3QY6vuZmRHmS+TQ9mvxId5L6E5/UwykE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:6a:18:ca:29:b9:a7:58:a7:f0:68:20:f2:7b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: Jun 30 15:01:11 2026 GMT
Not After : Jul 1 15:01:11 2026 GMT
Subject: CN=f0e43952dbf40b5d231a6f49bb50b9ac1eaaeb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:6f:8c:d5:39:7c:cd:13:31:18:87:b4:79:
90:44:38:ec:e5:ad:8d:6d:8e:a7:41:b7:a6:41:e4:
a3:88:25:be:93:21:22:aa:1b:22:8f:6e:0a:8c:c6:
1c:05:b9:6c:ed:c7:b9:97:3d:d4:f1:8a:6c:bf:db:
4f:b0:57:2b:32:b2:45:c3:13:c6:b7:ef:93:f2:55:
49:18:f8:99:c1:57:04:d6:01:0e:d1:41:2c:95:be:
47:d1:9b:8e:cc:77:b0:48:2f:f2:96:28:d2:eb:dd:
55:b5:5f:22:cc:95:cb:d3:14:f1:50:b4:ee:ff:46:
85:9d:00:e9:26:82:b8:9b:05:3b:fd:f2:03:d0:40:
58:24:60:66:27:53:50:6a:10:ca:f9:37:f0:cc:87:
e4:3e:36:b8:c4:16:b3:5b:2b:52:0a:d7:22:b2:6e:
46:31:41:d0:df:23:c8:6c:d5:55:4c:5f:87:8e:b7:
3a:33:c3:ec:5b:35:cc:80:6a:a4:cb:86:f5:0f:f1:
f3:5f:cf:42:a6:01:1a:99:f3:23:f1:2f:d6:40:55:
22:2d:97:e2:e6:06:2d:56:a5:ee:e9:6f:11:8c:c0:
42:a7:e1:bc:25:9f:88:ca:40:98:6e:ed:6c:d0:e6:
76:d4:b4:26:a7:70:4f:bd:83:37:34:67:9c:6b:a5:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E4:39:52:DB:F4:0B:5D:23:1A:6F:49:BB:50:B9:AC:1E:AA:EB:3A
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5c:e2:1d:3d:9b:fb:07:67:df:cb:4f:3c:1e:1d:26:34:04:
46:ca:75:98:97:f4:5d:0f:e3:ac:84:ac:27:02:56:59:dc:47:
46:68:49:22:39:41:93:dd:9e:fe:b5:e6:ed:f3:4e:3e:57:fa:
34:ef:e9:f9:81:3b:e3:3f:52:60:a9:6f:54:a9:82:69:73:5d:
8e:c1:cc:11:3b:94:fb:93:b1:1d:de:b3:5a:26:9a:9c:64:4f:
7e:5d:cd:37:ee:0a:7f:65:9f:c2:98:97:7d:42:5d:40:8a:2c:
dc:3a:2f:88:33:1c:e4:f3:0e:d2:6c:78:8c:ef:2a:32:4d:6e:
a1:a1:66:b3:36:31:b5:bf:a6:fe:ad:58:c7:3f:17:41:73:93:
95:17:e6:d1:69:a6:7e:73:84:8d:0c:8f:a4:c7:f1:4b:c7:55:
72:f3:26:d6:e5:51:96:17:28:31:2d:bf:fc:e4:37:39:31:07:
17:b8:5c:e9:0e:7a:e4:80:e7:b4:28:a4:61:ba:2a:aa:8c:12:
1e:1b:03:a9:44:f7:58:37:e6:10:b9:5b:e1:8e:3b:d3:cc:7a:
9f:e2:dd:b3:61:e2:d1:a1:e1:48:74:af:44:6a:12:62:dd:a4:
20:cc:83:63:72:14:2c:85:a3:ca:42:d7:e2:51:e3:e1:a8:5f:
b9:99:42:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDGoYyim5p1in8Ggg8nviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTQxZWJlMTI3MmEyMWNhZTBlYTFiMzVkYzA4M2ZhZDY4
YTVkN2QwHhcNMjYwNjMwMTUwMTExWhcNMjYwNzAxMTUwMTExWjAzMTEwLwYDVQQD
EyhmMGU0Mzk1MmRiZjQwYjVkMjMxYTZmNDliYjUwYjlhYzFlYWFlYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKtvjNU5fM0TMRiHtHmQRDjs5a2N
bY6nQbemQeSjiCW+kyEiqhsij24KjMYcBbls7ce5lz3U8Ypsv9tPsFcrMrJFwxPG
t++T8lVJGPiZwVcE1gEO0UEslb5H0ZuOzHewSC/ylijS691VtV8izJXL0xTxULTu
/0aFnQDpJoK4mwU7/fID0EBYJGBmJ1NQahDK+TfwzIfkPja4xBazWytSCtcism5G
MUHQ3yPIbNVVTF+Hjrc6M8PsWzXMgGqky4b1D/HzX89CpgEamfMj8S/WQFUiLZfi
5gYtVqXu6W8RjMBCp+G8JZ+IykCYbu1s0OZ21LQmp3BPvYM3NGeca6UQnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDkOVLb9AtdIxpvSbtQuawequs6MB8GA1UdIwQY
MBaAFAWkHr4ScqIcrg6hs13Ag/rWil19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85NTYwMmUtOWViMy00MThiLWJjMDAt
MTY3ODMxNjEzMTQ1LzEvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi85NTYwMmUtOWViMy00MThiLWJjMDAtMTY3ODMxNjEzMTQ1
LzEvQmFRZXZoSnlvaHl1RHFHelhjQ0QtdGFLWFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1ziHT2b
+wdn38tPPB4dJjQERsp1mJf0XQ/jrISsJwJWWdxHRmhJIjlBk92e/rXm7fNOPlf6
NO/p+YE74z9SYKlvVKmCaXNdjsHMETuU+5OxHd6zWiaanGRPfl3NN+4Kf2WfwpiX
fUJdQIos3DoviDMc5PMO0mx4jO8qMk1uoaFmszYxtb+m/q1Yxz8XQXOTlRfm0Wmm
fnOEjQyPpMfxS8dVcvMm1uVRlhcoMS2//OQ3OTEHF7hc6Q565IDntCikYboqqowS
HhsDqUT3WDfmELlb4Y4708x6n+Lds2Hi0aHhSHSvRGoSYt2kIMyDY3IULIWjykLX
4lHj4ahfuZlCiQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:12 2026 by rpki-client