Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier: RLuf5fmnxpIdf4sExsqkDKV8ope9WNdM1tc3uHQ3uXk=
Subject key identifier: FB:7F:E9:71:3C:CA:04:05:E9:D8:00:5D:75:40:EF:49:C0:6F:CE:EB
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 01A14FBEA0BABEC5B57CE90865A9B8895740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number: 1AAF
Signing time: Sun 18 Oct 2026 16:00:55 +0000
Manifest this update: Sun 18 Oct 2026 16:00:55 +0000
Manifest next update: Mon 19 Oct 2026 16:00:55 +0000
Files and hashes: 1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: iMcUfSBGjuQQCsr8BlrBtFv6l5J3nV8ZwIRmO1M763M=)
2: Lqd1mryq0eI3XAJCMSKyJDpltOI.roa (hash: NKrZd+8ubVZMRdGL7RM/ghy07bvO6vCdLTdgz04D2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:be:a0:ba:be:c5:b5:7c:e9:08:65:a9:b8:89:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Oct 18 16:00:55 2026 GMT
Not After : Oct 19 16:00:55 2026 GMT
Subject: CN=fb7fe9713cca0405e9d8005d7540ef49c06fceeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:94:e3:a6:a4:56:50:de:d6:07:8f:23:1c:
d3:3f:7f:83:2a:37:7a:cc:bd:09:39:42:5a:b5:75:
3f:f7:b8:6f:18:5a:83:4e:09:b4:be:d1:0b:bf:03:
60:96:be:db:23:74:be:12:ae:68:64:ab:17:e2:16:
38:15:73:87:4a:f0:8b:fe:df:5b:65:8b:03:1e:12:
c4:18:4c:69:9b:f0:95:a5:f0:2b:8f:9f:40:d7:4a:
2f:c3:40:55:74:f3:71:84:88:7d:41:09:8a:ab:e3:
44:c5:eb:a5:a4:0e:4b:ed:69:fb:d7:1a:ee:58:c4:
f9:fe:37:e5:54:c1:37:a6:55:df:a4:e5:03:b7:f1:
f0:0b:58:04:9c:12:f3:41:10:7b:bb:cc:aa:cc:b9:
0b:49:84:c3:25:c6:96:b2:b4:2d:f8:68:e7:c9:d1:
b4:72:86:b5:90:ad:0f:90:2e:34:77:7e:2c:e1:42:
83:62:fc:71:f2:bb:ad:1a:74:ef:84:80:c3:31:bf:
11:c8:99:c7:78:c1:25:f1:93:7a:9d:c5:b0:7b:20:
32:b8:9b:94:b7:83:0a:db:53:93:19:1f:ad:2b:fe:
86:da:03:5d:87:55:f9:fe:e4:d1:dc:b5:2a:4c:aa:
18:0f:c1:e0:12:97:b3:9b:18:dc:ae:78:2d:e9:53:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:E9:71:3C:CA:04:05:E9:D8:00:5D:75:40:EF:49:C0:6F:CE:EB
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0c:a5:fe:bd:71:c8:d1:85:39:ef:b6:cc:b9:a9:b7:75:70:
24:e8:c3:fd:7b:7f:0d:95:42:60:5d:09:e1:c1:65:82:58:4b:
e0:1e:85:64:5d:52:30:22:07:51:6a:36:a5:b6:fb:a0:e5:6f:
69:de:db:8e:61:43:c1:0a:b5:90:a7:79:b6:ad:17:39:57:03:
40:fe:ed:62:97:45:06:b0:a7:79:de:0b:34:b6:3f:88:80:3c:
31:a1:77:f8:c4:98:71:32:4d:61:cc:cc:08:4f:4b:ec:de:0c:
b6:3b:7a:fd:3f:b0:89:6c:84:75:9e:ca:29:4a:30:69:9e:75:
32:40:e9:fa:de:65:b0:88:4e:d8:72:67:ae:0d:b1:6b:d6:10:
60:2a:32:6a:9f:81:d8:79:5e:f2:ad:57:fe:d3:b3:fb:ee:5e:
b5:3b:a2:71:ef:32:97:f1:1c:ad:88:b9:57:34:a2:67:18:27:
59:10:20:c6:8a:9f:fd:9d:e2:81:b2:fd:01:e8:db:62:c2:56:
07:67:6b:ae:28:8c:8c:8b:a7:ec:1e:b3:ff:c6:f3:7a:ec:a1:
bc:fc:6a:b3:ae:15:46:76:2d:41:88:a7:ff:e8:b6:3a:48:fb:
75:bb:91:77:66:f7:3a:8a:3e:91:cc:be:f0:2b:20:cb:15:45:
53:70:2f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFPvqC6vsW1fOkIZam4iVdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YWU1ZjIzZGI5ODNmZDEzNmFlOWQ3MWU4N2UxZTUxMzBi
Y2Y2ZDQwHhcNMjYxMDE4MTYwMDU1WhcNMjYxMDE5MTYwMDU1WjAzMTEwLwYDVQQD
EyhmYjdmZTk3MTNjY2EwNDA1ZTlkODAwNWQ3NTQwZWY0OWMwNmZjZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLCU46akVlDe1gePIxzTP3+DKjd6
zL0JOUJatXU/97hvGFqDTgm0vtELvwNglr7bI3S+Eq5oZKsX4hY4FXOHSvCL/t9b
ZYsDHhLEGExpm/CVpfArj59A10ovw0BVdPNxhIh9QQmKq+NExeulpA5L7Wn71xru
WMT5/jflVME3plXfpOUDt/HwC1gEnBLzQRB7u8yqzLkLSYTDJcaWsrQt+GjnydG0
coa1kK0PkC40d34s4UKDYvxx8rutGnTvhIDDMb8RyJnHeMEl8ZN6ncWweyAyuJuU
t4MK21OTGR+tK/6G2gNdh1X5/uTR3LUqTKoYD8HgEpezmxjcrngt6VPadQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt/6XE8ygQF6dgAXXVA70nAb87rMB8GA1UdIwQY
MBaAFAWuXyPbmD/RNq6dceh+HlEwvPbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NDVmY2ItZjQ3Mi00MDM5LThiMWQt
NDRlZmQxMzA2NTljLzEvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NDVmY2ItZjQ3Mi00MDM5LThiMWQtNDRlZmQxMzA2NTlj
LzEvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgyl/r1x
yNGFOe+2zLmpt3VwJOjD/Xt/DZVCYF0J4cFlglhL4B6FZF1SMCIHUWo2pbb7oOVv
ad7bjmFDwQq1kKd5tq0XOVcDQP7tYpdFBrCned4LNLY/iIA8MaF3+MSYcTJNYczM
CE9L7N4Mtjt6/T+wiWyEdZ7KKUowaZ51MkDp+t5lsIhO2HJnrg2xa9YQYCoyap+B
2Hle8q1X/tOz++5etTuice8yl/EcrYi5VzSiZxgnWRAgxoqf/Z3igbL9AejbYsJW
B2drriiMjIun7B6z/8bzeuyhvPxqs64VRnYtQYin/+i2Okj7dbuRd2b3Ooo+kcy+
8CsgyxVFU3AvOg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 01:46:00 2026 by rpki-client