Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: XvwUDKqFGa6rDGNZK7fC6/2JNI3jXRwkq2hNfqeIxEA=
Subject key identifier: 79:5F:3E:91:62:86:C0:DF:4D:8E:CB:A3:5A:80:CA:9B:A7:65:20:B3
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 01A001DD1FDD7258D8CCD3A37F68793F3DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 20:01:03 +0000
Manifest this update: Fri 14 Aug 2026 20:01:03 +0000
Manifest next update: Sat 15 Aug 2026 20:01:03 +0000
Files and hashes: 1: 8L86EXisfMWARlTLlv2bxbPUN_E.roa (hash: 5jC5ZKIGyizvr6GbHsW0/xJUuk1S0ZkI1AjiMly1A0Y=)
2: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: 2k2+7wMocvW9uCIsEBO+FwBDN7gcqjsP2dUG4Zy8AC0=)
3: QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa (hash: acy/62zh/8cBwnSa4bXBmJewCaA1koJ1fIjWjxzZ/1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:1f:dd:72:58:d8:cc:d3:a3:7f:68:79:3f:3d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Aug 14 20:01:03 2026 GMT
Not After : Aug 15 20:01:03 2026 GMT
Subject: CN=795f3e916286c0df4d8ecba35a80ca9ba76520b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:ee:dd:e0:ea:11:92:ed:18:30:8d:80:52:
35:5a:16:98:6e:b3:1b:bf:dd:1e:d1:d7:cf:f4:9d:
87:df:69:b5:8e:61:61:32:bd:16:24:5d:6b:db:43:
7f:06:81:c8:3d:2f:c9:b8:24:68:22:01:c1:26:e2:
42:ff:08:45:c3:06:65:ab:86:f3:aa:f4:56:15:f0:
cd:23:f5:73:55:3f:8d:04:dd:07:19:ca:a5:f8:e0:
9d:87:a0:d2:16:13:23:a1:c5:21:3a:cc:66:75:f1:
83:a7:1e:54:82:af:98:3b:fb:53:ba:32:d1:3a:15:
56:9f:b7:67:2b:81:d3:66:43:c5:85:d0:9c:78:e9:
85:77:2b:65:91:1a:73:5a:1c:9a:cd:47:cd:a5:38:
d5:aa:83:46:6c:d7:69:f3:ea:cd:ba:66:dd:3b:29:
24:6c:86:ea:2a:e4:f8:73:54:16:44:d8:e2:65:5c:
4e:6f:93:01:d5:76:e2:bd:49:ab:33:cc:84:14:d9:
3e:18:46:2a:4d:61:af:2a:9b:77:86:73:19:c2:06:
65:66:3c:ec:45:2b:7b:f3:f6:dc:cf:d4:70:f6:7e:
b5:3e:41:0a:e3:61:c1:e1:0d:ad:11:ba:af:aa:29:
da:62:aa:df:78:81:a4:99:ed:71:f5:99:c1:e0:87:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5F:3E:91:62:86:C0:DF:4D:8E:CB:A3:5A:80:CA:9B:A7:65:20:B3
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:42:61:5e:39:72:ba:ca:07:36:d0:73:3c:0f:7b:bf:17:ae:
fc:47:87:6b:ae:bb:6a:a9:31:2e:c0:92:9a:a9:4d:59:cf:97:
ee:46:0c:5c:34:5e:be:fe:ec:71:85:5c:68:d4:cc:01:39:d4:
89:57:5c:71:8c:43:27:b0:f0:4e:4f:de:a8:98:60:ed:34:74:
eb:a6:8b:82:c2:17:ba:b9:90:91:de:b6:43:2a:77:18:db:e7:
0d:df:21:ba:79:56:eb:d9:21:56:82:b9:69:ac:7c:72:1a:42:
e1:8a:2a:93:a8:55:63:88:86:a4:11:2b:02:d8:88:9e:65:94:
35:f1:39:be:7f:e1:68:48:ba:33:07:26:4a:50:28:23:ab:66:
7b:e5:d5:5a:50:f5:5e:19:48:d2:7b:32:97:3a:12:33:89:d3:
10:f0:29:87:ce:cd:6a:b7:0e:12:66:27:99:a1:8f:fe:e5:b7:
a0:b8:2f:a4:87:ca:24:c6:62:a9:d1:5a:03:6f:d2:be:6c:d0:
38:79:10:f7:10:43:6f:7f:9e:d3:6f:7b:30:2e:eb:bb:1f:86:
74:10:e8:a2:91:66:46:59:df:c3:05:ec:b0:e7:88:bf:56:21:
a7:74:6f:6b:76:30:98:3f:43:08:20:c2:99:ed:b9:0e:d9:f0:
c2:4a:8c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:11 2026 by rpki-client