Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier: VzR7LckMpyHYF7YsZgF+PjC5LO6hRAGOd44K3Ytt+Wg=
Subject key identifier: 12:7B:0C:AD:D1:34:E2:79:85:3B:F2:0B:75:C7:05:74:23:C7:40:76
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 01A001DD45CDED399BE3A5F6A8EA25188039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number: 1993
Signing time: Fri 14 Aug 2026 20:01:13 +0000
Manifest this update: Fri 14 Aug 2026 20:01:13 +0000
Manifest next update: Sat 15 Aug 2026 20:01:13 +0000
Files and hashes: 1: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: wbLam26eriIVRYtJfKzIxMwtY454h9CQtYKqHJCQa14=)
2: G7Xbpr7vHvkmIJQmWHsvOakqdjw.roa (hash: qWjL1bQeFwXeFmjLRN8X3nUGN5tctakBOqZVOMvExME=)
3: kUqj_jeUDh3dlpjWljMC7msoL3g.roa (hash: 6Qbo5xUNd0YNqPivHOfLW5ZqEfhVypLSM8N0TdqoUjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:45:cd:ed:39:9b:e3:a5:f6:a8:ea:25:18:80:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Aug 14 20:01:13 2026 GMT
Not After : Aug 15 20:01:13 2026 GMT
Subject: CN=127b0cadd134e279853bf20b75c7057423c74076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:bb:01:51:0b:56:0d:b0:3b:bc:53:48:da:
09:8a:28:f2:87:ff:40:e3:fd:c1:0c:2f:ae:6f:eb:
ce:b1:e0:5b:48:36:a1:46:82:f3:5a:ee:b9:cf:b1:
ed:ba:43:f6:3b:a7:50:c2:bb:b2:f5:4c:88:db:88:
c4:0e:9b:42:d8:d0:f6:2b:3c:6f:13:9a:25:a4:d7:
7c:0d:11:d8:ed:f2:64:cc:e5:1c:5c:53:f6:95:bf:
fe:28:20:5e:12:da:b0:4d:e4:36:02:f6:ef:41:44:
9b:2b:a1:e5:8c:d1:ad:b6:33:25:f8:9a:f5:a8:09:
9b:57:a3:d0:8c:0c:7e:b6:f0:cf:2c:ff:1d:01:9f:
7c:c4:6d:e0:46:9b:30:07:70:7c:25:30:d5:21:3f:
b7:17:76:31:e5:5e:55:54:85:29:be:0c:42:fd:0a:
63:21:2a:19:c6:c4:ba:f6:e9:95:6c:42:1a:98:b8:
c3:25:ad:33:e6:ef:1c:92:4b:c1:3c:8c:4c:d5:d5:
85:7d:c0:6e:ea:1b:d3:69:63:95:71:06:87:37:21:
f9:cf:98:68:41:63:08:ab:f3:68:8d:6e:f7:1c:a1:
00:38:cc:e8:7a:21:32:fa:9d:95:95:0b:09:d7:3a:
2e:da:cd:1b:ec:c7:09:e0:83:ee:93:f3:26:64:63:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7B:0C:AD:D1:34:E2:79:85:3B:F2:0B:75:C7:05:74:23:C7:40:76
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4a:57:9c:76:b6:38:b3:c7:c3:c1:f1:f3:89:b9:3a:57:41:
c5:53:36:87:87:f6:3a:a1:dd:ba:4b:da:a3:84:61:d1:85:b2:
63:ba:0b:45:34:24:0e:0a:5f:b0:1d:b7:e5:3e:7a:6f:90:31:
de:da:b1:32:e9:6a:89:8f:c0:13:b9:a9:d4:02:d6:a3:cc:70:
5b:7e:bb:4c:9e:ee:87:73:ed:21:4f:cb:94:42:51:29:5f:be:
60:b9:99:ba:94:e8:e1:c5:27:12:fc:66:dc:d7:bf:df:27:dd:
44:b5:45:30:12:4e:82:c1:12:60:2c:e8:f7:77:bf:e9:3e:e1:
b9:23:41:43:02:c2:a2:95:28:5b:f9:2d:4b:1b:ca:6a:59:2e:
d6:c0:dd:0f:1a:75:50:f0:c5:65:21:76:e3:55:e2:eb:5e:98:
d4:73:89:c6:80:3b:7c:01:32:a0:f4:cb:d3:31:56:1b:a3:3c:
3c:96:bf:fd:bd:79:1a:a3:ff:7d:c2:b7:6d:68:62:3c:1c:a6:
33:06:b4:bb:c5:6f:dc:f0:8d:12:85:05:c4:6f:b9:63:81:eb:
99:09:fc:2a:f9:f3:42:41:f8:05:92:6d:f0:d5:bb:3d:1a:f0:
77:3c:13:e7:24:ab:34:be:26:14:d6:f9:70:55:e2:5c:f8:d9:
fa:d2:0b:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3UXN7Tmb46X2qOolGIA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YWQ3OTQ5MmU4MDk5MzRkNjkzYjExODU1ZTc1MTAzMjQx
NTY5ZWIwHhcNMjYwODE0MjAwMTEzWhcNMjYwODE1MjAwMTEzWjAzMTEwLwYDVQQD
EygxMjdiMGNhZGQxMzRlMjc5ODUzYmYyMGI3NWM3MDU3NDIzYzc0MDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQq7AVELVg2wO7xTSNoJiijyh/9A
4/3BDC+ub+vOseBbSDahRoLzWu65z7HtukP2O6dQwruy9UyI24jEDptC2ND2Kzxv
E5olpNd8DRHY7fJkzOUcXFP2lb/+KCBeEtqwTeQ2AvbvQUSbK6HljNGttjMl+Jr1
qAmbV6PQjAx+tvDPLP8dAZ98xG3gRpswB3B8JTDVIT+3F3Yx5V5VVIUpvgxC/Qpj
ISoZxsS69umVbEIamLjDJa0z5u8ckkvBPIxM1dWFfcBu6hvTaWOVcQaHNyH5z5ho
QWMIq/NojW73HKEAOMzoeiEy+p2VlQsJ1zou2s0b7McJ4IPuk/MmZGMOGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJ7DK3RNOJ5hTvyC3XHBXQjx0B2MB8GA1UdIwQY
MBaAFAWteUkugJk01pOxGFXnUQMkFWnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzIt
ZjM3OTdlZjM0OGZmLzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzItZjM3OTdlZjM0OGZm
LzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEpXnHa2
OLPHw8Hx84m5OldBxVM2h4f2OqHdukvao4Rh0YWyY7oLRTQkDgpfsB235T56b5Ax
3tqxMulqiY/AE7mp1ALWo8xwW367TJ7uh3PtIU/LlEJRKV++YLmZupTo4cUnEvxm
3Ne/3yfdRLVFMBJOgsESYCzo93e/6T7huSNBQwLCopUoW/ktSxvKalku1sDdDxp1
UPDFZSF241Xi616Y1HOJxoA7fAEyoPTL0zFWG6M8PJa//b15GqP/fcK3bWhiPBym
Mwa0u8Vv3PCNEoUFxG+5Y4HrmQn8KvnzQkH4BZJt8NW7PRrwdzwT5ySrNL4mFNb5
cFXiXPjZ+tILDg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:55 2026 by rpki-client