Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: kAyGTX2jwG4VMwuYCPzogQDqtzSeaXw/oanr1Aj5t6E=
Subject key identifier: B6:5D:36:B7:B1:C7:26:B4:17:1A:12:C3:12:4A:F5:F7:F7:96:06:99
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 01A188D1F0E6472BFAAC8A491F9EFBAEDD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 1ACA
Signing time: Thu 29 Oct 2026 18:00:22 +0000
Manifest this update: Thu 29 Oct 2026 18:00:22 +0000
Manifest next update: Fri 30 Oct 2026 18:00:22 +0000
Files and hashes: 1: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: MqNZSrAhxVb0vgnURiOz5x1C+9O5oUfch4qekADLnNI=)
2: wUMPjyaePLfaPVSKvgwCuAqDAQ0.roa (hash: k0jrrwPLfAKgb8aLxsTq8mOsryCm0vJUYn3NAWB82sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:d1:f0:e6:47:2b:fa:ac:8a:49:1f:9e:fb:ae:dd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Oct 29 18:00:22 2026 GMT
Not After : Oct 30 18:00:22 2026 GMT
Subject: CN=b65d36b7b1c726b4171a12c3124af5f7f7960699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ca:2d:2b:05:d4:d0:b3:4a:40:18:76:f7:f5:
58:52:d2:98:cd:58:dc:af:9d:e1:4a:75:89:72:06:
ea:dc:cb:7d:a1:8d:1f:57:7b:c3:4d:d3:e3:57:2d:
4b:f0:53:df:1c:d8:6e:78:9a:bf:b2:1f:bc:e3:ee:
a3:0c:a0:0f:ed:1e:79:f4:29:da:27:e6:cc:eb:bc:
3f:59:5a:64:08:25:19:1c:63:a0:d4:f6:d9:2d:e0:
67:85:54:1f:c3:d0:61:16:71:92:52:d6:11:e6:85:
57:65:41:56:88:74:9c:27:bc:bc:da:ca:76:7a:74:
2b:85:3f:3f:b9:88:b5:6b:88:99:e0:31:b7:1d:de:
52:a4:99:1b:d3:35:1b:cb:09:24:75:18:3b:14:6c:
38:cc:d6:b4:03:8c:7f:f3:91:3b:fe:51:8e:22:5a:
df:27:e8:77:06:56:22:c6:7e:46:da:88:e3:88:21:
68:ec:00:81:43:0b:62:3b:a7:8a:14:33:93:19:b5:
9c:02:b4:0f:a9:88:8d:f7:7b:02:f1:e3:3a:cf:5a:
9f:21:f2:46:a8:6d:0a:79:d0:6f:e2:48:27:3c:6b:
19:a8:9d:6a:17:0c:d7:dd:5f:1d:8d:2a:65:a9:f4:
51:fa:ff:aa:c9:84:c9:1d:b3:3d:d7:45:34:6a:8a:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5D:36:B7:B1:C7:26:B4:17:1A:12:C3:12:4A:F5:F7:F7:96:06:99
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ba:b2:f9:cb:bd:77:d7:b4:70:26:57:a8:ce:95:c2:c3:e0:
54:ea:b7:fb:38:6a:de:3f:ce:2e:ea:5a:27:08:3d:36:79:06:
5c:bf:ff:cd:06:6c:e1:ad:a3:63:75:10:0e:6f:3a:12:b2:2e:
1d:bb:a7:6a:76:5a:a7:db:05:b6:5d:e5:cf:ff:22:62:22:98:
45:a0:b5:9f:53:78:70:c4:b8:f0:13:10:07:67:47:4a:5f:58:
8c:45:76:69:1d:1c:bf:f1:31:61:c9:9f:47:3d:17:8a:ed:94:
f5:49:5d:0f:8e:e4:b9:73:00:fa:b9:71:c2:8c:2a:a4:3b:bb:
75:03:1f:3a:77:d0:ab:65:70:71:3a:28:a7:d6:a1:f8:01:39:
cd:f1:e2:7f:97:ba:79:5a:8e:d7:af:ca:b3:06:be:b2:f7:ed:
1f:aa:6b:68:34:4b:4f:3b:d3:d3:05:3b:4b:12:07:9a:83:1f:
53:16:ff:4c:54:84:ad:ff:e9:93:2e:d9:17:8f:90:66:ab:6d:
d0:9e:ad:7f:d0:05:25:ef:33:d9:cc:db:3d:ab:2b:d5:85:81:
ec:79:6f:f8:77:e0:64:ff:d4:7d:07:49:d9:24:ca:b5:79:05:
8d:8f:23:3e:28:54:4f:a4:a8:82:84:e5:4e:e6:ec:e9:57:59:
f5:0a:d8:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGI0fDmRyv6rIpJH577rt15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMGE5NjE0YWM0ZTEwZTdhMmUyYTViYzEyZjg2MjMwNjRj
ODllZjkwHhcNMjYxMDI5MTgwMDIyWhcNMjYxMDMwMTgwMDIyWjAzMTEwLwYDVQQD
EyhiNjVkMzZiN2IxYzcyNmI0MTcxYTEyYzMxMjRhZjVmN2Y3OTYwNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MotKwXU0LNKQBh29/VYUtKYzVjc
r53hSnWJcgbq3Mt9oY0fV3vDTdPjVy1L8FPfHNhueJq/sh+84+6jDKAP7R559Cna
J+bM67w/WVpkCCUZHGOg1PbZLeBnhVQfw9BhFnGSUtYR5oVXZUFWiHScJ7y82sp2
enQrhT8/uYi1a4iZ4DG3Hd5SpJkb0zUbywkkdRg7FGw4zNa0A4x/85E7/lGOIlrf
J+h3BlYixn5G2ojjiCFo7ACBQwtiO6eKFDOTGbWcArQPqYiN93sC8eM6z1qfIfJG
qG0KedBv4kgnPGsZqJ1qFwzX3V8djSplqfRR+v+qyYTJHbM910U0aopcwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZdNrexxya0FxoSwxJK9ff3lgaZMB8GA1UdIwQY
MBaAFGwKlhSsThDnouKlvBL4YjBkyJ75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTIt
ZjVhZDE2N2Q4NDk0LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTItZjVhZDE2N2Q4NDk0
LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7qy+cu9
d9e0cCZXqM6VwsPgVOq3+zhq3j/OLupaJwg9NnkGXL//zQZs4a2jY3UQDm86ErIu
HbunanZap9sFtl3lz/8iYiKYRaC1n1N4cMS48BMQB2dHSl9YjEV2aR0cv/ExYcmf
Rz0Xiu2U9UldD47kuXMA+rlxwowqpDu7dQMfOnfQq2VwcToop9ah+AE5zfHif5e6
eVqO16/Kswa+svftH6praDRLTzvT0wU7SxIHmoMfUxb/TFSErf/pky7ZF4+QZqtt
0J6tf9AFJe8z2czbPasr1YWB7Hlv+HfgZP/UfQdJ2STKtXkFjY8jPihUT6SogoTl
Tubs6VdZ9QrYsw==
-----END CERTIFICATE-----
Generated at Fri Oct 30 00:44:35 2026 by rpki-client