Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: I2Q8pDQXyw1ipCNsMZBJkKb87FkDodtggBJzi2MT4ew=
Subject key identifier: CE:54:F4:A1:17:97:47:09:10:FF:F7:58:A2:5A:51:FD:37:98:01:87
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 01A089E832983FB5C7DCAF60E974898C3F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 06:01:30 +0000
Manifest this update: Thu 10 Sep 2026 06:01:30 +0000
Manifest next update: Fri 11 Sep 2026 06:01:30 +0000
Files and hashes: 1: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: 31AeyWi5uHf7mOqkM+XhPbbSL4BW4nUr1HnULStnFtc=)
2: wUMPjyaePLfaPVSKvgwCuAqDAQ0.roa (hash: k0jrrwPLfAKgb8aLxsTq8mOsryCm0vJUYn3NAWB82sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e8:32:98:3f:b5:c7:dc:af:60:e9:74:89:8c:3f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Sep 10 06:01:30 2026 GMT
Not After : Sep 11 06:01:30 2026 GMT
Subject: CN=ce54f4a11797470910fff758a25a51fd37980187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:40:3c:38:b0:6e:fa:25:1a:7d:68:47:a7:
89:d3:cf:b5:5c:3d:29:1b:84:50:f9:ee:c5:9d:61:
3a:56:49:d8:fd:83:af:7f:c6:c9:16:22:85:c9:bb:
5a:16:70:44:6e:7b:aa:7e:9d:81:aa:a9:52:50:d7:
49:29:5d:27:f6:e3:6c:82:54:12:47:69:9b:a8:7e:
9f:22:13:89:9c:0f:ea:89:f0:8d:6b:fe:77:99:61:
f7:3b:66:e3:41:02:a7:b7:0f:b7:6f:ce:e3:17:d9:
5f:1b:df:dd:78:25:db:76:60:d3:a4:3b:48:89:af:
a1:c3:e1:37:9e:94:80:86:55:21:83:43:6f:71:0f:
58:f9:4d:38:ca:a1:26:b4:6f:95:90:c6:2a:58:68:
d2:bb:dd:08:f0:a1:83:54:2a:08:29:5f:5f:c9:da:
8d:40:0c:06:26:da:96:32:bf:83:9b:f4:fe:eb:92:
80:1a:b1:64:92:9b:58:9e:09:5a:44:4f:0a:73:d7:
da:e8:5c:e9:d4:54:d1:e4:ef:1e:df:e1:49:6d:be:
06:f3:84:f0:8a:b8:fc:11:e1:7d:7b:85:5c:14:d2:
f0:cf:bc:13:6f:5d:8f:6b:09:75:05:9b:e6:eb:08:
08:82:63:ef:46:ca:d8:15:da:90:40:9f:69:17:48:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:54:F4:A1:17:97:47:09:10:FF:F7:58:A2:5A:51:FD:37:98:01:87
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6e:b2:a2:94:18:e6:10:63:80:50:2f:d2:cb:c4:fa:22:47:
d1:73:56:e2:e6:c3:03:2b:f6:76:a6:81:38:57:1e:28:4b:df:
88:45:6d:e7:98:3d:21:0c:6a:3d:00:aa:9a:82:db:73:be:77:
58:aa:52:cf:61:76:d0:6d:79:74:1f:1d:29:a9:68:71:ba:00:
cc:98:2b:9e:41:27:9a:71:67:0c:4f:b9:93:65:d8:09:ce:79:
85:cb:2e:bb:56:0f:d6:5c:54:68:03:58:e1:ee:79:e2:2b:69:
ed:79:81:df:0c:4a:dd:2c:ac:b7:46:23:89:25:d4:86:48:73:
a4:ac:20:28:7c:99:a3:a2:44:06:64:e1:3a:ce:e5:f7:93:a6:
d6:fe:45:d4:e2:24:05:71:7b:9f:08:3d:4b:05:7c:45:02:88:
68:fa:ae:98:89:d9:ee:5f:9f:ef:27:5f:f4:bb:d9:b9:a3:8c:
0e:0c:c5:94:79:d7:80:b9:cc:e0:3e:61:53:23:82:80:63:72:
98:d5:82:d9:6d:3b:b1:01:ec:0f:33:06:b3:62:2d:d2:95:40:
46:1b:44:b5:25:ab:66:fc:19:0c:7e:c1:cb:df:a0:34:83:d7:
d8:5d:0a:b1:8e:7b:6e:b8:0e:9b:ef:dc:8b:04:a3:8c:26:52:
f3:05:e1:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ6DKYP7XH3K9g6XSJjD9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMGE5NjE0YWM0ZTEwZTdhMmUyYTViYzEyZjg2MjMwNjRj
ODllZjkwHhcNMjYwOTEwMDYwMTMwWhcNMjYwOTExMDYwMTMwWjAzMTEwLwYDVQQD
EyhjZTU0ZjRhMTE3OTc0NzA5MTBmZmY3NThhMjVhNTFmZDM3OTgwMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRhAPDiwbvolGn1oR6eJ08+1XD0p
G4RQ+e7FnWE6VknY/YOvf8bJFiKFybtaFnBEbnuqfp2BqqlSUNdJKV0n9uNsglQS
R2mbqH6fIhOJnA/qifCNa/53mWH3O2bjQQKntw+3b87jF9lfG9/deCXbdmDTpDtI
ia+hw+E3npSAhlUhg0NvcQ9Y+U04yqEmtG+VkMYqWGjSu90I8KGDVCoIKV9fydqN
QAwGJtqWMr+Dm/T+65KAGrFkkptYnglaRE8Kc9fa6Fzp1FTR5O8e3+FJbb4G84Tw
irj8EeF9e4VcFNLwz7wTb12Pawl1BZvm6wgIgmPvRsrYFdqQQJ9pF0j/nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5U9KEXl0cJEP/3WKJaUf03mAGHMB8GA1UdIwQY
MBaAFGwKlhSsThDnouKlvBL4YjBkyJ75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTIt
ZjVhZDE2N2Q4NDk0LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTItZjVhZDE2N2Q4NDk0
LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfG6yopQY
5hBjgFAv0svE+iJH0XNW4ubDAyv2dqaBOFceKEvfiEVt55g9IQxqPQCqmoLbc753
WKpSz2F20G15dB8dKalocboAzJgrnkEnmnFnDE+5k2XYCc55hcsuu1YP1lxUaANY
4e554itp7XmB3wxK3Syst0YjiSXUhkhzpKwgKHyZo6JEBmThOs7l95Om1v5F1OIk
BXF7nwg9SwV8RQKIaPqumInZ7l+f7ydf9LvZuaOMDgzFlHnXgLnM4D5hUyOCgGNy
mNWC2W07sQHsDzMGs2It0pVARhtEtSWrZvwZDH7By9+gNIPX2F0KsY57brgOm+/c
iwSjjCZS8wXhOA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:18:43 2026 by rpki-client