Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json)
Hash identifier: DAKz1K98pamJEmEY2y/Pd+GHGzcud1k9shXtVEfL4sM=
Subject key identifier: C0:C1:60:77:75:D5:53:29:C9:3D:B3:69:D2:15:2E:29:86:0F:75:B4
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 01A14014C3B3A4FE99369E55EE9AC7165897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
Manifest number: 0D79
Signing time: Thu 15 Oct 2026 15:01:04 +0000
Manifest this update: Thu 15 Oct 2026 15:01:04 +0000
Manifest next update: Fri 16 Oct 2026 15:01:04 +0000
Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: mxyvHa/vmBGIqxfQEAdZQvk9q7dpR8Umpw/1gHxPpzI=)
2: ty_z9F5F_f3BDR4ug7k-DhLsplA.roa (hash: aOrvfBJ3aIsm9B11VD3D1FcnWhZg8CPxpRJXlr1jiqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:c3:b3:a4:fe:99:36:9e:55:ee:9a:c7:16:58:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Oct 15 15:01:04 2026 GMT
Not After : Oct 16 15:01:04 2026 GMT
Subject: CN=c0c1607775d55329c93db369d2152e29860f75b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:11:3a:26:65:6a:5e:30:ec:d7:97:2e:a4:
ce:36:24:f2:13:4a:f7:e0:13:93:fd:c6:45:0d:92:
85:49:5a:eb:32:1d:74:ed:f0:d9:53:16:4c:f4:01:
6d:87:48:68:9a:a0:d1:d1:ac:48:1a:e7:2c:db:4d:
08:d4:85:5a:b9:03:39:a4:f4:0d:cf:47:10:94:09:
79:a5:cd:dd:84:e8:9b:e6:48:cb:72:5c:e7:ca:0d:
68:7a:25:eb:1b:6e:63:8e:6d:66:70:0d:27:32:2a:
fc:0b:0b:c4:cd:7c:81:ab:c4:d9:c9:94:d4:47:d0:
21:f8:8c:d2:88:16:4f:b5:15:13:bf:bc:98:7e:2e:
cf:43:0b:a4:80:de:11:9a:76:23:94:8b:03:e2:67:
78:a4:88:44:45:2b:19:12:be:cd:91:eb:7b:7a:47:
65:8e:0f:b7:38:62:d3:39:36:20:51:1b:8f:1b:9b:
67:23:c4:c3:74:61:06:f7:54:60:ef:0a:5e:65:52:
ff:95:7d:df:30:f8:cf:e4:a2:0a:32:74:1e:6b:85:
ae:5e:89:48:9f:ce:ea:34:e2:21:11:14:ff:b1:0d:
95:1f:71:a7:97:69:15:6e:70:0e:ca:08:64:ee:63:
23:20:f9:27:42:64:35:57:87:4d:75:18:2c:1f:d8:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:60:77:75:D5:53:29:C9:3D:B3:69:D2:15:2E:29:86:0F:75:B4
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:64:8a:59:9b:37:40:66:73:bb:e4:43:2c:79:a4:4d:0a:30:
e4:7e:c8:58:c0:44:1f:95:b0:f9:bd:74:e6:d1:71:3b:0a:9f:
f4:40:d2:21:a8:b8:ed:ea:67:bc:f0:85:aa:c7:15:fe:3d:32:
fa:3c:01:ee:47:ef:3d:24:02:57:50:c9:66:57:cf:68:3d:ce:
10:fe:01:81:f0:e4:d7:84:32:b5:0d:17:bb:57:11:2d:30:68:
2a:99:11:4c:25:b1:4f:48:37:c5:11:19:cc:57:5a:53:1f:c7:
81:db:4c:d0:ab:f0:30:6d:4f:3f:ef:d2:09:92:49:14:83:be:
85:b1:73:88:9f:54:b6:07:98:64:10:d2:31:d7:fb:d0:36:7b:
0d:8a:23:99:e2:b8:6a:fc:76:af:1d:e8:f1:3e:76:42:ad:40:
25:cf:77:d3:83:bf:07:b6:2e:54:e1:b5:d7:0e:16:ea:06:c7:
ed:6b:ee:2d:9b:de:c2:be:d7:70:11:61:6b:b4:ac:13:a0:92:
7f:3e:ac:a5:22:7d:5a:0b:6d:52:5d:8c:33:86:f1:d8:ef:d9:
7d:7e:97:1c:84:31:86:98:42:e5:a9:0e:61:76:55:41:b7:03:
80:fe:85:d4:a0:47:cc:ca:de:0b:d6:dd:18:8d:88:b6:be:5c:
1b:1e:a1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:45 2026 by rpki-client