Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
File: Bag948ZgIx8iMPHCcA4gUFobz1c.mft (raw, json)
Hash identifier: xmJRKfsSaflVUg0/5yqpO1GvMAZYJkzs9X0jBmKoAek=
Subject key identifier: 3D:E2:92:BD:0E:A4:8B:51:66:E4:B7:DC:5F:CC:9F:BA:1B:B6:2B:44
Authority key identifier: 05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
Certificate issuer: /CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Certificate serial: 01A08C7A80516385B222F3CA4529DE1FE6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:33 +0000
Manifest this update: Thu 10 Sep 2026 18:00:33 +0000
Manifest next update: Fri 11 Sep 2026 18:00:33 +0000
Files and hashes: 1: Bag948ZgIx8iMPHCcA4gUFobz1c.crl (hash: s/jBtdayYDfVoKuap3fncXIU1/frXTe1kKGjRLJcGN4=)
2: HrgtmuW0yN0hsWEMTA8IRe5Ow-I.roa (hash: nkWf0uUkwJsAxVtSv5Gas9B1Em/eu7evo6LbD0YqyuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:80:51:63:85:b2:22:f3:ca:45:29:de:1f:e6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Validity
Not Before: Sep 10 18:00:33 2026 GMT
Not After : Sep 11 18:00:33 2026 GMT
Subject: CN=3de292bd0ea48b5166e4b7dc5fcc9fba1bb62b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:42:81:98:d3:14:e6:63:dd:37:b2:23:fd:
b9:0c:be:09:eb:54:f2:33:73:80:1c:81:14:65:2c:
69:3b:ec:4b:1b:24:d1:a1:95:9a:f1:20:eb:ec:ef:
93:bf:1a:7b:1d:2c:74:04:15:bc:ed:59:fa:e5:a3:
ee:7f:26:ac:f0:fb:ec:6d:df:9b:4a:b1:6e:df:2c:
17:bf:00:47:e9:4b:88:b2:c8:1e:67:01:eb:ae:d7:
49:f6:8a:96:a2:e1:7f:08:c1:7f:d2:86:54:eb:47:
7b:a6:8d:e1:cc:c9:e8:84:4a:82:20:c2:48:dd:75:
c6:7d:69:e2:c3:cb:39:1f:c5:3f:ff:3e:11:ca:e5:
6c:0e:bd:59:66:03:44:26:50:f1:b2:7d:7f:f9:46:
58:e0:7c:07:3d:29:d0:3d:75:74:58:a9:22:a0:6b:
41:0f:b2:f2:74:6b:f3:ee:e3:56:10:36:59:8a:6b:
5b:b7:21:96:d6:b8:b8:cb:86:2a:1c:50:75:65:7b:
0c:4e:89:c5:a3:ce:d1:78:9a:bd:fd:42:e0:b3:51:
f5:b8:fa:df:b0:d3:ba:7f:2b:10:c8:58:c3:32:35:
69:07:4e:03:69:60:62:38:37:0b:01:29:14:9a:cf:
75:a8:44:e1:4f:53:14:86:2c:42:45:84:fb:31:42:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:92:BD:0E:A4:8B:51:66:E4:B7:DC:5F:CC:9F:BA:1B:B6:2B:44
X509v3 Authority Key Identifier:
keyid:05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9c:8d:25:8c:e0:a5:46:94:b6:9a:c1:0d:e3:e1:c9:23:2f:
68:98:8e:78:f4:8d:f5:55:17:d5:d2:f9:c5:8b:f3:94:cd:77:
e6:df:92:17:3e:27:b4:3c:97:61:27:db:a1:6b:ed:bf:bb:a4:
f1:82:5f:a2:88:66:38:2a:be:2c:bc:08:c7:44:74:a4:14:c9:
e0:24:5f:f6:36:d3:8e:64:f7:c4:f5:3e:81:0d:30:a5:ce:11:
4e:ce:7c:47:67:1b:af:8f:61:4b:84:d6:dd:47:17:eb:c6:43:
be:d4:9e:a1:f4:9e:0d:85:55:cd:5b:9c:90:2f:d4:ce:bf:5c:
37:b5:06:14:23:e1:7e:fb:c0:99:b0:fb:66:6b:6f:b6:3d:76:
10:79:b9:55:b9:ba:df:ad:fe:13:fe:33:17:90:a5:d6:67:7b:
b8:c4:b4:c5:d3:8e:b1:57:49:12:b2:e8:2f:60:39:04:d3:fd:
80:e1:a3:be:43:82:20:2d:48:34:e4:07:08:9f:66:00:79:6f:
18:f6:a9:84:b6:45:ce:8c:56:8a:49:cf:a4:2d:4f:a4:26:52:
b3:f7:c5:38:3b:37:e1:4d:0b:36:c8:5b:a3:d7:2b:c0:a9:7a:
1c:44:5c:34:76:2e:11:b6:14:29:74:7b:21:e5:c5:2a:5a:4d:
7c:02:cd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:11:56 2026 by rpki-client