Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
File: Bag948ZgIx8iMPHCcA4gUFobz1c.mft (raw, json)
Hash identifier: QzeZCRIkdAz7Gxr7b6OdOWEsUcVFuYMbcGw1kj4fCZ8=
Subject key identifier: A1:43:2F:1D:0B:68:21:6C:EF:35:9A:1A:24:7C:85:6B:50:C7:D7:AA
Authority key identifier: 05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
Certificate issuer: /CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Certificate serial: 019FA4BD6B9755D426120EBD1F6E0A569195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 18:01:45 +0000
Manifest this update: Mon 27 Jul 2026 18:01:45 +0000
Manifest next update: Tue 28 Jul 2026 18:01:45 +0000
Files and hashes: 1: Bag948ZgIx8iMPHCcA4gUFobz1c.crl (hash: GIg8APzMNkTIAoN+jBhnPLoeR6q4Kjn7Rfe+c3rqqyw=)
2: HrgtmuW0yN0hsWEMTA8IRe5Ow-I.roa (hash: nkWf0uUkwJsAxVtSv5Gas9B1Em/eu7evo6LbD0YqyuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bd:6b:97:55:d4:26:12:0e:bd:1f:6e:0a:56:91:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Validity
Not Before: Jul 27 18:01:45 2026 GMT
Not After : Jul 28 18:01:45 2026 GMT
Subject: CN=a1432f1d0b68216cef359a1a247c856b50c7d7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:7b:2b:a1:d5:65:03:b1:35:c5:65:f6:3f:
2e:a3:83:81:f3:b9:de:fd:a9:29:dc:10:c9:b4:9a:
b3:e0:f4:ed:5a:f9:6e:77:c7:07:ef:a8:a2:1d:14:
d2:78:36:0b:ed:e9:8a:dd:db:09:b1:6f:98:4f:b5:
a5:0f:98:d0:80:c9:20:b6:84:93:ca:7d:29:5c:4d:
f6:c6:4f:36:62:2f:a8:ae:ea:c5:eb:d4:4a:9b:60:
ed:e6:67:da:e9:54:c2:a5:b5:ce:e5:a3:68:51:fb:
36:7b:ff:69:e0:39:c8:67:e3:df:1c:02:91:b9:83:
4f:4c:e2:b3:ae:08:28:bc:4d:95:00:14:4a:28:08:
69:b9:4f:2e:11:a5:b3:17:56:0d:14:02:c9:b6:33:
0d:93:3c:b0:a4:73:e6:ec:92:84:0a:57:4f:75:de:
4f:45:e0:3e:e4:ec:85:0e:e8:d7:8b:f5:a2:6f:f8:
2e:95:c7:3c:44:3b:65:13:c7:c9:fe:fc:94:c5:91:
c5:85:0a:3d:63:1f:28:55:82:dc:3f:53:8f:41:a6:
3a:51:74:32:b5:0f:01:e9:84:8a:44:4a:07:b3:31:
e9:ce:4e:9f:f4:9a:43:ac:c7:89:9c:83:a7:21:23:
87:1e:c2:9e:3f:8c:f4:f1:49:4b:36:1f:bb:e3:b8:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:2F:1D:0B:68:21:6C:EF:35:9A:1A:24:7C:85:6B:50:C7:D7:AA
X509v3 Authority Key Identifier:
keyid:05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e9:c4:38:ec:c3:20:2a:20:64:f1:59:55:b3:ba:71:a5:33:
8f:6c:09:58:10:de:8e:93:9d:88:9f:23:41:e9:57:54:de:20:
42:4d:9f:eb:3c:ec:3b:f0:8e:72:3f:fe:de:9e:08:5d:0d:b9:
e6:b7:58:10:93:f7:f6:0e:1a:1f:ca:4d:86:50:bb:f3:4e:c5:
c9:8b:9f:ea:e6:a6:ae:d9:1f:46:90:6a:72:69:8c:65:5d:04:
6f:26:98:14:d1:76:b3:c9:29:a5:d4:87:c1:0e:bd:12:da:bd:
90:12:a0:23:5e:42:47:85:63:29:93:76:da:6c:cd:84:1f:ac:
3e:38:5a:c7:9b:2d:4b:04:df:18:9b:74:c9:23:61:e0:a8:6e:
2b:68:7f:4b:b5:05:fe:c3:be:c9:18:c2:90:50:41:c8:ae:21:
6d:20:97:20:d3:a9:0d:b6:26:c0:e1:40:e0:67:cf:05:05:49:
f1:bc:01:8d:bb:a9:a1:ac:73:8b:c8:4d:ef:60:ef:9e:b8:60:
bf:81:e5:ac:88:f1:2a:85:87:8b:f9:20:e6:a1:5c:9c:31:4b:
83:d0:7a:ad:4b:10:69:46:ea:b7:f9:94:5e:4d:0d:e6:fd:2c:
1e:f0:12:41:48:e6:21:d8:bd:af:c2:e9:f7:52:28:37:94:65:
a7:79:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:29:15 2026 by rpki-client