Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
File: Bag948ZgIx8iMPHCcA4gUFobz1c.mft (raw, json)
Hash identifier: 2/JOMuyJS89/6U4IbqqI3SmvxjOgHa+tZSLxOno9azQ=
Subject key identifier: 24:5C:32:E6:A9:71:4D:83:AA:CF:DA:C3:98:01:D2:2D:62:7B:E7:F6
Authority key identifier: 05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
Certificate issuer: /CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Certificate serial: 01A18D54C728806DBC771A87326A308DA3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
Manifest number: 0147
Signing time: Fri 30 Oct 2026 15:01:45 +0000
Manifest this update: Fri 30 Oct 2026 15:01:45 +0000
Manifest next update: Sat 31 Oct 2026 15:01:45 +0000
Files and hashes: 1: Bag948ZgIx8iMPHCcA4gUFobz1c.crl (hash: PP3Imx02+tLRsdSoisxZC9P5Y5b5+/Y/lEN0pABoqgQ=)
2: HrgtmuW0yN0hsWEMTA8IRe5Ow-I.roa (hash: nkWf0uUkwJsAxVtSv5Gas9B1Em/eu7evo6LbD0YqyuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:54:c7:28:80:6d:bc:77:1a:87:32:6a:30:8d:a3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Validity
Not Before: Oct 30 15:01:45 2026 GMT
Not After : Oct 31 15:01:45 2026 GMT
Subject: CN=245c32e6a9714d83aacfdac39801d22d627be7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:17:17:50:6c:ea:ae:cc:ba:48:71:81:01:
c6:50:bf:d7:3b:44:99:3b:2c:8c:d3:fb:91:4c:52:
69:ce:86:c2:90:af:10:18:3a:77:9c:1c:90:a7:57:
71:cd:9a:89:49:8a:a4:31:20:5c:7b:0f:69:b0:4f:
6e:2e:9f:b5:94:3d:d1:71:e8:be:ec:4a:fc:07:23:
60:7a:85:9e:b3:c0:ce:a9:6c:1e:60:fa:2f:66:19:
41:c3:25:2d:60:d5:67:51:f6:7b:c9:bc:91:30:3d:
98:49:36:87:00:02:c5:1f:4c:b2:d2:15:03:42:f8:
8a:00:88:f3:97:b7:d0:59:8a:96:33:2f:02:26:e2:
34:2e:5c:18:69:00:36:f4:cc:05:18:2f:1e:af:65:
c1:60:e1:be:54:a7:b7:f2:e0:8a:7b:bf:19:73:4b:
1c:e7:12:34:8b:fa:c8:be:b6:bd:53:0b:ff:d7:de:
bb:86:96:33:b1:01:92:f7:1f:5a:0b:24:49:3f:81:
fd:bc:cc:a5:71:36:21:18:da:0b:3a:46:3b:94:c9:
5f:aa:dc:b4:d5:31:d6:9d:a0:7a:53:fc:08:21:32:
a3:72:19:5f:cf:93:8d:58:b3:96:b9:5a:f0:b2:65:
dd:51:94:e4:6b:9a:a2:f5:86:a8:94:68:7f:c6:e1:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:32:E6:A9:71:4D:83:AA:CF:DA:C3:98:01:D2:2D:62:7B:E7:F6
X509v3 Authority Key Identifier:
keyid:05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cb:a5:2e:cd:ea:ec:1d:1a:a9:9e:34:d6:d3:95:a8:1d:bd:
d9:22:2a:d4:d3:8f:e1:c6:ef:dd:bd:08:28:1b:8b:f5:10:8d:
f7:c4:38:74:c5:ca:6e:1b:b1:be:f8:69:a5:cf:49:5b:3b:54:
17:68:5f:de:0b:ea:67:a3:03:22:ef:94:43:3b:9e:32:4a:7b:
ab:92:df:78:54:23:ff:24:63:9f:91:b8:0b:7f:4c:2f:a4:c3:
fe:80:78:94:47:c0:6c:78:59:9d:0b:8f:01:60:72:0e:18:65:
b3:64:22:b3:c2:4c:82:64:55:eb:08:67:86:b8:ef:d4:17:08:
6a:95:23:37:f4:44:a3:0d:04:48:bf:34:93:7f:e4:96:63:60:
84:b1:39:d0:a9:9e:52:6a:b1:ce:3f:0d:02:4b:b1:5f:fe:a8:
76:0b:60:de:c8:8a:87:e0:ba:ba:a5:be:a4:69:fb:59:d1:bb:
70:de:a1:15:2d:d8:67:99:26:09:dd:bd:0d:8d:94:51:6b:09:
04:81:39:f2:6f:45:e2:02:55:dc:44:95:43:a0:bd:4b:e8:76:
84:d6:53:d3:40:20:45:09:b7:4b:47:a6:62:23:c6:ab:57:25:
5f:5c:80:75:77:85:30:91:95:cf:7d:f2:89:a9:2c:32:96:fd:
ad:7e:e7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:10:19 2026 by rpki-client