Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier: L/VGdOZ3CExZHYiaUFR8QVKpZ5RWDs33RYfgMx4u6TQ=
Subject key identifier: 35:7A:68:88:7E:22:9A:16:A4:B6:74:22:1E:70:36:A1:E4:DA:9E:02
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 019D382DCDF9B0FF1719D30A52C2B564302C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number: 0CD2
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: 5T7ElemNC6g4KLG0_8xrYW5fehU.roa (hash: 1yULm6jsqwJXi2ojiG48hP/e+HZZVs+RhK8qR3uDV70=)
2: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: krV+9t4mKHq89gS/7N8B3iuowmuHerB/Kv1c40tXd28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cd:f9:b0:ff:17:19:d3:0a:52:c2:b5:64:30:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=357a68887e229a16a4b674221e7036a1e4da9e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:e8:6b:97:57:1d:40:a0:e2:7d:1d:28:6d:
36:7b:d4:5e:f5:e8:61:b7:43:43:23:3f:9a:4d:8a:
0a:7f:d9:86:f6:9b:19:98:12:f2:19:42:50:d6:36:
81:72:9d:a8:81:20:ba:5f:0b:01:1e:65:c8:68:41:
3d:2c:20:28:50:c0:d1:0d:b2:a0:c6:3c:69:b2:c8:
ef:c6:94:b4:f0:54:c7:57:85:a4:2e:7f:52:da:91:
e5:02:52:b2:6e:29:93:79:24:48:fa:29:a9:05:4f:
26:27:a3:7c:e9:01:98:eb:6f:55:6a:8f:29:ab:96:
c7:4a:f0:29:58:82:13:40:75:1d:7d:08:9a:d8:de:
e8:e0:d5:98:2d:66:50:f3:df:9b:ca:50:d8:ee:b4:
f2:4e:b7:f3:60:3f:b0:db:7b:4d:1c:5f:4c:84:2d:
81:db:c3:c8:e3:74:f3:dc:49:00:26:9a:2c:2b:bf:
85:88:ba:c6:1b:45:2c:11:ef:ae:c4:fe:87:6a:0d:
1a:fd:64:db:d4:3f:ee:c2:10:ba:c6:04:54:9d:8d:
1e:6d:b8:a0:b7:dd:84:09:eb:a0:86:d9:2a:cb:f9:
c6:c8:96:e5:fd:ef:5c:c6:35:4e:a6:d4:b9:f8:90:
07:bd:a3:b8:41:ca:71:3b:c6:e9:93:77:d9:a1:50:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7A:68:88:7E:22:9A:16:A4:B6:74:22:1E:70:36:A1:E4:DA:9E:02
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ca:d3:4c:27:92:68:2a:54:68:3d:5e:26:5c:b3:45:2e:58:
80:7a:61:f2:5a:5b:6f:f2:f5:dd:6a:10:da:76:cc:31:94:f7:
39:ae:36:a8:b2:0a:b0:8d:e1:bd:55:72:a0:a3:67:90:9f:05:
a6:d8:c0:01:d0:93:a3:8f:b2:90:24:68:a4:1e:a1:1c:86:83:
01:d5:ef:b0:82:6a:39:b5:b4:72:17:05:40:82:51:8d:26:6c:
a1:b7:f2:c3:87:54:02:c1:4b:65:97:f8:6f:1d:74:81:e7:63:
ca:89:16:4c:54:0b:14:df:05:8e:e5:b5:28:39:27:79:34:ea:
ed:6a:f6:c1:da:8f:b0:f1:b3:98:38:73:6d:c9:26:fd:ba:05:
e1:17:65:1b:1d:f3:30:9c:77:9f:52:80:18:99:33:0b:5c:44:
3f:9a:fc:fb:e6:b3:8b:fd:d2:cc:53:d7:f7:c0:b1:18:08:3c:
ad:89:1d:ff:fa:ab:19:44:f7:1f:0e:3f:a7:78:f8:1f:70:5c:
19:a7:a5:1b:25:0f:03:1b:04:12:1f:19:ad:8b:4a:68:06:f0:
c0:f9:17:8d:7a:5f:a6:e7:71:eb:38:a9:45:1f:9e:9e:bb:0b:
54:e8:5c:a6:55:03:de:d9:6c:2d:6a:47:a7:00:e5:5d:9f:bb:
f9:72:c1:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lc35sP8XGdMKUsK1ZDAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk5MWFjZDdiMjI3M2Q5ZTE4NjVhZmEyNzU1ZTZmNWU2
NzJlNTUwHhcNMjYwMzI5MDYwMDE5WhcNMjYwMzMwMDYwMDE5WjAzMTEwLwYDVQQD
EygzNTdhNjg4ODdlMjI5YTE2YTRiNjc0MjIxZTcwMzZhMWU0ZGE5ZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X3oa5dXHUCg4n0dKG02e9Re9ehh
t0NDIz+aTYoKf9mG9psZmBLyGUJQ1jaBcp2ogSC6XwsBHmXIaEE9LCAoUMDRDbKg
xjxpssjvxpS08FTHV4WkLn9S2pHlAlKybimTeSRI+impBU8mJ6N86QGY629Vao8p
q5bHSvApWIITQHUdfQia2N7o4NWYLWZQ89+bylDY7rTyTrfzYD+w23tNHF9MhC2B
28PI43Tz3EkAJposK7+FiLrGG0UsEe+uxP6Hag0a/WTb1D/uwhC6xgRUnY0ebbig
t92ECeughtkqy/nGyJbl/e9cxjVOptS5+JAHvaO4QcpxO8bpk3fZoVBOtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDV6aIh+IpoWpLZ0Ih5wNqHk2p4CMB8GA1UdIwQY
MBaAFAWpkazXsic9nhhlr6J1Xm9eZy5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMt
ZDdjNmZmOTMzYzIzLzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMtZDdjNmZmOTMzYzIz
LzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssrTTCeS
aCpUaD1eJlyzRS5YgHph8lpbb/L13WoQ2nbMMZT3Oa42qLIKsI3hvVVyoKNnkJ8F
ptjAAdCTo4+ykCRopB6hHIaDAdXvsIJqObW0chcFQIJRjSZsobfyw4dUAsFLZZf4
bx10gedjyokWTFQLFN8FjuW1KDkneTTq7Wr2wdqPsPGzmDhzbckm/boF4RdlGx3z
MJx3n1KAGJkzC1xEP5r8++azi/3SzFPX98CxGAg8rYkd//qrGUT3Hw4/p3j4H3Bc
GaelGyUPAxsEEh8ZrYtKaAbwwPkXjXpfpudx6zipRR+enrsLVOhcplUD3tlsLWpH
pwDlXZ+7+XLB4w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:55 2026 by rpki-client