Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
File: bAODPTvs9flZ4Svaf6-KU-rAVvs.mft (raw, json)
Hash identifier: 7nkVXrZqSxbMkPb2xv1wS4RXotBCXYFZ/jsdUNYIk1g=
Subject key identifier: 6A:74:6F:BD:75:EA:15:92:49:24:45:00:BF:6D:D7:C4:9D:FC:13:93
Authority key identifier: 6C:03:83:3D:3B:EC:F5:F9:59:E1:2B:DA:7F:AF:8A:53:EA:C0:56:FB
Certificate issuer: /CN=6c03833d3becf5f959e12bda7faf8a53eac056fb
Certificate serial: 01A0412AC5EE3A27D0880C7609C6148A8919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:57 +0000
Manifest this update: Thu 27 Aug 2026 03:01:57 +0000
Manifest next update: Fri 28 Aug 2026 03:01:57 +0000
Files and hashes: 1: IiTxpSmgZctZlLIwc2RZQ31dFWQ.roa (hash: W89I3B0Mx54Y9ubbD/CySaPLm1IMg6yqDNxgPvSB1PM=)
2: bAODPTvs9flZ4Svaf6-KU-rAVvs.crl (hash: WxjjuR0PwYI5KjWVpWzAmhmcUW2X4KcBsTKN197xSJk=)
3: x99Ir60bx3PUscFHCcVA27LJXKo.roa (hash: YsvrzWQu5eRFut37Wsiin+f2Fel/gQNo+HGHjxwge/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:c5:ee:3a:27:d0:88:0c:76:09:c6:14:8a:89:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03833d3becf5f959e12bda7faf8a53eac056fb
Validity
Not Before: Aug 27 03:01:57 2026 GMT
Not After : Aug 28 03:01:57 2026 GMT
Subject: CN=6a746fbd75ea159249244500bf6dd7c49dfc1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:47:2d:05:35:79:d6:50:c3:20:e7:61:cd:
4e:21:4f:05:fd:bd:2c:1e:fe:7f:ac:46:65:50:9b:
2e:ee:f5:a9:f0:37:38:ca:80:06:29:d3:8a:ba:28:
bd:65:a7:02:10:6f:53:b3:ac:0a:d3:af:fc:db:1f:
39:d4:86:87:69:c9:7d:8c:7b:2a:8c:dd:2f:c0:d1:
9d:16:3f:14:6f:44:59:9b:d5:92:8c:67:36:6d:9e:
70:b5:0a:38:c6:22:6c:e1:03:6d:26:89:05:dc:fe:
69:fa:a6:ef:b7:52:ba:c0:87:7e:89:3d:8d:e4:91:
41:d2:00:53:00:d8:11:2c:1b:cd:ff:d1:12:bc:9a:
db:ed:9b:55:21:9f:dd:da:82:c0:69:7e:b7:e3:c9:
54:9a:87:0d:ed:8a:7e:ef:7f:d1:b4:57:94:66:42:
82:3e:32:15:78:ac:0c:bb:33:0a:10:42:d0:61:3b:
48:49:85:25:a1:8d:f2:7b:3d:a4:1d:57:3d:82:ec:
1d:42:9c:af:d1:fc:18:02:97:0f:bf:cc:4f:0d:a1:
29:2a:f3:14:64:e3:ba:21:33:19:39:2f:b6:fa:c9:
6a:d2:48:8d:0c:78:9d:10:bb:e3:a4:12:72:21:b5:
87:f0:7c:a1:3a:f5:62:f8:fa:3c:3c:27:83:dc:e9:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:6F:BD:75:EA:15:92:49:24:45:00:BF:6D:D7:C4:9D:FC:13:93
X509v3 Authority Key Identifier:
keyid:6C:03:83:3D:3B:EC:F5:F9:59:E1:2B:DA:7F:AF:8A:53:EA:C0:56:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2c:66:de:17:6c:33:fd:5e:92:a4:41:59:3b:a3:f1:4a:dd:
e7:a0:06:4d:a6:43:42:14:ca:9d:9b:4c:02:f4:8e:83:63:76:
95:48:7a:5b:d4:fa:fd:58:94:db:d3:56:ae:9a:c5:06:3d:37:
04:fb:cc:21:27:a9:da:ff:10:34:19:b0:f2:69:6d:49:31:46:
e0:d2:0c:92:0c:83:d6:6f:a4:b8:37:b2:f7:3f:6b:d0:8d:65:
ab:30:f0:18:57:63:39:29:5d:81:63:f1:76:1d:2f:c4:b2:2e:
14:39:02:88:b9:cb:bc:03:d1:4a:d2:05:38:a4:bb:e2:14:f3:
e9:8b:fc:04:16:4b:bd:d9:3f:7c:8b:95:4b:a4:7b:46:fc:9e:
40:79:1f:ad:ff:70:31:6b:01:26:14:32:af:42:c3:f2:8e:07:
17:d9:d4:83:d0:9e:35:3f:39:a9:61:dd:3e:0f:63:10:c4:db:
c3:b9:e2:eb:82:18:87:d2:11:38:a2:82:e1:90:23:8b:a6:a5:
2f:c1:11:ea:d3:fc:28:c9:80:53:0b:e8:78:97:ca:a9:a8:6d:
0e:b8:32:81:94:23:a9:a9:bc:a6:4d:da:db:a8:82:0c:79:ea:
5b:60:d4:fd:8a:56:c7:30:4a:bd:87:10:75:27:50:d6:d8:82:
0e:c3:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:27:02 2026 by rpki-client