Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: aEVOJgN2zBJmSGVBy73JWjECTvT18gHepaZTdT1cjuE=
Subject key identifier: 2A:CF:70:93:C0:CD:64:AD:1F:86:52:0A:E9:3D:D4:B5:FE:0F:6D:6B
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 01A0D26E9A061639641D050FD5F710623389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 161E
Signing time: Thu 24 Sep 2026 08:00:58 +0000
Manifest this update: Thu 24 Sep 2026 08:00:58 +0000
Manifest next update: Fri 25 Sep 2026 08:00:58 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: 7TuSbSumC2wstzCIgkdI4Tpp4qVonO+bsKX+PNam59U=)
2: G8Q8U9PXAXyP6GSlPYqobfziQzA.roa (hash: 34ZB7ek6+uTjMbRni0oLjT93sAaYBaeAPO9eFx4+uCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:9a:06:16:39:64:1d:05:0f:d5:f7:10:62:33:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Sep 24 08:00:58 2026 GMT
Not After : Sep 25 08:00:58 2026 GMT
Subject: CN=2acf7093c0cd64ad1f86520ae93dd4b5fe0f6d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:ae:14:06:d0:ab:75:c5:52:ea:97:98:15:
57:ab:46:57:64:dc:01:4e:d2:d6:11:8c:04:cc:b0:
4f:b5:4c:47:ae:9a:26:39:fe:9f:9c:ea:7e:a0:8a:
6d:c0:94:6e:d7:66:47:53:a5:d8:85:db:43:55:03:
a5:ec:ea:80:7b:6f:16:af:97:68:d7:52:a3:5c:d7:
81:69:71:f9:e2:e5:6c:8c:41:23:d9:f5:69:95:6a:
d8:50:ad:7e:92:00:46:46:6d:46:bf:93:0a:e5:15:
3e:e6:c2:66:ae:c0:73:4a:29:1f:b1:57:b2:7c:36:
1e:4b:b6:0c:32:6f:0f:fd:ce:da:52:45:c4:0d:85:
16:b3:ec:20:67:ed:ef:8f:ca:37:cb:30:14:d4:fc:
5a:71:60:b6:d7:d9:57:df:39:b6:89:a9:3b:c4:7d:
43:5a:75:bf:d5:1c:a6:40:fe:01:b3:bc:93:3e:b8:
94:46:c4:aa:43:c4:16:99:05:5b:b6:a7:2e:54:4f:
4f:8b:00:b4:95:8a:1f:6f:73:2f:d7:ae:4f:ce:43:
24:85:9c:96:bd:25:c6:6e:f8:26:19:3d:19:7c:b9:
60:61:a7:e6:8c:1d:9c:7a:c3:5d:6f:56:60:a5:14:
2e:b2:af:f8:d1:5c:ab:ca:f2:07:d5:ec:66:10:4f:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CF:70:93:C0:CD:64:AD:1F:86:52:0A:E9:3D:D4:B5:FE:0F:6D:6B
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:73:66:56:3a:04:93:e9:3d:d0:39:8c:30:5a:38:81:a6:cc:
db:f3:93:b7:a5:de:61:c9:50:d3:82:1f:46:db:3a:25:a4:35:
1b:4d:75:0e:a9:1d:b5:34:7d:90:84:27:6f:f0:5f:98:66:81:
4d:2a:00:52:dc:ee:c9:e5:02:dc:05:ac:e4:5f:34:bf:6a:f5:
e6:5d:c8:7e:77:50:a2:d9:d2:89:9b:9e:6f:80:cf:aa:e5:00:
f6:f4:38:b1:3a:f4:34:ab:87:a7:e5:c7:49:30:f9:0a:2a:cc:
78:c8:c0:e3:e9:a9:a4:16:2b:38:a3:af:14:71:ef:1c:9e:55:
a0:1b:1a:e3:95:83:f2:50:73:12:fc:5d:d8:1f:80:cc:69:f3:
3b:d8:04:28:14:ea:fd:bf:86:02:b5:eb:6b:6e:eb:01:d5:78:
ce:95:13:51:a8:b2:bf:be:43:39:4f:de:52:26:d0:56:82:0b:
3b:d7:ed:67:bd:12:0f:d2:3e:39:04:b6:80:f4:b5:2d:eb:5a:
e7:74:04:b5:03:7c:fb:e0:4a:77:82:51:27:a6:4e:64:37:59:
11:68:ca:1f:f2:36:1d:14:42:18:4a:1b:16:de:ec:40:9b:9d:
ba:d1:ff:81:99:4c:19:be:33:1c:0a:23:ed:7f:cc:89:15:42:
3e:c6:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:39:52 2026 by rpki-client