Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: PosuvsLRvqDOps7+2SeEF88cPB4kqhNhEKz5mivr/ps=
Subject key identifier: AE:2C:81:B9:AC:26:21:5E:D3:CC:C9:1E:88:2C:CE:F2:AB:CB:2D:F1
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 01A0CCA300EFDA9078A18C54E189580E887E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0E58
Signing time: Wed 23 Sep 2026 05:00:29 +0000
Manifest this update: Wed 23 Sep 2026 05:00:29 +0000
Manifest next update: Thu 24 Sep 2026 05:00:29 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: ZwBmrjNpVbbkV1KFvbZxE+Z6+ydfwcUpbWNHyoDj2xk=)
2: hVWAONuzeazGNdnWSgmA3i9K9C4.roa (hash: uImqFCqVZwZHHyqryIJNgNimhq6Y9tDjYPxtIUj1zD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:00:ef:da:90:78:a1:8c:54:e1:89:58:0e:88:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Sep 23 05:00:29 2026 GMT
Not After : Sep 24 05:00:29 2026 GMT
Subject: CN=ae2c81b9ac26215ed3ccc91e882ccef2abcb2df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:43:8c:6b:be:c4:6b:7a:b8:2e:34:03:e6:
6a:01:40:b2:ca:d9:22:e0:6e:e6:76:bc:1c:e7:b9:
b8:49:43:fa:d7:f2:ab:7f:f3:49:60:45:c0:a6:9b:
79:00:80:33:36:36:b4:61:9a:12:a4:58:73:35:33:
16:bd:48:79:67:5a:df:ca:fe:9d:23:48:2c:87:7d:
42:47:8a:30:42:57:f7:18:d6:dd:f0:ea:3b:73:72:
1f:2c:9b:62:d0:cf:c5:f5:86:9a:c5:22:b6:01:42:
5f:8d:2c:0f:9b:3c:6a:32:fb:15:71:43:4b:8c:b8:
96:9e:ad:a7:98:df:17:9a:36:c8:eb:be:d2:c2:9a:
51:2d:dc:8d:c5:a0:e7:64:5c:3e:44:28:99:a1:33:
b4:a9:c6:97:4f:25:25:1b:b1:99:4a:aa:f6:0f:64:
79:2d:b0:cb:c0:4e:c5:c8:cf:4c:57:4e:59:e4:64:
58:6c:22:62:3e:e7:29:26:c6:c6:f2:82:3e:71:88:
72:f4:21:d7:5b:27:40:fb:e3:8d:9a:8f:c7:f2:a0:
88:78:b1:0e:66:37:e9:f5:b5:26:ed:17:ee:f3:e4:
7d:8a:4b:0b:0a:46:44:80:25:8b:05:04:c1:4c:6f:
85:e0:08:74:1a:88:e9:76:81:8b:ad:42:31:a4:c0:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2C:81:B9:AC:26:21:5E:D3:CC:C9:1E:88:2C:CE:F2:AB:CB:2D:F1
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:51:10:a8:e7:66:37:66:98:82:dc:c0:94:bf:71:dc:77:c8:
f5:10:b9:85:19:88:ba:24:c0:f7:9b:00:a7:51:d6:de:5a:dd:
83:af:82:0f:c4:b0:80:eb:cb:f1:c1:d4:2b:d7:06:f3:fe:99:
62:2e:af:04:67:e8:01:10:f2:1f:39:82:2a:ef:47:45:87:67:
51:c0:fa:0b:84:e3:83:de:10:d2:f8:47:fd:90:48:1a:5c:4a:
3f:4b:d0:d8:cd:10:93:a1:fa:d3:df:ef:00:91:78:5e:de:54:
53:71:e6:e2:75:e9:af:d6:72:e6:f8:50:a7:91:6b:c0:89:a5:
aa:a8:75:82:08:cd:b7:cb:06:70:a4:ad:1d:f3:e1:a2:f6:c7:
63:c2:e1:2c:6d:a6:7d:0e:fa:f1:4e:9d:15:b8:b1:a5:e9:34:
3a:d4:92:54:8c:e8:a2:d4:33:96:28:3a:bd:9d:36:64:7e:65:
95:b7:94:41:4e:28:67:39:a7:8d:8e:2d:98:9f:b7:9d:87:08:
e5:a8:96:26:21:8c:a9:b5:83:1f:f6:ad:f9:bc:d4:1f:74:3d:
99:2a:71:7b:be:66:19:29:ea:02:2e:72:f8:0f:cf:8f:d1:99:
8f:42:b4:c6:78:8b:00:c9:c0:f6:94:b1:35:07:72:e2:7c:3f:
9e:b1:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:01:19 2026 by rpki-client