Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: qu61qQpA4banbsde3ceQxYEZMmr51oSBvwAs1npYJvc=
Subject key identifier: 59:C8:E5:EF:59:04:AD:F7:4C:FC:A0:3B:73:26:1C:C6:12:51:6E:A8
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 019F91DA4E7D5828EC70FD62E04495B3D5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0DB5
Signing time: Fri 24 Jul 2026 02:00:30 +0000
Manifest this update: Fri 24 Jul 2026 02:00:30 +0000
Manifest next update: Sat 25 Jul 2026 02:00:30 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: QqhTISPoRkLs/oenz3Rpii2pHQ0lDVec5kUClwEjmpw=)
2: hVWAONuzeazGNdnWSgmA3i9K9C4.roa (hash: uImqFCqVZwZHHyqryIJNgNimhq6Y9tDjYPxtIUj1zD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:4e:7d:58:28:ec:70:fd:62:e0:44:95:b3:d5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Jul 24 02:00:30 2026 GMT
Not After : Jul 25 02:00:30 2026 GMT
Subject: CN=59c8e5ef5904adf74cfca03b73261cc612516ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:6e:73:93:8b:17:7b:87:9e:4a:1f:20:43:
72:7b:4a:88:d5:fb:67:b6:c7:20:0d:ad:74:13:08:
be:ce:28:56:4d:e5:f2:b1:95:2b:86:24:ab:07:22:
c5:91:4b:26:0c:4c:ad:41:85:86:02:3e:da:c4:c7:
b2:01:0d:98:47:c0:ff:4a:e0:0e:b1:5f:a4:82:64:
3d:c8:bb:c8:d3:ab:ee:b7:a0:ad:b2:b9:fb:9a:27:
43:51:8e:b6:68:8b:2d:4e:ef:83:0e:54:4c:58:58:
1a:b3:db:19:96:de:79:c4:94:9e:d2:40:8f:e4:74:
b5:a0:65:86:df:d5:8a:c1:5d:65:f7:8b:26:77:dd:
5a:77:bf:53:42:1b:91:ac:8d:49:98:20:f8:67:16:
b4:d1:1a:3e:7b:74:f6:39:f5:09:0c:eb:49:1c:e9:
2c:51:d4:00:47:29:43:89:07:1d:c7:ee:12:7d:61:
1f:0c:ab:ee:0a:0d:02:da:26:a4:5c:d4:01:ae:80:
d3:73:c3:4d:aa:9f:a5:d7:c9:10:cc:fc:fb:9b:f5:
25:c3:55:36:d3:68:eb:9e:b0:13:5d:db:da:ee:7f:
2d:34:91:1a:1d:62:40:b3:6d:ae:f6:57:a4:b2:38:
3c:c4:a6:6b:68:47:3f:03:68:d2:d7:95:71:6c:fc:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C8:E5:EF:59:04:AD:F7:4C:FC:A0:3B:73:26:1C:C6:12:51:6E:A8
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8f:ce:ed:d0:3d:12:59:4a:5a:de:7d:d0:0d:02:3b:64:ce:
1b:d8:4e:28:e1:36:51:df:09:8d:a3:5c:19:fb:b5:f9:4f:65:
9b:70:61:a1:29:75:92:14:c4:72:08:a2:28:73:87:6f:b9:bf:
25:a8:74:57:97:c2:a7:0a:b3:92:73:c9:ee:ee:ae:96:b5:35:
2c:e8:8a:df:d2:f8:db:97:30:76:39:a4:88:4a:ba:56:ae:9c:
fe:81:10:67:83:d0:44:6c:58:bc:6c:e9:2c:bc:4a:c0:9b:89:
9a:e1:1e:7d:0d:e3:e2:e4:61:71:f7:cd:9e:24:6a:3d:5f:67:
b0:74:e6:5e:1d:c4:f6:fc:5f:19:a7:91:43:1e:7f:b4:42:8c:
89:2f:f4:26:06:84:3b:8e:cf:b6:dc:d1:de:67:27:92:71:e2:
77:2a:3e:05:0c:21:50:f7:b0:c6:ef:35:27:00:34:c6:7a:3f:
a0:f7:1f:0f:34:ec:31:7b:f4:23:01:f2:e1:2d:ef:e9:e4:e6:
04:74:79:27:9f:01:55:c0:57:41:ed:48:34:e1:d6:17:d7:45:
32:b1:60:fc:60:e8:58:b2:2a:a8:6f:d1:7f:a8:41:4c:6b:5c:
77:74:6c:7f:5e:2b:1d:e1:de:8d:ac:54:7b:93:52:f1:6d:12:
60:7f:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:06:34 2026 by rpki-client