Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier: 3eVf18kzUnHbbqiq8Z8QlYCNAqpPwXVoovanf70LI2Y=
Subject key identifier: EF:4B:32:3E:AF:F9:CA:B8:0B:74:AB:B2:F5:72:48:53:12:20:2B:33
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 019F91A3CB05CB28E8DDBA8D2442A75C659E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 01:00:58 +0000
Manifest this update: Fri 24 Jul 2026 01:00:58 +0000
Manifest next update: Sat 25 Jul 2026 01:00:58 +0000
Files and hashes: 1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: 1FKekQc8q+/zCYBOIKMgjCuZv+YWYIzUje5+dIwP7sE=)
2: Lqd1mryq0eI3XAJCMSKyJDpltOI.roa (hash: NKrZd+8ubVZMRdGL7RM/ghy07bvO6vCdLTdgz04D2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:cb:05:cb:28:e8:dd:ba:8d:24:42:a7:5c:65:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Jul 24 01:00:58 2026 GMT
Not After : Jul 25 01:00:58 2026 GMT
Subject: CN=ef4b323eaff9cab80b74abb2f572485312202b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:07:c9:66:96:27:f5:13:63:af:fc:50:aa:
94:b9:9b:20:2c:8a:17:85:ef:08:f4:56:9f:b2:05:
90:83:65:b0:5d:14:ee:75:a1:8e:9b:16:65:06:f1:
af:45:da:63:f9:14:7c:81:db:d5:12:14:3c:90:92:
fd:87:3e:0d:6e:a9:80:ee:d0:b2:d9:51:90:dc:14:
10:5f:af:02:6e:f0:9f:a8:ba:0c:2a:f6:23:4e:6f:
65:27:7d:b6:2b:46:10:6f:90:a0:ca:34:0d:8b:8e:
5b:68:70:fc:6f:c6:d9:05:41:15:d2:17:b4:67:78:
b1:0e:02:77:30:92:cd:10:a7:50:30:99:58:16:a0:
6b:b5:ae:37:49:39:52:e8:7d:28:81:4f:e8:b1:37:
e9:fa:bd:07:cf:cb:d9:a1:bc:b6:8c:c2:3c:72:e9:
6c:56:bf:f0:a1:5d:8b:d6:5e:13:39:d6:0c:43:c0:
2d:3c:c5:47:18:99:ef:9d:e1:a4:a1:c4:ff:f2:62:
8c:af:bc:b4:a5:08:23:02:90:5b:8c:14:01:70:b6:
dc:17:f5:d3:73:d3:d6:3b:00:2a:d7:57:e3:93:bc:
eb:24:2b:7e:9e:a2:2c:84:28:c0:8f:8c:23:ae:e9:
28:24:f2:4a:bf:66:d7:de:e8:50:ca:bd:d1:3d:f1:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:32:3E:AF:F9:CA:B8:0B:74:AB:B2:F5:72:48:53:12:20:2B:33
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c5:f0:97:92:d9:e1:7e:cc:3e:8c:82:8f:3f:1b:81:4d:39:
be:90:47:e5:d8:be:da:7c:eb:8a:e8:f8:aa:dc:83:d6:ca:a8:
c5:09:32:47:a7:2a:d1:11:1d:d4:5a:ff:90:a2:4b:d7:7a:e3:
4f:be:13:fb:52:df:16:4a:90:ec:5e:83:e2:6a:98:14:12:41:
8e:5c:3f:67:02:d3:f7:d9:c7:68:de:cf:70:f2:f8:3d:97:cd:
68:66:f0:d9:31:9f:b2:d7:8f:4b:1f:0d:f1:d6:75:90:cd:18:
2d:4c:90:02:ca:ef:ed:8e:8a:b5:6c:81:ff:c2:1d:af:b6:ac:
09:df:bd:13:3f:00:89:a3:b2:ff:84:55:57:c5:40:f3:68:3b:
5b:47:67:3e:53:84:33:b1:47:50:08:7b:08:4b:f8:3b:45:89:
94:e5:9c:95:b7:af:ea:e6:60:ab:3e:f0:ac:18:6b:72:bc:9a:
9d:02:5c:a7:c9:8b:ea:79:49:9f:2d:58:7e:5d:ae:e8:d6:c0:
2c:70:5b:9b:39:ce:41:dd:88:11:04:7a:9e:a1:bd:48:98:58:
a5:f9:b7:23:fe:2c:ed:5c:21:6e:98:5d:c2:7d:7e:2a:81:b2:
54:91:55:df:3d:ce:ab:68:15:9c:ac:de:e9:7a:c6:92:9a:74:
06:1d:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:54:12 2026 by rpki-client