Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier: VNd0/8CFY4jxICPCkZuvNNxusKbpyyZTOQo11aEPcIY=
Subject key identifier: E1:6F:D7:01:F3:AA:B2:57:32:9A:3E:54:33:0A:AF:F4:4A:40:3B:1F
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 01A0D8047B3ECA12BBFF59024EA87CC87FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 10:02:47 +0000
Manifest this update: Fri 25 Sep 2026 10:02:47 +0000
Manifest next update: Sat 26 Sep 2026 10:02:47 +0000
Files and hashes: 1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: 2Pjo1eV02om1mWx536ioYzuOdURLSh4eIvl6xd0ueRA=)
2: Lqd1mryq0eI3XAJCMSKyJDpltOI.roa (hash: NKrZd+8ubVZMRdGL7RM/ghy07bvO6vCdLTdgz04D2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:7b:3e:ca:12:bb:ff:59:02:4e:a8:7c:c8:7f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Sep 25 10:02:47 2026 GMT
Not After : Sep 26 10:02:47 2026 GMT
Subject: CN=e16fd701f3aab257329a3e54330aaff44a403b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:a2:ab:28:f2:60:eb:aa:1c:bb:7c:59:77:
99:c6:cc:e8:85:41:78:9a:6c:68:ed:73:05:23:19:
89:1b:ae:58:58:09:5d:62:88:52:d7:33:27:61:6c:
c4:fc:7f:48:b7:c4:dc:70:54:6d:aa:08:ab:8e:32:
40:f6:c2:78:f6:6b:a1:fb:b5:69:5f:c6:1f:76:fb:
c0:89:4e:d2:2d:da:40:f3:f9:d3:e6:5a:d9:56:b5:
8b:27:eb:b2:18:12:2b:f0:e0:71:3e:c8:7a:63:ab:
60:45:20:64:b1:0d:36:50:9b:56:58:d5:f2:7a:0c:
22:a1:3f:52:9f:e5:7f:78:eb:3f:d0:f6:44:21:c9:
9b:88:be:80:42:d1:cb:f4:9c:1f:e8:3c:51:0e:27:
c6:4e:42:fa:c5:b4:c3:4e:60:9e:1c:20:11:da:c3:
47:d7:fd:1b:eb:88:d9:7b:79:81:02:88:90:a3:57:
0a:92:f3:c7:a6:35:c0:80:90:82:d6:25:8f:93:94:
77:96:c2:f9:5f:3d:86:5c:65:78:a5:bd:7e:68:43:
c5:1b:e4:15:85:b4:5e:a6:55:80:cf:b1:1e:13:68:
88:d0:5d:18:58:55:97:74:42:96:a4:62:22:7b:ea:
0c:c6:b5:a5:07:3a:53:b3:27:d1:91:0c:97:fc:71:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6F:D7:01:F3:AA:B2:57:32:9A:3E:54:33:0A:AF:F4:4A:40:3B:1F
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:d4:af:fc:58:ca:e1:de:3c:d0:20:f6:2a:8c:ac:ca:ac:
eb:f9:91:3c:81:67:aa:3e:b2:15:89:d4:f5:ed:d5:b3:66:15:
aa:a3:7e:c8:f5:0b:21:f1:21:13:c8:5c:b8:50:8c:a5:d6:50:
65:1d:a7:e7:3f:03:d5:e2:35:f2:89:0f:3e:1e:e8:ec:a0:c7:
ec:0a:2a:aa:62:65:32:33:13:11:06:b9:55:2b:8c:38:4b:3f:
f5:e8:11:43:0b:b9:af:b9:45:67:32:01:d0:d0:c7:e9:a4:78:
97:2c:0d:a0:51:a0:c6:42:86:76:e2:62:ab:f6:63:e1:37:96:
19:52:56:63:ee:a9:74:be:20:07:25:b5:34:65:c5:9b:55:46:
07:4a:9a:a1:4a:9b:fb:ee:9f:98:6b:af:a7:33:e6:1f:84:5c:
cd:31:e3:3d:bc:dc:e8:4c:91:23:e6:ae:0f:7d:74:fa:34:1f:
c7:14:c8:c9:fd:e3:54:83:e4:3f:cf:5a:9f:1a:02:f4:56:3b:
fc:b4:b2:43:42:26:29:bb:34:09:9e:64:7b:e0:63:5d:cd:2a:
55:bc:bb:42:bd:f7:86:bd:f5:14:2b:7b:6c:b1:e0:68:04:00:
51:c5:24:5f:c2:1b:cf:f2:2b:0e:1b:06:c6:a5:52:4b:8c:dc:
26:33:40:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBHs+yhK7/1kCTqh8yH/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YWU1ZjIzZGI5ODNmZDEzNmFlOWQ3MWU4N2UxZTUxMzBi
Y2Y2ZDQwHhcNMjYwOTI1MTAwMjQ3WhcNMjYwOTI2MTAwMjQ3WjAzMTEwLwYDVQQD
EyhlMTZmZDcwMWYzYWFiMjU3MzI5YTNlNTQzMzBhYWZmNDRhNDAzYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3yiqyjyYOuqHLt8WXeZxszohUF4
mmxo7XMFIxmJG65YWAldYohS1zMnYWzE/H9It8TccFRtqgirjjJA9sJ49muh+7Vp
X8YfdvvAiU7SLdpA8/nT5lrZVrWLJ+uyGBIr8OBxPsh6Y6tgRSBksQ02UJtWWNXy
egwioT9Sn+V/eOs/0PZEIcmbiL6AQtHL9Jwf6DxRDifGTkL6xbTDTmCeHCAR2sNH
1/0b64jZe3mBAoiQo1cKkvPHpjXAgJCC1iWPk5R3lsL5Xz2GXGV4pb1+aEPFG+QV
hbReplWAz7EeE2iI0F0YWFWXdEKWpGIie+oMxrWlBzpTsyfRkQyX/HG/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFv1wHzqrJXMpo+VDMKr/RKQDsfMB8GA1UdIwQY
MBaAFAWuXyPbmD/RNq6dceh+HlEwvPbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NDVmY2ItZjQ3Mi00MDM5LThiMWQt
NDRlZmQxMzA2NTljLzEvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NDVmY2ItZjQ3Mi00MDM5LThiMWQtNDRlZmQxMzA2NTlj
LzEvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwnUr/xY
yuHePNAg9iqMrMqs6/mRPIFnqj6yFYnU9e3Vs2YVqqN+yPULIfEhE8hcuFCMpdZQ
ZR2n5z8D1eI18okPPh7o7KDH7AoqqmJlMjMTEQa5VSuMOEs/9egRQwu5r7lFZzIB
0NDH6aR4lywNoFGgxkKGduJiq/Zj4TeWGVJWY+6pdL4gByW1NGXFm1VGB0qaoUqb
++6fmGuvpzPmH4RczTHjPbzc6EyRI+auD310+jQfxxTIyf3jVIPkP89anxoC9FY7
/LSyQ0ImKbs0CZ5ke+BjXc0qVby7Qr33hr31FCt7bLHgaAQAUcUkX8Ibz/IrDhsG
xqVSS4zcJjNAUg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:59:19 2026 by rpki-client