Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/325436-9ea0-45dd-a12c-f500d04a6e1b/1/BaGiO6vILFg0Jk1ce8_loj8sslc.mft
File: BaGiO6vILFg0Jk1ce8_loj8sslc.mft (raw, json)
Hash identifier: KWNIqNurPn5D+qp0mnKKHkOZAd8bUCcZ8Andusynivc=
Subject key identifier: 83:9A:34:EA:11:D4:B4:51:6E:7A:AC:5A:C3:7F:EB:E8:72:E5:97:58
Authority key identifier: 05:A1:A2:3B:AB:C8:2C:58:34:26:4D:5C:7B:CF:E5:A2:3F:2C:B2:57
Certificate issuer: /CN=05a1a23babc82c5834264d5c7bcfe5a23f2cb257
Certificate serial: 01A0D6BA3BFD96FCB61DEBDE4D0EBA542E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaGiO6vILFg0Jk1ce8_loj8sslc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/325436-9ea0-45dd-a12c-f500d04a6e1b/1/BaGiO6vILFg0Jk1ce8_loj8sslc.mft
Manifest number: 62
Signing time: Fri 25 Sep 2026 04:02:04 +0000
Manifest this update: Fri 25 Sep 2026 04:02:04 +0000
Manifest next update: Sat 26 Sep 2026 04:02:04 +0000
Files and hashes: 1: BaGiO6vILFg0Jk1ce8_loj8sslc.crl (hash: y6/nVc7w6RtyevdLXCC0U0irIa8Z2XnoXk4KAQl7sZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/325436-9ea0-45dd-a12c-f500d04a6e1b/1/BaGiO6vILFg0Jk1ce8_loj8sslc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/325436-9ea0-45dd-a12c-f500d04a6e1b/1/BaGiO6vILFg0Jk1ce8_loj8sslc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaGiO6vILFg0Jk1ce8_loj8sslc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:ba:3b:fd:96:fc:b6:1d:eb:de:4d:0e:ba:54:2e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a1a23babc82c5834264d5c7bcfe5a23f2cb257
Validity
Not Before: Sep 25 04:02:04 2026 GMT
Not After : Sep 26 04:02:04 2026 GMT
Subject: CN=839a34ea11d4b4516e7aac5ac37febe872e59758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:de:22:41:e6:b7:8d:bc:da:99:ef:33:33:
c8:31:c5:c6:ca:74:60:77:2a:18:cc:ba:a2:68:9e:
87:64:92:d1:8d:8a:1e:ec:92:b8:6c:b7:f5:7e:23:
4a:f5:f8:db:d9:8e:c0:67:7c:13:1d:44:b6:05:76:
94:09:77:5c:17:14:d9:d8:dc:0a:89:4d:67:92:bf:
0b:a3:1b:41:b0:26:13:9d:fc:6a:40:bc:ef:10:c4:
13:e6:94:1a:47:48:0e:40:e0:f7:1a:90:ce:0f:32:
91:b0:52:c2:f9:85:0d:ca:d9:0f:a8:2f:f6:0b:d3:
1d:7b:ef:bc:8e:e8:43:8a:fe:65:be:dc:7f:b8:ec:
7e:5a:14:ab:b1:2c:01:13:37:20:1b:5b:18:38:16:
b1:06:aa:84:51:3b:3d:71:1d:aa:b7:ce:6b:46:d9:
fa:2a:26:c7:58:2f:52:04:0c:9b:3a:ac:67:b7:f3:
a5:a2:04:c2:6a:23:37:f9:a3:cc:52:ba:da:00:29:
1f:b6:51:a0:3e:13:07:66:9b:ac:4f:3c:99:bf:89:
5c:c2:16:0d:f1:9b:0b:c3:27:25:86:6b:0b:fb:9f:
86:37:01:d0:99:77:95:75:3a:0d:f1:39:f9:7d:54:
89:1d:5f:e2:d1:1d:76:30:ed:c8:99:e4:de:4c:ab:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:34:EA:11:D4:B4:51:6E:7A:AC:5A:C3:7F:EB:E8:72:E5:97:58
X509v3 Authority Key Identifier:
keyid:05:A1:A2:3B:AB:C8:2C:58:34:26:4D:5C:7B:CF:E5:A2:3F:2C:B2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaGiO6vILFg0Jk1ce8_loj8sslc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/325436-9ea0-45dd-a12c-f500d04a6e1b/1/BaGiO6vILFg0Jk1ce8_loj8sslc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/325436-9ea0-45dd-a12c-f500d04a6e1b/1/BaGiO6vILFg0Jk1ce8_loj8sslc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:34:ef:7b:77:ee:3d:f7:b9:f2:12:20:70:78:51:fa:11:5b:
0a:ca:80:fe:45:35:46:67:2d:6b:fc:96:4c:d2:95:5d:0c:3f:
ef:5b:91:df:f3:f8:e1:23:6d:ed:ab:aa:e1:7b:1a:5d:63:b0:
77:88:44:d8:cd:66:e5:c2:a5:89:5f:3f:2f:d3:86:0c:ee:3c:
eb:a8:fe:73:e0:ab:be:49:55:fd:43:d8:85:89:83:59:92:56:
d5:b5:eb:21:7a:67:38:a1:10:b9:0e:1a:aa:db:30:d5:5c:a5:
08:4d:39:22:94:00:a7:5f:36:59:b9:71:50:6d:4e:36:26:b3:
10:94:13:05:f4:9a:33:6b:4d:ff:23:bd:d3:52:c2:ca:c5:e1:
e6:6d:86:ab:6b:9c:f3:b8:09:8a:f0:57:ff:ce:0f:89:88:a2:
b6:a6:25:b3:a3:28:ed:3a:d3:2c:94:48:81:d3:37:f7:77:55:
36:dc:a7:90:cd:d9:ca:33:5a:a6:3d:a6:09:b9:78:1e:e9:bd:
f7:b9:a0:7e:f4:c3:18:ee:42:e7:2e:81:f3:d8:43:7e:02:31:
2e:95:6a:74:a7:06:6e:8a:1e:f5:10:13:33:b4:64:0d:4b:a2:
48:ea:52:53:e0:48:0b:e1:59:e1:a6:35:e2:9d:f9:7b:7b:d0:
6a:61:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:55:59 2026 by rpki-client