Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: 33MaSOo1Ld2uc/jKkS7NuvKWmlaBPxNgnTha5bzLSY8=
Subject key identifier: E5:02:88:C2:68:71:F2:AA:16:F3:3B:EC:2C:CF:F7:13:C1:B0:20:A9
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 01A0F756C85E261215ACD51439A93229C28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 1A84
Signing time: Thu 01 Oct 2026 12:00:54 +0000
Manifest this update: Thu 01 Oct 2026 12:00:54 +0000
Manifest next update: Fri 02 Oct 2026 12:00:54 +0000
Files and hashes: 1: 7cWy2Dtu0T2NpUUPeyRVXzPq6qo.asa (hash: vB+jjoSmWpEAyNuaRojaUydNr1k4NHyMcQ12V/XrEsc=)
2: 8L86EXisfMWARlTLlv2bxbPUN_E.roa (hash: 5jC5ZKIGyizvr6GbHsW0/xJUuk1S0ZkI1AjiMly1A0Y=)
3: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: T6JZR5pvKBTgHNc7ZCatARff4YCUUv2A6ns4sCL9BOc=)
4: QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa (hash: acy/62zh/8cBwnSa4bXBmJewCaA1koJ1fIjWjxzZ/1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:56:c8:5e:26:12:15:ac:d5:14:39:a9:32:29:c2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Oct 1 12:00:54 2026 GMT
Not After : Oct 2 12:00:54 2026 GMT
Subject: CN=e50288c26871f2aa16f33bec2ccff713c1b020a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:a6:88:ec:75:66:a0:e2:c5:da:c5:7a:a1:
8a:2c:c4:12:ef:fa:c5:8f:4b:f2:f8:8f:83:34:68:
e2:d3:7e:3d:7e:8d:b5:9e:bd:82:82:8a:c2:4d:29:
30:d2:a8:63:4b:54:f3:1f:fa:4d:5d:bb:64:81:fe:
7e:c4:4a:87:6e:d2:65:eb:5c:ba:e9:b9:8d:83:fe:
46:f4:ec:69:aa:f4:1f:6b:27:b3:f0:fa:db:7f:9c:
55:48:ef:b4:14:bd:b4:84:af:f0:f3:88:f5:31:71:
e7:44:cd:6d:34:c8:c6:1b:7f:9a:07:4a:71:a2:5f:
f3:2d:66:c8:3e:01:c3:bc:da:90:bd:ac:02:98:25:
eb:76:11:e1:39:96:75:ea:ff:fd:63:f7:b3:5b:1d:
80:b2:2e:28:ad:fb:55:9c:ec:1a:d1:b0:25:0b:6a:
2b:07:80:13:93:bc:3e:46:a0:47:10:e6:65:01:6b:
b8:4c:24:b2:63:68:1a:6c:6f:1b:6d:94:28:ed:dc:
ff:12:54:05:07:d2:a4:21:a1:07:86:ef:f2:22:1c:
02:b9:56:68:36:47:87:c9:8c:51:e1:46:04:20:d4:
b8:83:21:1d:b5:f0:0e:6a:9b:b1:ab:0d:82:8c:27:
9e:83:dc:f8:5d:d3:42:c3:0b:f9:db:88:f0:07:fc:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:02:88:C2:68:71:F2:AA:16:F3:3B:EC:2C:CF:F7:13:C1:B0:20:A9
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e6:f1:5c:b1:1d:74:ea:6c:cb:58:85:a7:1a:bc:85:d6:37:
c2:b0:a3:af:b5:5c:92:01:cd:80:26:65:bc:20:bf:03:2b:b2:
2e:e5:e4:cd:9a:a3:54:87:59:ad:f6:ba:7f:87:05:d5:f3:8f:
84:7d:e8:fc:eb:c8:ea:11:01:a0:76:ff:f2:d5:65:d2:90:6f:
1b:88:fa:cc:33:03:43:bd:75:0f:f7:8a:39:32:0a:ed:64:35:
89:7e:f3:f0:91:a3:26:68:b3:3b:d4:c9:8c:26:f3:e5:28:65:
60:10:61:35:4c:cf:24:28:93:5e:c5:02:ae:ff:e6:93:ff:5a:
10:7b:22:cf:a6:dc:fc:74:84:ad:4d:80:4f:05:ba:79:4e:78:
9f:5b:9f:ba:e8:bd:dc:73:8b:2c:a2:74:78:b0:64:9b:c8:42:
fa:ad:7a:f4:db:18:94:f6:f5:63:1f:04:38:19:8e:f2:17:6e:
bb:45:8f:d0:cc:14:d5:36:4d:7a:58:eb:81:55:de:a2:c9:92:
af:e4:ed:62:9b:ce:1b:1b:8c:83:67:8d:4b:29:52:7f:be:ba:
8f:b7:22:8c:10:7e:db:a5:d7:de:7d:a2:17:e4:c2:62:4b:e2:
d2:55:25:94:02:8a:a6:cc:35:b4:f1:12:d3:82:d3:1b:32:02:
d9:2f:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:34:18 2026 by rpki-client