Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: tDs6NxmBChNhDYgmspKujNHOAR4hDKWVq2zMXMxsHfY=
Subject key identifier: 30:D2:45:A3:51:C4:63:21:7A:42:49:B4:1D:91:17:DE:82:3B:61:59
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 019F8FECB2C86B2DB762C70BA6AF440B858D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 17:01:21 +0000
Manifest this update: Thu 23 Jul 2026 17:01:21 +0000
Manifest next update: Fri 24 Jul 2026 17:01:21 +0000
Files and hashes: 1: 8L86EXisfMWARlTLlv2bxbPUN_E.roa (hash: 5jC5ZKIGyizvr6GbHsW0/xJUuk1S0ZkI1AjiMly1A0Y=)
2: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: cKFo6QbJPQp7Mhy0BpJunM/3y490QSl7vQC/OuG3XDI=)
3: QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa (hash: acy/62zh/8cBwnSa4bXBmJewCaA1koJ1fIjWjxzZ/1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:b2:c8:6b:2d:b7:62:c7:0b:a6:af:44:0b:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Jul 23 17:01:21 2026 GMT
Not After : Jul 24 17:01:21 2026 GMT
Subject: CN=30d245a351c463217a4249b41d9117de823b6159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:4e:16:ce:f4:6b:08:e1:d4:b3:0f:f0:cd:
a3:c4:4d:38:a4:32:a9:e7:3c:b1:a5:23:c9:89:33:
a2:30:22:12:ac:3f:56:7e:d3:1a:6a:90:e6:d5:97:
a2:c0:fd:7e:33:f7:97:04:94:ed:fd:aa:e8:62:59:
df:9f:97:a2:28:78:74:7f:5e:b5:86:0f:c6:cd:5c:
b1:7e:1d:d7:05:13:1a:65:43:ec:6e:b7:40:88:ea:
fa:b8:1e:9e:91:24:8c:f7:52:8f:3c:4c:a8:d9:6a:
eb:4e:ba:06:a8:04:03:f6:c9:bb:e9:5f:00:c2:aa:
b1:f3:d1:0f:8d:0e:d6:17:1f:65:69:f2:19:5c:b1:
e1:3a:c6:cd:a0:fa:10:43:93:83:45:70:58:a0:fe:
52:f8:86:7d:0f:e0:53:67:f2:75:43:69:d1:f0:7b:
6b:8c:1c:6d:3e:45:46:8f:ed:bb:7c:78:28:29:0c:
e3:e7:e0:ed:d6:bc:48:68:4a:39:f9:1f:76:5a:bf:
07:48:aa:aa:84:40:59:9e:fd:85:47:ad:fe:c1:0e:
b5:a0:32:ba:52:83:34:61:52:54:a8:c7:95:59:f3:
5c:a4:43:7c:23:6c:d0:91:95:3b:8c:d6:4c:32:c8:
eb:bb:68:ac:26:7c:66:52:e3:bc:e7:f8:7b:22:ac:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D2:45:A3:51:C4:63:21:7A:42:49:B4:1D:91:17:DE:82:3B:61:59
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3d:55:51:76:b0:4c:ad:fb:3c:ab:18:25:28:cf:ea:54:6a:
d6:e1:3d:1c:cc:9e:9a:8b:31:20:89:38:bc:5e:23:68:03:91:
34:81:ae:47:66:94:bd:fa:97:30:af:32:e7:bf:08:6d:4f:61:
4c:50:88:cc:75:d4:bb:3b:bd:47:b7:b8:af:b4:0a:be:06:5b:
be:c1:32:5b:eb:5e:28:5f:8d:09:12:e8:c7:a6:0c:6c:70:91:
44:08:48:7b:53:11:f5:79:2f:c6:be:42:70:83:bf:80:fe:bb:
ed:26:03:19:79:03:d6:e7:8e:57:cf:98:22:37:65:20:1c:d4:
ba:8c:a3:2f:77:44:75:0b:66:4f:ed:dd:51:6a:d3:3f:db:94:
e6:a9:7e:3c:bd:25:f3:4d:7c:e5:a3:bd:94:60:13:99:3e:36:
66:2c:bd:81:e8:23:98:4b:e9:d5:cf:01:b3:e6:aa:6f:af:3e:
66:b6:87:c8:5d:0e:72:ec:46:df:eb:a5:f3:8b:bc:84:bd:82:
14:f8:8b:47:88:0b:ea:72:25:91:ad:49:90:f9:87:db:85:23:
1d:9b:64:b8:76:fb:2a:87:0e:fa:4e:ce:c5:13:9a:45:57:bc:
46:c5:d4:81:ab:07:c9:8c:4e:cb:49:36:2d:19:e4:53:1e:88:
97:ae:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:30 2026 by rpki-client