Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: IqpYdKnQMfPqTzKwEr3nwfksC0LpkX6mm+L1LwhJ8HI=
Subject key identifier: 18:3C:B7:55:74:F2:6D:A3:DA:E1:8A:F8:AC:5A:F2:77:60:43:0F:85
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 019E1F1198714A660EDAE6CCAE83EB6EEB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 02:01:47 +0000
Manifest this update: Wed 13 May 2026 02:01:47 +0000
Manifest next update: Thu 14 May 2026 02:01:47 +0000
Files and hashes: 1: 8L86EXisfMWARlTLlv2bxbPUN_E.roa (hash: 5jC5ZKIGyizvr6GbHsW0/xJUuk1S0ZkI1AjiMly1A0Y=)
2: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: mJgzGiKBwzBCOHjJMvO8Sq9WD8px6VEGai1qWnrrB1E=)
3: QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa (hash: acy/62zh/8cBwnSa4bXBmJewCaA1koJ1fIjWjxzZ/1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:98:71:4a:66:0e:da:e6:cc:ae:83:eb:6e:eb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: May 13 02:01:47 2026 GMT
Not After : May 14 02:01:47 2026 GMT
Subject: CN=183cb75574f26da3dae18af8ac5af27760430f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:e2:95:de:bb:2a:b9:18:f8:65:ef:37:38:
1d:60:2b:01:38:72:d7:cd:88:60:a0:62:cc:ed:df:
84:e0:c5:e7:c7:3f:3f:5a:8c:2c:af:b1:1f:7a:29:
d9:ab:34:ce:98:10:dc:ac:7c:ea:05:f9:07:07:d9:
91:ce:3e:06:ce:12:5b:b3:df:f0:b1:fc:99:c8:b6:
06:b9:6d:40:f5:50:43:57:23:d0:79:94:4a:a4:3e:
48:96:4c:0f:15:58:29:15:21:9a:42:76:d4:2a:9c:
41:f5:94:57:c2:18:f5:1d:ca:fa:b0:17:31:a5:95:
ed:ca:40:6f:d2:c8:ea:c3:75:cb:3c:9d:7e:1e:73:
ea:b9:e0:e5:a7:e6:26:71:79:1b:ef:f7:55:95:46:
4e:4c:0d:9e:c2:56:eb:82:b0:64:c5:c6:3a:b3:69:
1c:86:2c:68:e9:ca:11:fa:02:a8:a4:0e:cb:30:14:
94:b6:e3:01:65:5e:ee:db:27:78:16:11:1b:a8:c6:
bc:e2:73:6a:65:57:b8:3f:61:6c:9f:a4:43:3f:0a:
bd:24:ae:c8:f2:4e:93:e4:db:43:cb:6c:4b:c7:33:
b8:5a:d2:16:d7:36:e6:6b:9b:90:43:16:00:9b:a6:
83:32:9f:86:13:34:c0:5f:ca:ff:5f:78:e4:42:68:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:B7:55:74:F2:6D:A3:DA:E1:8A:F8:AC:5A:F2:77:60:43:0F:85
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:63:c8:2b:a4:8b:48:b2:5f:b9:43:75:49:a7:0e:0f:2f:90:
d1:75:c7:ce:76:f8:87:a3:bc:7e:d5:4a:02:01:6b:d2:99:80:
6d:dc:44:93:c2:11:ce:13:67:30:9b:0a:98:73:01:ce:9a:da:
91:b8:f1:c9:93:96:19:02:98:83:1c:1a:b6:0a:1f:6a:b3:6a:
67:8b:50:13:85:39:ce:98:73:77:79:c7:31:7a:ec:21:0e:78:
6e:cc:4f:ac:c8:b0:5e:df:bd:aa:47:7b:42:76:3f:08:2d:a2:
34:48:4e:95:f0:88:11:7c:f0:76:f8:6d:01:f2:e5:e3:8f:5c:
06:e9:c5:ab:f7:87:fc:fe:e1:4e:c8:dc:4e:42:04:43:b9:c0:
e3:28:6c:ff:0b:63:b5:06:c8:1d:64:0f:7b:7a:e6:21:af:9a:
a5:66:40:75:69:14:3a:82:39:b7:91:cc:f9:35:fd:f1:3c:0b:
0e:7f:31:5c:56:ca:45:f8:61:ed:ba:2a:18:ea:00:dd:f7:d7:
a8:62:10:73:2d:dc:55:64:22:9e:d1:12:01:d7:ea:4a:43:51:
e6:03:ad:b3:c2:e2:94:62:de:4c:16:a8:f1:0a:8d:a7:7e:23:
b7:30:41:01:56:be:c8:46:25:a0:f7:86:5e:6a:63:8c:c6:1a:
1a:1c:9e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEZhxSmYO2ubMroPrbusdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MGRkM2QzYzUyZDRjNmZhNTFiN2E4MzM1NzhjZWZiM2Fi
MjY2NDkwHhcNMjYwNTEzMDIwMTQ3WhcNMjYwNTE0MDIwMTQ3WjAzMTEwLwYDVQQD
EygxODNjYjc1NTc0ZjI2ZGEzZGFlMThhZjhhYzVhZjI3NzYwNDMwZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbzild67KrkY+GXvNzgdYCsBOHLX
zYhgoGLM7d+E4MXnxz8/Wowsr7EfeinZqzTOmBDcrHzqBfkHB9mRzj4GzhJbs9/w
sfyZyLYGuW1A9VBDVyPQeZRKpD5IlkwPFVgpFSGaQnbUKpxB9ZRXwhj1Hcr6sBcx
pZXtykBv0sjqw3XLPJ1+HnPqueDlp+YmcXkb7/dVlUZOTA2ewlbrgrBkxcY6s2kc
hixo6coR+gKopA7LMBSUtuMBZV7u2yd4FhEbqMa84nNqZVe4P2Fsn6RDPwq9JK7I
8k6T5NtDy2xLxzO4WtIW1zbma5uQQxYAm6aDMp+GEzTAX8r/X3jkQmg4ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg8t1V08m2j2uGK+Kxa8ndgQw+FMB8GA1UdIwQY
MBaAFAQN09PFLUxvpRt6gzV4zvs6smZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMt
YzJjMmFjYjkwOGJjLzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMtYzJjMmFjYjkwOGJj
LzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGPIK6SL
SLJfuUN1SacODy+Q0XXHznb4h6O8ftVKAgFr0pmAbdxEk8IRzhNnMJsKmHMBzpra
kbjxyZOWGQKYgxwatgofarNqZ4tQE4U5zphzd3nHMXrsIQ54bsxPrMiwXt+9qkd7
QnY/CC2iNEhOlfCIEXzwdvhtAfLl449cBunFq/eH/P7hTsjcTkIEQ7nA4yhs/wtj
tQbIHWQPe3rmIa+apWZAdWkUOoI5t5HM+TX98TwLDn8xXFbKRfhh7boqGOoA3ffX
qGIQcy3cVWQintESAdfqSkNR5gOts8LilGLeTBao8QqNp34jtzBBAVa+yEYloPeG
XmpjjMYaGhyeaA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:40:31 2026 by rpki-client