Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier: ibiCHiPQ6C2ZIcsqGVDuvVHzwThvoMWq1JdlxRqDKJI=
Subject key identifier: 05:C7:86:2F:7A:9E:ED:54:4A:50:4B:B7:90:6F:76:F0:66:8A:B7:FD
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 01A0DE05CF50E809DCFF2C2E9464D8294A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number: 1A05
Signing time: Sat 26 Sep 2026 14:01:57 +0000
Manifest this update: Sat 26 Sep 2026 14:01:57 +0000
Manifest next update: Sun 27 Sep 2026 14:01:57 +0000
Files and hashes: 1: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: ESTjTeSZPyPOIIBLWxoTGgX0Z1fgm2dR/iCPiESH9BE=)
2: G7Xbpr7vHvkmIJQmWHsvOakqdjw.roa (hash: qWjL1bQeFwXeFmjLRN8X3nUGN5tctakBOqZVOMvExME=)
3: kUqj_jeUDh3dlpjWljMC7msoL3g.roa (hash: 6Qbo5xUNd0YNqPivHOfLW5ZqEfhVypLSM8N0TdqoUjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:cf:50:e8:09:dc:ff:2c:2e:94:64:d8:29:4a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Sep 26 14:01:57 2026 GMT
Not After : Sep 27 14:01:57 2026 GMT
Subject: CN=05c7862f7a9eed544a504bb7906f76f0668ab7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:ae:49:29:f7:16:f6:b4:26:ed:78:74:0f:
2f:15:8a:b5:15:b2:ae:20:6d:11:d1:03:e8:16:f5:
4e:37:d2:ee:23:8b:f9:46:31:17:78:31:dd:fb:89:
44:93:08:b4:19:2c:b3:c8:f4:eb:d8:7e:c0:9c:27:
a1:e7:cb:a7:9d:18:fc:e3:76:a8:ec:46:70:a3:93:
e9:10:b4:74:d1:2a:fb:1b:c0:b7:76:3e:7e:c6:e3:
a3:68:c9:44:c4:d9:4d:5d:ac:7d:d0:2a:df:8a:31:
85:34:c1:3a:c8:1a:08:d8:3e:ca:7a:17:6a:0b:21:
af:51:ea:13:8f:66:9a:be:c8:98:e0:e2:65:d0:aa:
48:b1:4c:91:de:ba:10:e2:4d:33:f8:78:7a:05:c9:
18:9d:51:2e:b9:89:b6:84:a8:84:64:c4:3c:d1:8c:
3e:85:57:1e:f2:6d:dd:2c:2d:4b:57:58:c9:f7:36:
3b:90:08:21:ac:40:17:2f:70:c5:ce:89:7a:99:9b:
f1:5d:f2:80:2b:18:2f:81:27:9e:e3:a5:c9:29:6e:
99:9d:d5:d6:97:04:2a:74:f3:fd:c4:b9:fc:91:52:
36:57:82:ef:65:09:63:d6:00:9a:26:ce:b7:67:8d:
0d:8f:f9:f4:f0:3b:1f:5b:43:8d:bd:7d:b6:49:da:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:86:2F:7A:9E:ED:54:4A:50:4B:B7:90:6F:76:F0:66:8A:B7:FD
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:12:49:2b:c4:c5:f1:80:95:69:30:e5:32:97:cc:f0:e7:55:
76:74:d9:f0:44:20:42:7a:9e:d3:17:dd:67:55:ec:35:22:5e:
f8:14:7a:f5:9e:f6:23:74:3e:26:35:e4:02:cb:92:0e:5d:79:
8e:fd:dc:b1:18:cb:75:49:1b:3f:e9:1a:4d:40:e1:89:41:0f:
e1:38:64:80:97:a7:90:64:21:30:95:3f:fa:25:25:16:eb:51:
39:07:1c:41:61:df:b6:79:a7:61:db:e9:b9:60:b7:cc:1f:d0:
3f:2c:7b:0e:09:a0:bf:75:5c:4a:8f:f7:07:0e:35:91:e3:b9:
04:90:af:f5:3e:51:15:2d:dc:53:11:8f:cb:8c:90:d3:5b:ab:
0a:09:de:e0:c3:5a:ae:6e:12:82:1d:24:0c:d9:f1:00:75:75:
2c:8c:14:61:60:34:0c:8e:be:e1:c9:a7:fc:c9:ce:d6:d0:28:
46:ce:0b:27:a0:e1:71:59:2b:3b:4f:9e:c0:b1:9a:11:44:9d:
e7:76:26:0c:87:88:99:7f:53:50:f8:7f:9d:97:3c:91:4f:3f:
49:82:c5:a0:4e:79:0f:0e:aa:d3:3e:df:1e:6e:c0:f4:19:40:
f1:9f:1b:95:51:2a:b4:87:38:22:a4:4d:f1:27:79:1c:29:ab:
81:93:f1:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeBc9Q6Anc/ywulGTYKUpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YWQ3OTQ5MmU4MDk5MzRkNjkzYjExODU1ZTc1MTAzMjQx
NTY5ZWIwHhcNMjYwOTI2MTQwMTU3WhcNMjYwOTI3MTQwMTU3WjAzMTEwLwYDVQQD
EygwNWM3ODYyZjdhOWVlZDU0NGE1MDRiYjc5MDZmNzZmMDY2OGFiN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvKuSSn3Fva0Ju14dA8vFYq1FbKu
IG0R0QPoFvVON9LuI4v5RjEXeDHd+4lEkwi0GSyzyPTr2H7AnCeh58unnRj843ao
7EZwo5PpELR00Sr7G8C3dj5+xuOjaMlExNlNXax90CrfijGFNME6yBoI2D7Kehdq
CyGvUeoTj2aavsiY4OJl0KpIsUyR3roQ4k0z+Hh6BckYnVEuuYm2hKiEZMQ80Yw+
hVce8m3dLC1LV1jJ9zY7kAghrEAXL3DFzol6mZvxXfKAKxgvgSee46XJKW6ZndXW
lwQqdPP9xLn8kVI2V4LvZQlj1gCaJs63Z40Nj/n08DsfW0ONvX22Sdr8gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXHhi96nu1USlBLt5BvdvBmirf9MB8GA1UdIwQY
MBaAFAWteUkugJk01pOxGFXnUQMkFWnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzIt
ZjM3OTdlZjM0OGZmLzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzItZjM3OTdlZjM0OGZm
LzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORJJK8TF
8YCVaTDlMpfM8OdVdnTZ8EQgQnqe0xfdZ1XsNSJe+BR69Z72I3Q+JjXkAsuSDl15
jv3csRjLdUkbP+kaTUDhiUEP4ThkgJenkGQhMJU/+iUlFutROQccQWHftnmnYdvp
uWC3zB/QPyx7Dgmgv3VcSo/3Bw41keO5BJCv9T5RFS3cUxGPy4yQ01urCgne4MNa
rm4Sgh0kDNnxAHV1LIwUYWA0DI6+4cmn/MnO1tAoRs4LJ6DhcVkrO0+ewLGaEUSd
53YmDIeImX9TUPh/nZc8kU8/SYLFoE55Dw6q0z7fHm7A9BlA8Z8blVEqtIc4IqRN
8Sd5HCmrgZPxhg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:21:23 2026 by rpki-client