Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier: xFpxBX++FyReix4+7YYcgbZIwcRnQJCy8UjofTPtoXQ=
Subject key identifier: E0:31:2D:98:82:C9:C1:9D:AA:40:9C:36:33:6E:68:FA:50:22:0F:97
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 019E1D2285C0DD2C84CBD67C9044EE1FA6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 17:01:02 +0000
Manifest this update: Tue 12 May 2026 17:01:02 +0000
Manifest next update: Wed 13 May 2026 17:01:02 +0000
Files and hashes: 1: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: bXbmxN+6Cau2MnSKFBhp9I9mTgPnUJUcgjrHkNmPkMY=)
2: G7Xbpr7vHvkmIJQmWHsvOakqdjw.roa (hash: qWjL1bQeFwXeFmjLRN8X3nUGN5tctakBOqZVOMvExME=)
3: kUqj_jeUDh3dlpjWljMC7msoL3g.roa (hash: 6Qbo5xUNd0YNqPivHOfLW5ZqEfhVypLSM8N0TdqoUjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:85:c0:dd:2c:84:cb:d6:7c:90:44:ee:1f:a6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: May 12 17:01:02 2026 GMT
Not After : May 13 17:01:02 2026 GMT
Subject: CN=e0312d9882c9c19daa409c36336e68fa50220f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:d4:c0:11:c5:6a:84:04:f0:01:45:2c:f8:
af:79:48:a9:70:1e:dc:64:cd:c3:62:9d:c5:a9:d8:
05:a7:70:56:13:79:c7:6d:be:6e:9b:cd:08:af:65:
69:fa:f0:cf:c4:ee:c2:0e:69:4e:86:db:a5:b7:0a:
5d:c2:d6:b8:e6:4c:99:ba:52:3e:9e:c7:ac:65:4b:
5a:97:09:c1:71:da:7d:19:d1:79:5e:d0:a6:f9:e4:
5e:53:bc:0a:e2:5e:ec:d0:4b:0f:4c:c2:17:1c:a6:
4e:e9:54:7e:4b:e2:2a:84:ea:73:47:9b:32:9e:e2:
29:75:ae:9f:3d:c3:fc:c4:40:d1:74:55:74:97:6b:
a1:8b:4e:b0:c0:2d:e0:d0:38:af:1b:04:1d:a8:3a:
3b:22:34:a8:19:6f:8d:d7:2a:fc:4f:09:4f:3a:dc:
c0:fa:4c:e6:03:a8:82:0b:ec:4d:d3:36:53:c1:38:
a9:53:6e:c7:2f:c4:e9:55:f2:00:a8:ce:e7:69:e8:
4c:ff:c9:de:e6:c3:d7:cf:04:d6:94:a3:ca:81:3f:
4e:a7:00:42:a4:d3:d6:71:4f:4f:28:6b:c6:28:52:
fa:eb:e5:ae:69:65:25:b3:e6:a7:bb:5e:0a:0e:29:
0f:c8:2e:59:a9:fb:93:be:bb:c5:8e:f2:ff:91:7a:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:31:2D:98:82:C9:C1:9D:AA:40:9C:36:33:6E:68:FA:50:22:0F:97
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8f:0a:43:6f:59:45:e0:f6:06:55:20:a5:f9:a4:c6:c5:c2:
d7:18:7c:5c:54:5d:69:4c:16:51:93:30:92:9b:e4:61:4e:2c:
bf:8d:99:64:b7:2a:05:a0:1b:0c:87:6b:dc:fe:0c:0c:8b:ae:
45:c4:b5:68:21:c3:80:bf:cc:42:83:30:1c:d5:e0:26:03:79:
04:b9:30:4d:cb:d8:40:e4:03:48:fc:24:dc:c0:01:b6:6a:43:
59:49:18:f6:59:c1:9a:b6:2b:ed:7e:12:6e:b6:79:6c:21:a8:
55:8e:35:e5:0b:42:2a:4e:95:55:df:49:67:c4:b3:fe:83:1e:
07:e3:72:30:6d:39:93:0e:b3:c1:47:c7:be:79:7d:f5:3a:18:
f7:87:10:ef:d5:ca:43:87:1d:4d:80:f0:85:69:d6:b3:1b:3c:
2b:0e:53:a7:67:85:a6:67:ef:ee:70:33:1a:31:cc:ac:22:df:
4e:29:83:bd:b4:0b:ce:51:7b:9e:78:75:eb:2d:14:c9:ab:2a:
6e:6e:fb:1f:00:95:68:cf:85:a1:82:fb:c4:25:ec:d7:89:fa:
b8:49:22:f0:e3:80:aa:87:0e:a6:94:40:73:cb:49:3a:24:53:
57:d4:d6:e7:9a:95:31:c9:f2:80:8f:05:5a:0b:85:e9:d0:e6:
97:ca:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:57 2026 by rpki-client