Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json)
Hash identifier: AS2gMWix3vazrM/bYjEp7R6QNLV9glOi8dvd92HyXoM=
Subject key identifier: 3A:2C:D7:4C:3E:92:76:32:B2:15:A5:2F:0F:31:4D:E4:A7:92:78:19
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 01A0D20083717ED9CD138202007F5041C339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
Manifest number: 0D40
Signing time: Thu 24 Sep 2026 06:00:43 +0000
Manifest this update: Thu 24 Sep 2026 06:00:43 +0000
Manifest next update: Fri 25 Sep 2026 06:00:43 +0000
Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: YHUCNFBnCrLunWc9hV6O+T7CaLNvi5BVz0FZOkRLjZw=)
2: ty_z9F5F_f3BDR4ug7k-DhLsplA.roa (hash: aOrvfBJ3aIsm9B11VD3D1FcnWhZg8CPxpRJXlr1jiqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:83:71:7e:d9:cd:13:82:02:00:7f:50:41:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Sep 24 06:00:43 2026 GMT
Not After : Sep 25 06:00:43 2026 GMT
Subject: CN=3a2cd74c3e927632b215a52f0f314de4a7927819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:9e:5c:ef:4b:ec:be:84:61:d6:f9:6d:6d:
37:20:e5:14:9b:37:b4:18:71:07:8c:cc:0c:c7:72:
b3:41:12:9a:df:3a:b2:80:ea:7a:7d:15:95:fe:5b:
24:ca:68:8c:bf:4b:00:10:8d:7d:ce:f4:61:89:7d:
b6:e4:6a:dd:29:80:42:33:c6:4c:87:7b:09:17:90:
32:78:71:89:11:fc:3b:20:6b:a2:b3:14:ea:84:8b:
72:34:7d:5b:67:5f:88:cb:9c:27:7c:8c:7c:91:12:
c4:aa:3b:98:91:53:81:c9:72:50:5b:86:1d:d5:f5:
48:fe:e0:00:b6:3f:42:26:01:19:da:33:ff:60:bc:
31:97:77:24:e0:5d:42:78:eb:ef:c1:ca:41:c5:07:
48:0a:2b:cf:8e:bf:bf:69:50:98:73:db:47:42:e4:
87:2c:5b:2c:6b:28:f2:54:f2:b3:af:b8:3b:69:41:
e5:34:bc:2e:ff:31:ad:f4:67:03:9e:0f:ca:bf:4c:
1d:f8:89:98:94:1e:c3:3a:c9:ea:03:83:04:b5:ef:
3f:1c:dc:de:f1:ba:4a:9e:c0:47:5d:ba:19:a9:6a:
25:61:20:c4:c5:cb:9d:39:d1:c1:54:51:28:b4:fa:
b8:2d:04:6b:28:a8:58:f8:a4:0a:6c:d4:a9:f4:ba:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2C:D7:4C:3E:92:76:32:B2:15:A5:2F:0F:31:4D:E4:A7:92:78:19
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9c:f4:47:2d:96:36:15:73:2a:7c:b6:e3:24:e7:5e:d8:db:
30:a9:cd:fc:4f:09:7c:66:c3:dd:7e:7c:da:0f:9f:28:42:64:
07:86:47:17:9b:2b:b7:6e:bc:6e:8c:07:54:a3:cf:3e:65:05:
85:21:07:3d:46:ff:55:86:0e:31:de:ee:c6:86:cf:56:bf:96:
13:13:5c:f3:58:76:25:6f:12:ce:92:13:ce:5c:4d:15:49:8b:
01:5b:de:6a:ff:90:24:01:14:5f:44:0a:76:fc:93:1c:ec:4a:
5c:3a:ec:c7:2a:f1:87:bd:d5:6c:01:55:09:fa:13:77:41:19:
b4:33:e2:7a:83:3d:30:61:0d:bc:1a:79:6d:be:2e:e5:87:23:
90:d7:65:3d:e7:70:ea:43:13:83:62:29:db:e2:80:1c:77:63:
42:4a:ae:9a:b6:92:86:24:19:d0:b2:77:7e:14:3f:a9:45:09:
a3:5d:a2:d2:d5:66:ef:d3:f7:69:cb:a8:fe:29:22:f8:d8:88:
ff:92:d6:56:99:f5:f2:97:61:4a:55:f6:b4:ee:08:1c:92:4f:
ec:f0:94:ba:51:27:92:68:3a:18:d2:67:99:97:27:31:b5:15:
8a:95:05:ca:1c:9a:54:3a:6a:4c:f8:eb:51:16:99:fc:bc:87:
7f:61:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:16:02 2026 by rpki-client