Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier: NZBKEltb0AhB9RgVgfhX4yfFuIer68GJyieA/BesqcQ=
Subject key identifier: F2:C1:91:C9:2A:82:92:96:5E:51:1B:C3:2B:21:3A:47:15:0B:2A:19
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 019E20C8BF3499131398C143DFA7FA35FCB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number: 1940
Signing time: Wed 13 May 2026 10:01:27 +0000
Manifest this update: Wed 13 May 2026 10:01:27 +0000
Manifest next update: Thu 14 May 2026 10:01:27 +0000
Files and hashes: 1: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: yuPQd5k53LdZ3zGPG5NE/tZOTnuDShA58idOQTIreVk=)
2: twp4Qc_IfaZm5YE2R9dG6fqSpJ4.roa (hash: KryWaKXhp+XF5Bj82qDMC0PiQYEMyEcKF+PGbAmtZ7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:bf:34:99:13:13:98:c1:43:df:a7:fa:35:fc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: May 13 10:01:27 2026 GMT
Not After : May 14 10:01:27 2026 GMT
Subject: CN=f2c191c92a8292965e511bc32b213a47150b2a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:50:a4:58:af:0b:8f:0e:21:04:05:4b:5c:
06:1c:66:0b:9c:72:f4:1d:5d:5e:a2:8f:7b:98:2e:
2b:5e:de:ae:c2:b3:4a:13:0a:6c:90:9b:34:be:ba:
96:8e:9f:66:c2:00:34:3e:ab:4e:6d:e0:73:d8:2c:
29:cb:0f:eb:c3:27:09:f8:48:06:b8:2c:fc:e7:5c:
ee:db:ee:9c:a2:b3:8f:3d:1d:5d:9d:d0:02:2e:85:
6a:01:58:60:42:a2:f7:7b:9a:44:33:13:f7:58:32:
d1:4f:20:83:49:74:7e:9d:1f:24:9c:bd:34:2a:0a:
8a:63:5f:e5:77:19:d0:f4:10:69:de:9b:cd:b2:b6:
4b:fc:1c:88:86:8f:41:f2:76:27:e0:a8:b6:df:01:
fe:99:7e:3b:20:4a:72:a9:99:d9:81:de:41:ca:f0:
d9:8b:1d:13:c4:69:6f:3d:44:54:1b:c6:cd:dd:ab:
f7:77:f8:9c:f4:0c:62:1d:7a:d4:ec:9f:b1:19:3d:
bd:ce:47:9e:a9:01:e4:be:5c:89:31:72:ab:7c:ac:
8d:e1:ba:ae:b7:bd:20:d1:3f:f6:15:b4:71:ff:cc:
b9:71:fd:f2:f5:67:d8:27:64:78:a8:e7:8d:ee:d6:
78:89:a6:ed:dd:53:8a:14:93:eb:b4:26:fa:f4:bd:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C1:91:C9:2A:82:92:96:5E:51:1B:C3:2B:21:3A:47:15:0B:2A:19
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:29:d9:2c:18:d6:71:5c:27:05:b1:62:9b:4f:c8:0c:4e:8e:
39:30:81:c8:65:b3:12:83:24:75:7e:e1:2f:76:01:a5:36:88:
03:48:cd:77:99:44:24:f4:74:66:6e:99:43:f1:07:ee:33:05:
dd:e4:a3:de:d1:f9:d2:6d:2b:c1:c1:8c:77:c7:39:d5:59:1c:
db:f0:ec:cd:59:c9:f5:e3:7f:b0:c7:61:ef:8f:f7:a4:63:b3:
26:09:d1:44:48:58:8a:03:f7:5b:cd:85:5e:25:6b:e9:77:69:
ce:ae:b4:d8:b4:63:9e:48:ae:7b:91:77:b2:70:a6:ee:dc:b8:
de:2d:ab:2e:3e:61:fe:b5:4b:fb:02:73:32:49:23:a9:53:dd:
cd:85:ed:e9:da:df:b9:54:18:b8:88:83:a3:7a:60:5c:3c:e5:
87:bb:c3:a8:5e:12:32:d0:4f:50:fa:f7:92:3e:d3:34:53:08:
7f:1d:20:8b:a4:71:74:6b:b9:b7:2f:80:de:00:bc:87:eb:59:
84:a8:09:57:61:61:5c:79:b5:65:7e:e6:c7:80:47:6e:14:e2:
b5:e0:a3:94:18:a5:81:b6:dc:f1:55:65:c5:90:e0:d6:14:e8:
35:d5:ae:3a:e6:b1:5a:fa:8d:d9:25:5e:f4:b9:d6:45:bd:0d:
d5:2d:3a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:10:57 2026 by rpki-client