Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier: tdNkslEaZIXZeSea3zLVGie9gxWOslYuo+ElfeYRqv8=
Subject key identifier: 32:41:EB:41:EB:8E:BE:64:99:70:FF:19:7B:AC:16:A1:CD:F8:F1:6C
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 019D29972580A1816EA92F7B824BD7ACB263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number: 18C0
Signing time: Thu 26 Mar 2026 10:01:04 +0000
Manifest this update: Thu 26 Mar 2026 10:01:04 +0000
Manifest next update: Fri 27 Mar 2026 10:01:04 +0000
Files and hashes: 1: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: k7v9P8roLL8CQJ+w3K7vLWFKPmLKPdhqORW146S49EA=)
2: twp4Qc_IfaZm5YE2R9dG6fqSpJ4.roa (hash: KryWaKXhp+XF5Bj82qDMC0PiQYEMyEcKF+PGbAmtZ7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:25:80:a1:81:6e:a9:2f:7b:82:4b:d7:ac:b2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Mar 26 10:01:04 2026 GMT
Not After : Mar 27 10:01:04 2026 GMT
Subject: CN=3241eb41eb8ebe649970ff197bac16a1cdf8f16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fc:29:c6:48:1b:fa:2a:96:e5:73:4c:44:b1:
59:fe:81:bb:4d:46:ef:93:79:38:a7:a1:4d:8f:89:
b7:87:d1:58:0f:a5:4b:a0:74:e1:79:91:d5:c8:5d:
3e:35:72:c8:7e:fa:ea:02:a4:8a:10:0c:ad:16:56:
88:67:9c:08:ef:ef:87:af:c3:dc:14:ca:84:a8:19:
2c:bf:3b:99:0d:2c:0c:f6:76:4f:32:91:2c:30:ab:
c6:a8:de:a0:1b:6c:8e:2a:a6:9d:2b:4f:07:c6:9d:
31:63:ef:ad:9a:e6:d9:2e:9f:d4:66:ab:16:67:f0:
64:05:76:df:a6:f7:8f:ca:84:5a:1f:ad:17:2b:ec:
89:76:eb:fb:3f:aa:02:2a:7f:92:9a:e4:c2:4b:1b:
1d:ca:76:07:58:dc:18:fb:24:53:a4:30:53:9c:ed:
21:15:b8:42:5c:ca:c9:10:13:c5:3f:44:2d:e5:6b:
c5:69:26:a8:97:47:6a:e6:56:d5:54:1c:d7:5f:86:
45:14:76:42:43:d7:59:0b:38:7d:e9:da:ed:a9:39:
58:14:38:9a:1d:c4:41:79:37:6e:b3:12:c6:36:d1:
66:c9:12:6c:10:95:76:66:72:5a:b6:b9:71:bd:d6:
6c:4b:cf:00:c7:8e:93:e6:22:98:e4:4c:f8:e4:cd:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:41:EB:41:EB:8E:BE:64:99:70:FF:19:7B:AC:16:A1:CD:F8:F1:6C
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:57:b6:7b:59:29:66:ed:1a:18:1a:fe:b4:3c:2c:60:8b:a7:
83:a1:80:c3:29:50:09:5a:10:bf:9a:15:5e:0c:23:dd:29:c5:
e5:dc:42:ce:0e:81:df:13:8b:ee:20:56:a2:4c:20:84:78:2a:
af:52:80:31:62:be:a5:aa:bb:ca:bb:89:7f:e4:bd:5a:39:14:
dc:3b:70:b4:85:55:f1:14:2b:dc:da:69:e1:54:34:32:9e:eb:
a1:d0:2d:6f:0f:7f:01:f7:7e:9b:8b:ef:37:ff:53:f0:43:92:
38:1a:8f:83:92:18:48:f7:6b:79:24:a7:5d:86:e0:57:23:49:
ff:0c:76:72:a1:e8:58:14:6b:0d:41:04:93:b5:44:a9:b6:a4:
e6:6c:27:6d:4d:e9:66:e7:0a:5c:f3:ef:45:b1:b7:c2:42:70:
48:ab:11:c3:dd:a9:23:bc:57:41:42:18:b5:ee:7a:6b:b0:10:
e8:66:17:7c:14:68:56:7c:b4:d8:05:6d:fb:1b:35:55:42:25:
cc:ac:ab:73:6b:bc:d0:f5:ae:4c:d0:a7:7d:e4:e6:2c:16:89:
f7:0d:3d:0d:1a:78:84:9e:20:06:9a:b2:e6:10:33:85:86:6f:
d4:f7:54:ca:9b:57:5a:e9:07:a5:ab:09:61:b4:cd:cf:d4:d5:
c0:e1:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:21 2026 by rpki-client