Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
File: Bag948ZgIx8iMPHCcA4gUFobz1c.mft (raw, json)
Hash identifier: k4dfexDV2UBKPFdz7dMSrz9DRZfMdVmpPrqbYlRdlKk=
Subject key identifier: C4:0D:BE:8C:26:D5:08:D0:96:FB:94:FC:11:69:8C:7B:AA:F7:82:7F
Authority key identifier: 05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
Certificate issuer: /CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Certificate serial: 01A0D7CCBC44ECC5730C5599397948A390AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:53 +0000
Manifest this update: Fri 25 Sep 2026 09:01:53 +0000
Manifest next update: Sat 26 Sep 2026 09:01:53 +0000
Files and hashes: 1: Bag948ZgIx8iMPHCcA4gUFobz1c.crl (hash: ivjT6UDvvu5xat6w/rmSrEAArFOwtOCa5mwAAaRCuEA=)
2: HrgtmuW0yN0hsWEMTA8IRe5Ow-I.roa (hash: nkWf0uUkwJsAxVtSv5Gas9B1Em/eu7evo6LbD0YqyuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:bc:44:ec:c5:73:0c:55:99:39:79:48:a3:90:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Validity
Not Before: Sep 25 09:01:53 2026 GMT
Not After : Sep 26 09:01:53 2026 GMT
Subject: CN=c40dbe8c26d508d096fb94fc11698c7baaf7827f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:ed:2c:ed:62:53:95:34:c1:e6:d8:79:45:
5a:d5:b0:7f:ee:0b:6a:a0:2b:94:fe:9a:71:4a:62:
45:2b:5b:da:98:4c:10:f9:55:68:8d:cd:7c:24:0f:
c3:89:f7:23:50:3c:0f:e0:88:60:9a:36:cf:04:5c:
e8:d4:13:9b:8c:f0:a9:24:0b:9b:1e:29:62:49:fc:
80:fb:b4:a8:10:19:83:71:3d:ab:22:7d:ac:e4:da:
c0:1b:e2:0c:99:3f:b6:17:12:61:21:8f:30:eb:cb:
80:3e:ea:99:80:36:ba:5b:d3:90:a1:86:e0:dc:1d:
d9:bd:0d:01:16:fb:3b:f6:ac:28:04:ae:1e:01:c0:
30:ad:19:b1:f5:b1:29:b0:b7:bb:59:5a:6f:cc:54:
d7:d3:92:9c:4b:f5:67:74:ed:e1:40:81:da:37:5d:
a4:11:f9:b2:fd:25:f6:08:29:c4:3c:68:6e:cc:22:
e0:76:0f:fb:2c:3e:4f:2d:ee:7e:74:5c:b0:6f:d7:
c4:59:df:7a:36:04:05:e6:a8:a1:2b:20:c2:ff:1c:
72:a5:af:b9:59:86:af:8e:47:64:c8:1a:ff:5f:d3:
46:f7:3b:1c:bc:62:38:81:c7:2f:ff:e9:0a:1a:30:
18:06:f0:db:22:98:69:99:50:f9:9c:b9:f2:dd:17:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0D:BE:8C:26:D5:08:D0:96:FB:94:FC:11:69:8C:7B:AA:F7:82:7F
X509v3 Authority Key Identifier:
keyid:05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:35:0e:1f:6e:11:2f:a2:c8:4c:7b:39:35:48:bf:f6:55:5a:
bf:46:08:f5:be:6c:75:c5:e9:e2:47:70:8a:20:4f:22:9f:7f:
95:7f:f6:4f:86:3c:93:52:58:85:5e:1e:4b:a7:b3:59:cd:1f:
2b:67:07:c9:a7:8d:91:97:6e:41:70:62:34:c7:fd:0c:45:88:
8d:d8:93:58:4a:b8:2c:ad:19:b7:06:ad:5b:fc:a4:6f:ec:27:
6d:ab:08:ec:f7:6e:7c:5e:c2:3f:ba:c1:28:85:e8:e8:5c:04:
ce:b9:29:e6:48:3f:b4:29:af:7a:7a:bc:28:12:9d:71:81:00:
8d:64:bc:a2:78:7b:63:75:27:13:6e:0c:03:2b:c0:98:84:0b:
8a:79:8d:20:c2:f7:53:56:38:7a:b4:21:79:8b:ed:c9:65:15:
2b:0e:6b:8e:0f:54:8c:8c:ca:ad:f3:b6:8f:87:5b:95:45:14:
18:77:96:e7:98:76:6d:08:1d:de:e3:77:9c:1b:69:36:f1:3d:
d7:31:18:f1:e6:5f:52:3a:ce:9a:b2:ea:99:66:50:37:24:55:
4b:81:94:6c:cd:12:6a:af:ea:ec:b3:e6:2f:89:24:5c:80:86:
29:9c:ea:49:df:04:f9:c0:1f:dd:0f:3b:0f:63:ac:ad:3c:25:
7f:06:a6:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzLxE7MVzDFWZOXlIo5CtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTgzZGUzYzY2MDIzMWYyMjMwZjFjMjcwMGUyMDUwNWEx
YmNmNTcwHhcNMjYwOTI1MDkwMTUzWhcNMjYwOTI2MDkwMTUzWjAzMTEwLwYDVQQD
EyhjNDBkYmU4YzI2ZDUwOGQwOTZmYjk0ZmMxMTY5OGM3YmFhZjc4MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppftLO1iU5U0webYeUVa1bB/7gtq
oCuU/ppxSmJFK1vamEwQ+VVojc18JA/DifcjUDwP4IhgmjbPBFzo1BObjPCpJAub
HiliSfyA+7SoEBmDcT2rIn2s5NrAG+IMmT+2FxJhIY8w68uAPuqZgDa6W9OQoYbg
3B3ZvQ0BFvs79qwoBK4eAcAwrRmx9bEpsLe7WVpvzFTX05KcS/VndO3hQIHaN12k
Efmy/SX2CCnEPGhuzCLgdg/7LD5PLe5+dFywb9fEWd96NgQF5qihKyDC/xxypa+5
WYavjkdkyBr/X9NG9zscvGI4gccv/+kKGjAYBvDbIphpmVD5nLny3RduQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQNvowm1QjQlvuU/BFpjHuq94J/MB8GA1UdIwQY
MBaAFAWoPePGYCMfIjDxwnAOIFBaG89XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFnOTQ4WmdJeDhpTVBIQ2NBNGdVRm9iejFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt
OWNlYWExYjdhMTE2LzEvQmFnOTQ4WmdJeDhpTVBIQ2NBNGdVRm9iejFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2
LzEvQmFnOTQ4WmdJeDhpTVBIQ2NBNGdVRm9iejFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTUOH24R
L6LITHs5NUi/9lVav0YI9b5sdcXp4kdwiiBPIp9/lX/2T4Y8k1JYhV4eS6ezWc0f
K2cHyaeNkZduQXBiNMf9DEWIjdiTWEq4LK0ZtwatW/ykb+wnbasI7PdufF7CP7rB
KIXo6FwEzrkp5kg/tCmvenq8KBKdcYEAjWS8onh7Y3UnE24MAyvAmIQLinmNIML3
U1Y4erQheYvtyWUVKw5rjg9UjIzKrfO2j4dblUUUGHeW55h2bQgd3uN3nBtpNvE9
1zEY8eZfUjrOmrLqmWZQNyRVS4GUbM0Saq/q7LPmL4kkXICGKZzqSd8E+cAf3Q87
D2OsrTwlfwam2g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:19:11 2026 by rpki-client