Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier: qumSfyIBN4BjhsIKujY5R8OSMLj/qDOOQ3y5Zd2nEXA=
Subject key identifier: FE:C5:7C:30:CA:7F:3C:CE:8C:9E:F8:D0:70:AD:7D:8B:25:F2:AA:67
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 019D26CD2D74911E2F2279447CF053AC7E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number: 0CC9
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: 5T7ElemNC6g4KLG0_8xrYW5fehU.roa (hash: 1yULm6jsqwJXi2ojiG48hP/e+HZZVs+RhK8qR3uDV70=)
2: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: XZvwgmaG2ZcUBF7wGMXppGVj/RRHJ2IkzboBhbbyyAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2d:74:91:1e:2f:22:79:44:7c:f0:53:ac:7e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=fec57c30ca7f3cce8c9ef8d070ad7d8b25f2aa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:1d:7a:fe:6d:94:72:00:e9:b6:55:24:e3:
4e:23:e2:23:c0:d3:53:8d:42:7a:a1:6a:92:40:3d:
c7:77:70:06:76:f5:da:23:9a:6f:af:d7:9f:b2:7f:
74:0c:c6:1d:36:60:14:6f:d7:88:ae:fc:34:83:20:
00:e7:c5:de:a2:43:7f:8e:67:a3:43:18:1b:62:16:
5a:e6:9e:74:a7:65:1f:b2:b3:f2:23:19:96:ff:ad:
94:c0:e5:30:f6:b0:e5:83:ad:f7:4b:92:0c:87:84:
0f:39:e5:e6:75:78:83:72:8e:1d:a0:f7:6e:36:9b:
e0:55:05:aa:1f:ed:2b:09:71:30:fc:fa:dd:c7:d1:
e2:31:e8:a5:bd:3f:90:c9:e2:9d:3b:3d:3a:4b:eb:
b9:9e:a4:20:a3:af:93:16:0f:91:14:8c:c7:22:24:
88:62:02:a7:a0:6c:50:d8:f7:e2:a1:ae:5a:c4:5c:
0c:4a:af:d6:34:4e:62:03:9e:57:ca:9f:1c:61:4f:
22:81:4e:d5:04:41:db:80:c0:c2:42:29:11:90:be:
42:fc:92:bf:37:2a:90:11:81:71:6f:56:e1:f6:92:
7b:d1:64:9d:5e:1c:23:90:98:ce:c3:bd:ce:e5:33:
33:c7:70:66:54:82:1d:be:a3:51:16:6d:ba:07:f0:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C5:7C:30:CA:7F:3C:CE:8C:9E:F8:D0:70:AD:7D:8B:25:F2:AA:67
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2d:da:02:b4:75:da:d0:0c:1a:c6:05:bd:df:ab:f9:07:d8:
73:db:73:be:67:d5:20:52:64:d3:7b:f5:ec:f0:82:89:f8:b1:
88:46:ba:16:2f:24:22:07:f4:38:07:00:17:73:b0:fb:3a:8e:
25:aa:db:fd:2e:c2:3a:b7:f5:a5:9c:e0:42:bd:59:f4:9a:db:
00:27:58:60:a3:f0:9b:f8:d0:0d:92:bd:0d:4b:50:db:07:29:
82:6e:d2:33:33:1d:de:3c:8f:60:1a:f7:3f:a2:f6:72:95:3d:
b4:66:19:3d:51:93:7a:0b:23:2f:4a:36:8c:50:67:a5:1c:c7:
7f:62:e5:8c:99:c8:35:08:7a:35:12:7f:f2:f9:f5:b6:27:38:
0b:98:ae:4e:c0:a2:31:cc:48:1a:4f:b6:be:2e:74:61:ce:88:
fe:06:7b:af:26:5f:02:fa:66:75:d1:2b:74:95:c7:ab:b4:ca:
9f:7e:74:bc:35:02:05:1a:92:84:40:8c:48:78:b1:cd:18:de:
4f:d4:b7:6b:3e:37:7e:35:00:a6:ae:e6:d4:2e:e3:95:ae:c9:
8b:86:9c:ca:94:f7:b5:f5:a5:8c:7a:c9:d9:9d:48:dc:51:a1:
f2:a2:08:46:84:f0:65:f6:d2:01:a6:66:72:4d:81:21:6a:38:
ad:b6:a4:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzS10kR4vInlEfPBTrH5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk5MWFjZDdiMjI3M2Q5ZTE4NjVhZmEyNzU1ZTZmNWU2
NzJlNTUwHhcNMjYwMzI1MjEwMTEzWhcNMjYwMzI2MjEwMTEzWjAzMTEwLwYDVQQD
EyhmZWM1N2MzMGNhN2YzY2NlOGM5ZWY4ZDA3MGFkN2Q4YjI1ZjJhYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhIdev5tlHIA6bZVJONOI+IjwNNT
jUJ6oWqSQD3Hd3AGdvXaI5pvr9efsn90DMYdNmAUb9eIrvw0gyAA58XeokN/jmej
QxgbYhZa5p50p2UfsrPyIxmW/62UwOUw9rDlg633S5IMh4QPOeXmdXiDco4doPdu
NpvgVQWqH+0rCXEw/Prdx9HiMeilvT+QyeKdOz06S+u5nqQgo6+TFg+RFIzHIiSI
YgKnoGxQ2Pfioa5axFwMSq/WNE5iA55Xyp8cYU8igU7VBEHbgMDCQikRkL5C/JK/
NyqQEYFxb1bh9pJ70WSdXhwjkJjOw73O5TMzx3BmVIIdvqNRFm26B/Cq/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7FfDDKfzzOjJ740HCtfYsl8qpnMB8GA1UdIwQY
MBaAFAWpkazXsic9nhhlr6J1Xm9eZy5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMt
ZDdjNmZmOTMzYzIzLzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMtZDdjNmZmOTMzYzIz
LzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAC3aArR1
2tAMGsYFvd+r+QfYc9tzvmfVIFJk03v17PCCifixiEa6Fi8kIgf0OAcAF3Ow+zqO
Jarb/S7COrf1pZzgQr1Z9JrbACdYYKPwm/jQDZK9DUtQ2wcpgm7SMzMd3jyPYBr3
P6L2cpU9tGYZPVGTegsjL0o2jFBnpRzHf2LljJnINQh6NRJ/8vn1tic4C5iuTsCi
McxIGk+2vi50Yc6I/gZ7ryZfAvpmddErdJXHq7TKn350vDUCBRqShECMSHixzRje
T9S3az43fjUApq7m1C7jla7Ji4acypT3tfWljHrJ2Z1I3FGh8qIIRoTwZfbSAaZm
ck2BIWo4rbakLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:33 2026 by rpki-client