Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
File: bAODPTvs9flZ4Svaf6-KU-rAVvs.mft (raw, json)
Hash identifier: ZB28Usq9vk8KFzWtUBONm/vd8dNmDJuN1OigVt26VzE=
Subject key identifier: C7:C5:AB:77:24:27:EC:DE:51:81:3A:B0:65:B3:E9:68:FA:5A:BD:33
Authority key identifier: 6C:03:83:3D:3B:EC:F5:F9:59:E1:2B:DA:7F:AF:8A:53:EA:C0:56:FB
Certificate issuer: /CN=6c03833d3becf5f959e12bda7faf8a53eac056fb
Certificate serial: 01A0D9BB9EBCDE15830989BB58B1368D7094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:02:26 +0000
Manifest this update: Fri 25 Sep 2026 18:02:26 +0000
Manifest next update: Sat 26 Sep 2026 18:02:26 +0000
Files and hashes: 1: IiTxpSmgZctZlLIwc2RZQ31dFWQ.roa (hash: W89I3B0Mx54Y9ubbD/CySaPLm1IMg6yqDNxgPvSB1PM=)
2: bAODPTvs9flZ4Svaf6-KU-rAVvs.crl (hash: C9MeVgRsumnWI7z4Pvm9iK1UIDHP9O3xVybFB9qc8e4=)
3: x99Ir60bx3PUscFHCcVA27LJXKo.roa (hash: YsvrzWQu5eRFut37Wsiin+f2Fel/gQNo+HGHjxwge/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:9e:bc:de:15:83:09:89:bb:58:b1:36:8d:70:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03833d3becf5f959e12bda7faf8a53eac056fb
Validity
Not Before: Sep 25 18:02:26 2026 GMT
Not After : Sep 26 18:02:26 2026 GMT
Subject: CN=c7c5ab772427ecde51813ab065b3e968fa5abd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:d1:ae:e3:bb:10:51:30:dd:c4:3c:34:36:
b9:b8:73:2f:6e:a5:5f:7d:08:a1:22:1f:9b:0a:36:
9d:c0:5b:d5:5a:07:8e:77:0c:ff:ca:fa:48:e5:df:
56:4a:c0:91:ef:92:64:00:52:95:9d:da:6c:18:1d:
05:9b:c9:97:44:c9:df:c0:17:7f:5a:dc:fe:31:80:
41:b2:60:7e:4b:18:d0:15:64:b2:95:36:bb:57:25:
d6:5b:e7:ba:94:66:6b:67:8f:b9:b1:36:b1:51:ad:
cd:53:b5:d1:62:d6:13:dd:b3:60:7d:fb:a4:88:ae:
2a:a8:13:0d:f2:d5:a8:16:8a:f8:db:7e:90:6c:04:
ed:05:9e:a6:8b:e6:45:5f:a8:32:f8:81:aa:ac:1b:
74:b3:54:3f:d0:52:96:d3:65:c6:f7:c1:26:ec:f8:
7d:d1:8d:7f:64:d5:02:40:57:57:e4:0c:94:03:9a:
e0:18:58:af:33:ee:e9:77:29:54:dc:d8:5d:98:0f:
ff:89:d8:56:04:58:ba:5b:a2:e5:bb:12:a9:94:4f:
bf:d1:f5:5f:59:ed:9d:a8:6e:6d:65:8f:17:d8:73:
f9:65:7c:3a:3f:b2:07:cf:e9:ad:12:a5:3c:02:cb:
ff:a9:b3:1f:19:62:58:4d:4b:37:44:59:96:71:12:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C5:AB:77:24:27:EC:DE:51:81:3A:B0:65:B3:E9:68:FA:5A:BD:33
X509v3 Authority Key Identifier:
keyid:6C:03:83:3D:3B:EC:F5:F9:59:E1:2B:DA:7F:AF:8A:53:EA:C0:56:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:29:ae:75:72:32:4a:7d:49:12:7c:eb:b0:3d:7e:a2:a5:72:
f8:17:e3:8f:b9:cc:db:22:62:10:36:c7:de:2e:2e:6f:b6:09:
c2:10:2f:09:28:c0:1e:0d:48:41:4a:f5:92:cd:34:1f:ad:9d:
33:cc:99:38:14:31:a8:13:df:79:2d:de:e5:83:ef:16:d0:c0:
c9:ad:44:50:7c:a3:85:0a:c9:db:e6:8f:b8:05:76:a2:1c:60:
bf:b1:26:18:ec:0e:19:78:e1:3a:0a:7e:30:f7:ad:a3:99:09:
4e:ab:38:92:7a:bd:c8:97:27:67:03:bb:b0:b1:c3:0c:64:db:
a6:75:50:53:02:84:f8:d2:01:28:f1:39:e7:a5:9a:49:a8:2a:
c6:c3:60:7d:09:eb:66:98:2c:cc:ed:c9:6a:d0:e2:19:b5:57:
6b:29:c2:92:9e:04:7c:d4:d3:95:65:a4:f4:49:ca:2c:b8:25:
ef:88:6f:a9:67:0f:76:c9:45:db:3d:42:c5:3a:b9:c8:8b:e6:
d9:f0:fd:b5:53:f5:6a:63:da:6f:f0:69:bc:5c:2c:ef:07:27:
72:58:0d:59:c4:ff:af:10:3e:96:64:8e:e8:83:13:29:2f:86:
94:40:10:e3:5b:60:89:89:4e:b5:8a:bb:7d:5e:74:12:f4:b7:
d8:73:73:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZu5683hWDCYm7WLE2jXCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDM4MzNkM2JlY2Y1Zjk1OWUxMmJkYTdmYWY4YTUzZWFj
MDU2ZmIwHhcNMjYwOTI1MTgwMjI2WhcNMjYwOTI2MTgwMjI2WjAzMTEwLwYDVQQD
EyhjN2M1YWI3NzI0MjdlY2RlNTE4MTNhYjA2NWIzZTk2OGZhNWFiZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TDRruO7EFEw3cQ8NDa5uHMvbqVf
fQihIh+bCjadwFvVWgeOdwz/yvpI5d9WSsCR75JkAFKVndpsGB0Fm8mXRMnfwBd/
Wtz+MYBBsmB+SxjQFWSylTa7VyXWW+e6lGZrZ4+5sTaxUa3NU7XRYtYT3bNgffuk
iK4qqBMN8tWoFor4236QbATtBZ6mi+ZFX6gy+IGqrBt0s1Q/0FKW02XG98Em7Ph9
0Y1/ZNUCQFdX5AyUA5rgGFivM+7pdylU3NhdmA//idhWBFi6W6LluxKplE+/0fVf
We2dqG5tZY8X2HP5ZXw6P7IHz+mtEqU8Asv/qbMfGWJYTUs3RFmWcRI7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfFq3ckJ+zeUYE6sGWz6Wj6Wr0zMB8GA1UdIwQY
MBaAFGwDgz077PX5WeEr2n+vilPqwFb7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFPRFBUdnM5ZmxaNFN2YWY2LUtVLXJBVnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAt
MjZhMGI4ZGVmMGMzLzEvYkFPRFBUdnM5ZmxaNFN2YWY2LUtVLXJBVnZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAtMjZhMGI4ZGVmMGMz
LzEvYkFPRFBUdnM5ZmxaNFN2YWY2LUtVLXJBVnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnimudXIy
Sn1JEnzrsD1+oqVy+Bfjj7nM2yJiEDbH3i4ub7YJwhAvCSjAHg1IQUr1ks00H62d
M8yZOBQxqBPfeS3e5YPvFtDAya1EUHyjhQrJ2+aPuAV2ohxgv7EmGOwOGXjhOgp+
MPeto5kJTqs4knq9yJcnZwO7sLHDDGTbpnVQUwKE+NIBKPE556WaSagqxsNgfQnr
ZpgszO3JatDiGbVXaynCkp4EfNTTlWWk9EnKLLgl74hvqWcPdslF2z1CxTq5yIvm
2fD9tVP1amPab/BpvFws7wcnclgNWcT/rxA+lmSO6IMTKS+GlEAQ41tgiYlOtYq7
fV50EvS32HNzcg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:01 2026 by rpki-client