Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
File: bAODPTvs9flZ4Svaf6-KU-rAVvs.mft (raw, json)
Hash identifier: 0Rj4duw65l7/7SMswKIAd6hHip5f8CH/LvV1jxqs0A4=
Subject key identifier: 7C:48:7D:E6:02:4B:59:1B:CF:33:53:27:92:95:DD:27:72:4C:F3:8A
Authority key identifier: 6C:03:83:3D:3B:EC:F5:F9:59:E1:2B:DA:7F:AF:8A:53:EA:C0:56:FB
Certificate issuer: /CN=6c03833d3becf5f959e12bda7faf8a53eac056fb
Certificate serial: 019F935AB23ACC311C23979E6F1CC85C7ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:22 +0000
Manifest this update: Fri 24 Jul 2026 09:00:22 +0000
Manifest next update: Sat 25 Jul 2026 09:00:22 +0000
Files and hashes: 1: IiTxpSmgZctZlLIwc2RZQ31dFWQ.roa (hash: W89I3B0Mx54Y9ubbD/CySaPLm1IMg6yqDNxgPvSB1PM=)
2: bAODPTvs9flZ4Svaf6-KU-rAVvs.crl (hash: UWaw9H7KNDRKIe2acwFuHCAVvO6PcHWkWW348UpvVeY=)
3: x99Ir60bx3PUscFHCcVA27LJXKo.roa (hash: YsvrzWQu5eRFut37Wsiin+f2Fel/gQNo+HGHjxwge/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:b2:3a:cc:31:1c:23:97:9e:6f:1c:c8:5c:7e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03833d3becf5f959e12bda7faf8a53eac056fb
Validity
Not Before: Jul 24 09:00:22 2026 GMT
Not After : Jul 25 09:00:22 2026 GMT
Subject: CN=7c487de6024b591bcf3353279295dd27724cf38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:33:d5:8e:25:61:63:8f:e7:50:df:f4:b0:
f3:20:31:53:0e:d6:f9:28:45:5a:82:4f:6c:33:81:
9f:40:d1:48:23:54:77:da:8f:51:28:25:eb:d4:19:
fe:ff:a0:ca:cc:36:61:c6:51:9f:7b:e2:2d:b5:a1:
82:c4:c6:6d:01:13:2b:a4:fc:e1:3c:e2:5e:d6:38:
84:02:4b:92:d8:c7:a3:b6:86:b9:f2:77:e0:22:26:
6a:ba:e3:c0:a2:b3:50:f5:bc:ea:a1:1a:0d:02:c2:
66:9a:66:97:5a:45:f0:45:04:57:ad:6a:c6:bf:7a:
b4:7e:50:20:17:45:f7:76:79:db:aa:40:f8:4b:eb:
29:a7:1b:2b:32:7e:0e:d0:aa:e3:c4:39:36:2d:20:
39:cc:52:a6:87:21:0b:fb:ae:e9:07:d7:6b:5e:aa:
b2:95:e0:bb:f0:c5:41:6a:c9:16:89:e5:f2:12:e0:
7d:23:60:6f:92:f6:00:97:a3:4b:34:e0:da:ea:37:
a5:ef:61:2e:43:56:4b:4a:02:74:f6:13:a1:13:ba:
73:a8:2e:6a:e3:6b:58:7a:d9:b7:d8:9f:bf:2b:13:
41:65:67:4c:dd:da:e6:e1:82:8c:25:a2:b5:8c:54:
10:55:d6:d3:99:52:7a:d8:2e:17:33:21:c3:d1:42:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:48:7D:E6:02:4B:59:1B:CF:33:53:27:92:95:DD:27:72:4C:F3:8A
X509v3 Authority Key Identifier:
keyid:6C:03:83:3D:3B:EC:F5:F9:59:E1:2B:DA:7F:AF:8A:53:EA:C0:56:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e9:f6:97:f2:68:ad:bc:bd:20:59:3f:6a:94:16:38:e1:ab:
29:aa:8a:e0:89:01:6c:60:ce:c0:f0:c6:fc:a7:f7:6b:5a:6d:
38:34:aa:30:fd:63:0e:62:36:76:e2:66:33:ae:00:e5:7c:61:
54:f6:59:13:33:4e:bd:4e:d1:cd:3b:37:f1:bb:db:9f:a5:b0:
e8:01:53:bf:e6:9e:4b:34:b6:a0:84:86:3b:87:82:63:f1:1c:
04:65:e2:17:7e:5a:9a:87:ac:f2:8c:d3:eb:87:98:e9:e7:56:
f2:de:b5:17:0d:f8:9a:d8:69:1b:5f:c9:f0:98:db:ed:ff:27:
42:3c:57:de:0b:ac:4c:b5:07:a5:c5:91:10:e1:b1:ce:01:fb:
32:31:44:22:7a:c9:45:c1:6a:7f:d7:36:cc:ce:c1:be:10:6b:
1b:c2:cc:ce:fa:52:ac:8a:90:73:5b:c9:3b:6e:10:61:d9:d8:
19:d4:09:2e:fc:33:59:90:2d:67:45:2a:86:e7:d4:21:5a:5f:
6c:0f:86:7e:b8:f0:ff:40:32:50:93:92:d4:b0:00:c2:99:c2:
06:63:60:de:ec:ab:a4:c7:26:21:4e:79:a6:f1:23:0e:75:55:
3d:77:61:15:cc:00:79:1a:f3:2d:52:ef:6d:69:6e:80:63:80:
4c:d9:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:21:16 2026 by rpki-client