Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: /CkwsCO4ax1YS8OuvcXjGtWXRC1cnk7HjfuokfzICkY=
Subject key identifier: 86:CA:B1:78:4B:DC:01:D9:D9:BA:8C:59:FA:12:00:3F:D0:D6:86:AF
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 01A0CB227E56D17B478821CA65A6C37FB517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 22:00:30 +0000
Manifest this update: Tue 22 Sep 2026 22:00:30 +0000
Manifest next update: Wed 23 Sep 2026 22:00:30 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: q3k9onroJPXDsE+RQ+NZ3Vs6qpW39FfUF+pO5JZr4Hg=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:7e:56:d1:7b:47:88:21:ca:65:a6:c3:7f:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Sep 22 22:00:30 2026 GMT
Not After : Sep 23 22:00:30 2026 GMT
Subject: CN=86cab1784bdc01d9d9ba8c59fa12003fd0d686af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:c3:95:bf:63:01:af:d4:3e:7f:09:a6:1a:
5e:c0:4c:cf:0e:32:ee:ad:8f:f0:6c:b2:67:35:aa:
29:d1:aa:4c:aa:97:d1:de:99:6b:46:3f:75:01:2f:
93:f6:1e:6a:55:f7:5c:f6:e5:f0:e5:ed:63:55:2b:
62:2c:af:3e:c9:ef:f4:53:50:8d:77:0b:2b:4f:63:
c6:b4:7f:59:01:bf:c8:eb:55:f9:c0:b4:d7:29:fd:
b6:e0:50:9c:16:3b:60:36:55:74:cd:c1:81:a2:f1:
5b:86:c5:92:db:1d:9d:51:f8:e9:5f:da:df:1a:fe:
e2:ce:77:38:04:ee:d4:22:81:63:26:b2:be:bd:66:
54:bb:98:19:51:34:9b:91:e0:e1:3c:ca:88:ae:99:
2e:fd:09:48:7e:22:01:4d:1c:53:f4:86:46:8c:90:
18:1c:69:22:44:38:40:8c:01:ab:55:e3:6b:e9:df:
d5:bd:0e:43:79:ec:52:67:8b:bd:97:28:97:17:12:
c3:a9:b3:a5:7c:1a:3e:85:20:b0:34:bb:d5:a4:16:
61:6b:53:a0:81:1c:b1:73:71:de:90:71:74:fa:2a:
fa:20:5d:a5:84:fe:1d:f4:f5:ea:fa:5b:c8:a8:3e:
40:1b:88:81:7a:25:4a:5f:07:01:73:3a:fa:b9:b0:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:B1:78:4B:DC:01:D9:D9:BA:8C:59:FA:12:00:3F:D0:D6:86:AF
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9a:4b:d3:40:c3:f7:b4:79:f0:48:b6:c6:03:70:c5:cc:b8:
9e:8d:d7:3d:7e:e4:e9:cd:bd:e0:e0:3c:96:69:db:cc:ba:d9:
d4:09:dd:39:58:62:74:73:e5:10:ad:5d:1f:5f:dd:00:87:9b:
90:7f:3e:3f:36:b1:d6:e1:55:27:0c:9b:aa:8e:73:15:14:3f:
7d:79:7e:5f:92:b4:0a:c7:b5:19:59:3c:58:51:7e:75:e6:d3:
7c:a3:2f:b5:5d:82:17:25:32:bf:62:63:46:4b:e1:4c:23:bd:
d0:83:95:b5:e8:31:4b:d8:84:f1:f5:4c:37:b4:20:74:6d:95:
7f:da:66:22:ac:21:59:e7:e1:92:ea:6e:01:0d:2e:1e:3c:13:
f4:9e:36:4e:a0:af:da:3f:9d:4e:9a:25:47:e0:ea:45:c9:e2:
5c:84:01:98:e9:54:7b:f3:7e:66:92:0c:99:fa:62:2e:0b:53:
e5:94:e9:23:db:bc:d0:c2:8b:85:08:7a:0f:d4:fd:f2:96:90:
db:12:d3:1b:a3:aa:cf:95:03:1d:35:8c:1a:bc:06:7b:60:53:
90:f5:76:93:88:2d:1b:75:3a:9f:b6:cf:33:15:cd:bc:78:56:
60:e8:e0:bf:78:f2:b5:63:7c:fe:e1:a7:5b:65:58:78:3b:2c:
7e:cc:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:10:44 2026 by rpki-client