Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: PxvHmENaghq/OBVLJyvEJ5vg18deLtYXnAwVQ852B0g=
Subject key identifier: BD:FA:2A:EB:C2:8C:D7:18:A9:81:7E:45:D5:0F:DC:66:B2:EC:1E:C5
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019E1D909AFFC4E3B73F349B2186E25DA1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:01:16 +0000
Manifest this update: Tue 12 May 2026 19:01:16 +0000
Manifest next update: Wed 13 May 2026 19:01:16 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: PHDq51CwNRN3rlwAmzr2iDITysPhdldGYPK3A5ZCFLk=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:9a:ff:c4:e3:b7:3f:34:9b:21:86:e2:5d:a1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: May 12 19:01:16 2026 GMT
Not After : May 13 19:01:16 2026 GMT
Subject: CN=bdfa2aebc28cd718a9817e45d50fdc66b2ec1ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:ae:d4:e6:63:75:a3:c3:76:6d:7a:37:cf:
c7:b5:3b:34:60:3b:0d:77:49:00:79:fc:3a:5c:29:
49:a8:94:6e:f9:d6:4b:5b:17:6f:58:b3:e2:d4:81:
db:b2:80:27:bf:e7:13:99:bc:ee:ed:da:47:47:ba:
76:ab:48:65:62:38:b6:52:18:ca:53:a1:e4:80:7e:
8c:ae:e3:91:51:8c:05:a6:0d:cd:f5:e1:70:f7:eb:
ef:96:96:18:a2:e9:7c:3d:e1:3c:a0:05:73:0c:8c:
3a:32:e4:b1:11:b9:5c:77:81:62:14:16:13:d5:0c:
f8:8f:85:8c:5b:12:d5:77:76:7a:00:83:6d:c4:2e:
67:22:5a:bd:c1:19:42:9a:69:69:93:03:a0:29:3b:
ef:f8:bc:21:3e:4c:f4:64:95:17:20:3b:24:fa:a1:
e8:f9:c9:60:0b:2d:b7:02:3d:2a:93:d2:84:d3:85:
03:84:9e:d6:d2:12:17:71:2d:e2:6a:72:8e:45:26:
a6:44:87:f5:36:1e:56:91:dc:9a:7e:60:52:a7:8e:
aa:11:88:24:d0:25:3a:73:87:e5:4a:3f:d9:cc:3c:
08:35:30:48:56:9c:cd:0e:be:2a:81:db:e1:1f:97:
06:13:dd:f7:ea:d0:8c:98:8b:2f:5d:89:1a:fc:02:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:2A:EB:C2:8C:D7:18:A9:81:7E:45:D5:0F:DC:66:B2:EC:1E:C5
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ca:7b:13:17:0b:af:4e:7a:92:23:a8:08:94:4c:d1:f0:4a:
40:0c:cf:34:5a:08:fc:0f:5f:4f:23:66:40:3a:ab:3c:70:62:
b8:83:d6:78:20:82:11:4c:84:66:58:04:1c:34:e6:bc:9a:da:
24:47:ec:b7:68:94:ad:d6:6f:72:8c:5c:56:c5:0f:74:a5:47:
a8:b9:77:6a:50:12:91:c3:74:d7:dd:ea:b9:92:5e:b1:16:bb:
ee:97:7e:c1:2c:8b:06:1f:ac:18:44:ac:47:12:07:a8:fe:1d:
cf:a0:fb:b7:ab:38:01:67:51:72:d4:3a:60:5f:29:b1:9a:bf:
c5:98:4e:45:35:87:dc:1f:45:f3:ec:e9:16:bb:80:5d:f8:b8:
7e:2e:29:44:39:2a:47:27:e1:0e:04:7b:93:1e:7d:f2:08:60:
fe:7f:eb:30:61:7a:71:a0:3e:3a:fb:88:91:23:65:66:1b:9f:
94:3a:bf:2a:d9:94:f6:23:7c:67:02:43:23:ce:db:9c:22:c6:
fb:b3:98:07:22:95:24:f8:23:76:51:b0:f8:f5:d0:f4:91:bb:
c6:b0:58:71:ce:a7:2f:33:8d:6a:23:7b:e5:1e:bb:dd:7a:45:
bc:3b:79:b7:d6:22:38:3f:9f:ca:ac:61:31:3a:d4:9f:fd:43:
e3:ca:bb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:03 2026 by rpki-client