Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: VmU5JKXHl7XiX2emOLCCqRdXHn0bgcGafTafKqlb74w=
Subject key identifier: 2A:30:BC:55:5D:61:86:91:3E:8A:0C:30:13:65:A2:47:02:BB:1D:66
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019F905A9D577E4F0772D733D3DCEFF2F299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 19:01:25 +0000
Manifest this update: Thu 23 Jul 2026 19:01:25 +0000
Manifest next update: Fri 24 Jul 2026 19:01:25 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: wZe91esaHwm1ux5n4IgmSwLb8W1UXQiqkoaVzrnds7s=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:9d:57:7e:4f:07:72:d7:33:d3:dc:ef:f2:f2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Jul 23 19:01:25 2026 GMT
Not After : Jul 24 19:01:25 2026 GMT
Subject: CN=2a30bc555d6186913e8a0c301365a24702bb1d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:6a:9f:0b:c6:3a:8b:cc:ca:b6:17:f0:89:
af:93:72:70:3e:28:f1:fe:50:84:84:cc:08:0a:c7:
e9:68:5f:dc:64:0e:fd:de:34:13:b1:e6:f8:44:8a:
82:6b:35:05:25:e2:65:1b:58:0e:5f:1f:98:14:b8:
bc:4c:5e:4d:46:5d:4e:30:02:1f:db:fe:cd:66:a1:
6f:a4:5d:c6:8f:7b:82:82:b3:5a:81:50:fd:59:f6:
b1:19:3d:d3:60:d3:1d:b1:b3:3d:a2:c2:b3:44:9d:
b6:3f:92:01:e2:fc:d5:88:10:48:17:1c:a9:68:67:
60:f9:7f:84:56:98:db:11:f5:cb:48:59:7c:7a:d1:
56:b8:e2:82:b2:e3:8e:f3:ca:dc:5b:da:8a:92:20:
3d:ba:30:87:7f:89:0b:3e:b8:ff:40:77:a6:9e:c6:
05:54:1e:ff:0b:f7:b9:f1:de:2e:d9:4d:64:91:25:
c1:36:bc:11:92:c5:d0:91:0d:fd:f6:d2:5e:22:34:
77:15:22:41:01:6f:8f:b7:2c:fc:4f:7f:77:c8:93:
bd:6c:62:e2:3d:35:e5:fc:31:88:35:61:f9:47:32:
29:d7:96:87:a4:03:4f:72:9f:18:f4:21:60:e4:65:
92:93:b8:ee:2f:82:20:2a:6b:4a:0b:c1:46:a8:d1:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:30:BC:55:5D:61:86:91:3E:8A:0C:30:13:65:A2:47:02:BB:1D:66
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e4:f4:53:8e:45:c3:ba:71:7e:df:3e:7a:36:b7:57:5e:2d:
0d:17:37:40:db:d0:66:81:df:ec:89:b8:69:1d:1f:b2:aa:c9:
3d:ff:6f:9f:6d:21:a0:3c:88:30:8f:4d:62:ac:81:15:6c:0f:
4e:19:73:08:7e:c2:43:5f:a9:ff:ef:5f:ee:de:ed:e0:83:2b:
ac:cc:8c:50:4e:14:7f:70:87:2f:c1:39:54:9d:94:13:76:c9:
23:0e:02:ee:fb:48:b0:2a:01:ea:1e:8c:80:21:50:72:71:3f:
3c:c5:56:0f:b7:28:ec:c8:0d:3f:db:e9:08:6c:c2:c9:ce:18:
c4:67:46:76:9b:30:98:c6:0a:70:8a:be:8c:93:40:98:c0:c3:
c6:9a:28:48:13:ee:11:1c:4f:56:ad:f8:45:b7:13:66:66:97:
e7:b2:34:20:99:23:55:1a:86:9e:da:55:50:3d:5a:f6:74:75:
e2:57:ab:48:d6:25:c0:56:69:e8:a9:7a:d9:1d:9a:1e:d8:ce:
9e:ea:ac:d3:6b:2b:3c:22:f9:e2:f7:54:01:39:a4:8e:ce:42:
69:03:58:c8:a6:7f:be:35:f1:ec:f8:29:7a:da:7c:20:8b:4a:
ad:cb:06:92:f3:62:50:cb:be:5f:0a:76:35:b7:2d:1d:84:e9:
9c:17:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:35 2026 by rpki-client