Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: 7M0B4+V/Ox3b9xUR72KqHhG8ubVLddc+J4TRYDPzEBY=
Subject key identifier: B2:37:7C:44:96:E5:C9:F8:78:A5:43:B0:4B:5B:A6:A0:64:EE:1C:CA
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019D265F2B62F179FF2BA7FFDD50ECAB60B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:04 +0000
Manifest this update: Wed 25 Mar 2026 19:01:04 +0000
Manifest next update: Thu 26 Mar 2026 19:01:04 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: Pmlb9xu+9pEpcierBQU/juUQ27hNHwmoByVKnjhMxd8=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2b:62:f1:79:ff:2b:a7:ff:dd:50:ec:ab:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Mar 25 19:01:04 2026 GMT
Not After : Mar 26 19:01:04 2026 GMT
Subject: CN=b2377c4496e5c9f878a543b04b5ba6a064ee1cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:f2:70:ac:09:91:f5:95:4c:09:5e:f3:3d:
75:9f:0a:a4:d9:f3:52:e8:d1:6c:de:72:e9:53:42:
96:53:f8:dc:53:0f:c5:ad:0a:ab:eb:9f:38:c1:d6:
95:0d:56:48:84:00:25:e7:49:b3:52:6c:a3:67:01:
46:01:70:0c:02:a7:fb:01:f9:62:82:0c:bd:dd:09:
88:07:c2:d5:c2:7a:02:20:d8:c0:67:b1:8b:18:46:
e6:68:6c:0e:de:5e:fc:3d:82:fe:03:60:70:d7:68:
e4:3d:d4:4d:24:b6:9e:1b:0b:d9:52:a7:0f:c8:5c:
85:e5:37:e9:90:f4:8e:3b:83:c7:39:e3:1b:a0:b0:
98:99:05:fa:4e:17:28:fb:ef:39:a9:a3:51:b8:9c:
b8:8f:47:83:4f:38:c2:bb:d4:b2:48:e5:30:5f:78:
2f:cd:60:6e:b1:2a:fc:e1:0b:88:ac:ea:da:c8:28:
8f:f6:f5:14:de:43:93:f4:30:2c:78:91:c0:bf:40:
27:0a:8c:5c:e5:2f:b8:25:bd:72:cf:03:78:21:54:
76:d3:ef:6c:77:d5:a7:cc:82:71:77:d9:74:2b:ad:
74:47:f3:ea:4a:25:42:8d:d8:d0:91:2a:0f:e0:c9:
02:00:6b:70:40:24:29:c1:20:f3:78:3a:db:0f:44:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:37:7C:44:96:E5:C9:F8:78:A5:43:B0:4B:5B:A6:A0:64:EE:1C:CA
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:03:9b:92:cb:e6:e6:7c:45:d6:ec:09:70:fa:9c:ea:22:
b4:02:a4:96:84:89:94:f6:7d:a6:27:1a:eb:a8:e1:0b:95:71:
a2:71:89:63:9a:46:e2:9e:39:e8:e2:76:b9:e1:f1:29:82:3f:
9d:28:62:f9:00:6b:88:f7:39:77:27:0c:b3:90:ee:f4:ea:97:
a4:13:79:11:8a:6a:31:e3:1f:0b:98:a2:59:05:22:e0:9d:de:
30:33:ef:29:de:d7:79:82:03:22:1a:dc:0a:f8:84:8e:05:23:
81:e4:00:39:7e:f7:7a:36:84:2d:3b:ab:38:f1:b6:a5:a7:44:
8c:74:b0:2e:d7:aa:9b:c2:dc:c4:0b:0b:1b:e7:43:46:bd:d5:
7f:3d:8a:1f:5f:62:12:59:d7:c9:70:51:69:42:20:41:d8:7d:
a1:3a:c3:91:d3:23:31:5c:46:15:c7:5d:66:de:b1:e3:91:f9:
76:d4:5c:44:84:ae:43:fd:ea:79:21:21:87:8f:82:20:21:17:
46:5c:a0:09:bd:9e:5b:36:fc:19:95:80:1e:00:05:d9:e2:ad:
84:73:39:b2:72:72:39:d6:ce:6f:51:c3:ec:d5:0c:fe:33:2d:
83:d0:d5:0c:c2:95:ac:aa:ae:96:7e:09:33:c8:fe:58:86:b5:
6e:3f:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:41 2026 by rpki-client