Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: 2n670vn436evhBNXIujZwIro8C6jV2AFzZSnWJeFvHE=
Subject key identifier: 97:59:67:21:12:1A:8F:13:B2:2A:81:6C:09:5C:DF:56:E8:9D:63:0C
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019EBFC8440BBA0ADC23A89D08A9EB563F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 07:00:33 +0000
Manifest this update: Sat 13 Jun 2026 07:00:33 +0000
Manifest next update: Sun 14 Jun 2026 07:00:33 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: 1+e7tuPkWOZcMEHE/41Ar+e7g7sjpkmKha01fuPvaJ0=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:44:0b:ba:0a:dc:23:a8:9d:08:a9:eb:56:3f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Jun 13 07:00:33 2026 GMT
Not After : Jun 14 07:00:33 2026 GMT
Subject: CN=97596721121a8f13b22a816c095cdf56e89d630c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a1:89:4b:75:7b:d1:1c:17:be:00:af:8d:31:
3f:ae:5f:65:44:26:29:13:fa:ac:65:df:bc:29:4a:
16:d1:95:d5:9f:0b:c6:69:ed:cd:45:be:44:9a:5a:
b4:d5:79:fb:b0:bb:87:18:a4:3b:37:69:e2:5f:bd:
b4:9d:da:76:e2:fc:e8:f2:86:e9:a5:33:cc:f6:6d:
8b:4c:d7:ad:c0:4f:0e:67:c3:f1:22:ae:9d:29:d1:
17:72:e2:f2:58:fb:f7:0e:6f:46:d1:8c:bb:6b:f5:
32:77:8d:52:38:8e:7d:9b:4d:32:70:2a:aa:83:9c:
99:99:68:c0:fe:7f:65:31:30:aa:7c:78:cf:f4:52:
ef:53:90:fd:ad:8c:96:13:8e:5f:25:5b:5b:b2:0e:
91:f1:2d:e8:ca:93:6c:b8:35:55:ae:a7:dd:ca:d6:
76:94:41:a0:8f:e4:97:86:98:9c:9a:20:55:4e:c6:
be:2c:fd:ac:50:bc:4b:f4:6e:a5:72:a6:c6:29:6a:
38:9f:e8:91:d9:c7:d1:6f:35:ac:2d:89:4b:81:18:
11:9a:d9:59:c2:bd:3c:ad:92:d7:90:9d:76:1f:6d:
07:0e:05:02:52:31:9b:84:b5:f4:7b:e3:41:30:f6:
4a:0f:c4:89:e6:1d:bf:29:07:f7:5c:45:66:9b:fd:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:67:21:12:1A:8F:13:B2:2A:81:6C:09:5C:DF:56:E8:9D:63:0C
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:02:62:90:54:fc:09:2b:5f:26:15:83:8b:b3:b3:aa:85:d0:
37:b2:51:2e:d4:f9:ae:87:8a:02:fb:82:20:7f:2d:a9:7f:14:
f0:dd:16:72:e6:48:be:64:16:5a:80:ea:8f:ee:ed:7b:21:21:
89:89:a7:ff:61:17:50:43:cc:a7:92:05:83:a9:db:48:7b:d7:
cf:bd:5e:d6:1f:ef:c1:16:54:c8:7b:3e:bb:21:e7:81:6b:30:
6d:0a:ef:78:b5:43:3f:8c:61:33:5d:60:e2:00:75:76:ad:df:
e6:49:07:37:58:52:ba:b9:ce:40:39:c5:46:af:be:78:a7:d5:
a8:be:1b:7c:84:b1:16:63:c7:50:01:63:39:12:73:ce:66:df:
cc:a3:6f:70:64:70:1a:c4:3d:64:07:ef:c5:3b:8d:31:e1:81:
53:c5:c2:c6:74:46:af:18:21:f7:5e:dd:d6:0f:71:81:ad:5a:
4b:4c:c6:91:1b:b3:fa:b7:32:98:e2:c3:21:c5:e8:ea:df:14:
69:a8:e0:13:1c:67:b3:c1:1a:e2:ff:1f:bd:2e:3b:0d:24:31:
29:4e:4c:8a:bd:89:78:66:23:cd:e7:68:03:13:b1:8b:a4:92:
50:9c:71:46:dc:9b:1c:4c:85:90:fc:a1:08:b6:93:bf:ea:a5:
80:cb:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:58:36 2026 by rpki-client