Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: TWSTtWANhkMNftXa4CNZvQ036aV4Dbjq0S8oUSzWT70=
Subject key identifier: 7C:FB:43:AF:2D:5E:A7:84:9B:24:1E:EA:A9:16:06:54:60:B5:E2:93
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019FA9756C51F80E7C0F28C2546EAB9BE7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 16:01:12 +0000
Manifest this update: Tue 28 Jul 2026 16:01:12 +0000
Manifest next update: Wed 29 Jul 2026 16:01:12 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: bsLpViic56wfwgpwwyIcRxsfn0WOmE9+YXo4xKvYMDk=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:6c:51:f8:0e:7c:0f:28:c2:54:6e:ab:9b:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Jul 28 16:01:12 2026 GMT
Not After : Jul 29 16:01:12 2026 GMT
Subject: CN=7cfb43af2d5ea7849b241eeaa916065460b5e293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f2:a1:a5:1c:d3:f3:c0:08:34:e5:49:f6:98:
33:97:ca:15:7f:97:75:6e:56:df:18:53:85:74:79:
90:74:d1:3f:06:db:23:72:c3:ce:33:61:0f:95:c7:
cd:4c:66:82:72:ae:7e:bc:fe:a0:34:d4:5b:ad:90:
0c:dd:0a:56:b7:4f:c7:73:40:b3:7f:8a:67:b1:48:
65:01:b8:68:a3:b4:94:1d:18:53:0e:18:7f:fd:ac:
7c:1f:c8:34:8e:7e:1d:42:1e:80:cd:6d:3b:a6:f5:
4c:08:fc:cf:0e:90:60:56:55:0e:94:be:21:5f:5f:
16:28:7b:c2:fb:b6:0c:be:ee:79:6b:ef:30:15:35:
74:96:30:3b:fe:86:43:da:51:3c:0c:f9:d0:15:3c:
8e:d4:bd:ee:9c:ac:39:72:a4:18:26:92:6c:dd:9f:
50:02:15:7a:e7:dd:1b:3f:36:ae:57:0d:68:97:1e:
1e:0c:4c:c8:3c:2d:e8:84:b0:c5:01:af:fb:d2:e4:
da:d3:cb:3f:74:14:e6:c8:26:ba:05:6e:64:aa:8a:
8d:6b:da:8a:db:8d:55:d6:9f:8b:ef:9b:fa:eb:65:
b2:9b:8d:6e:ae:51:42:37:54:83:67:6a:85:f4:fa:
07:3f:a3:33:d6:c6:81:9f:f2:1f:e1:a0:f8:4a:07:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:43:AF:2D:5E:A7:84:9B:24:1E:EA:A9:16:06:54:60:B5:E2:93
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:37:63:e7:41:35:cc:78:e8:6e:6a:7c:b7:83:e6:8b:03:97:
d7:94:4c:cb:1d:2d:cf:47:df:b4:98:8b:63:f7:7b:f6:56:c5:
01:fb:b0:6f:37:76:5e:68:c6:10:7f:f6:7c:7c:29:d8:d1:79:
be:91:58:66:68:db:e2:ac:ca:ae:d5:6a:75:ef:0b:9a:db:7d:
3f:4a:f7:c7:6a:07:92:5f:54:57:da:98:3d:9c:0d:ca:45:c1:
74:5b:e4:88:cd:8e:8f:f9:c9:99:3f:28:4e:97:2e:8e:54:79:
b2:0f:fe:db:50:d2:b6:de:53:5d:61:74:0e:a5:45:90:fb:8b:
96:6e:54:30:19:fc:c2:b2:36:20:77:ab:6d:c7:06:f5:40:67:
47:bf:92:69:c0:bb:f6:63:12:74:05:64:72:fb:19:f5:4e:2f:
ae:e0:19:03:23:d0:be:4a:89:18:a8:40:43:59:30:23:92:8a:
72:de:3d:1b:75:c7:01:f3:80:5d:50:12:86:a2:2d:2a:4f:1d:
e6:f9:97:44:8c:72:04:4a:02:57:66:b9:ad:95:2a:a2:cb:b7:
c5:76:85:84:8f:28:65:a7:63:f7:ce:bb:e2:9f:b1:87:51:0e:
88:79:e7:77:51:d2:26:07:1c:f5:27:93:8c:c2:91:f6:d3:89:
94:53:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:30 2026 by rpki-client