Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: yw449xWtL+X1HPIN0+I9Cql9QgIOM+MZPpgHz6zUM7o=
Subject key identifier: EB:30:C7:B1:08:24:4C:1F:47:F0:D7:33:00:FB:F7:79:74:37:01:D2
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019DA3E5E3B4D1D2776E31975964807B5599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 04:00:45 +0000
Manifest this update: Sun 19 Apr 2026 04:00:45 +0000
Manifest next update: Mon 20 Apr 2026 04:00:45 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: nmK2Qt2DXWzY25YtKVpVtxyG7qDdJHketh7LkWHh6K0=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:e3:b4:d1:d2:77:6e:31:97:59:64:80:7b:55:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Apr 19 04:00:45 2026 GMT
Not After : Apr 20 04:00:45 2026 GMT
Subject: CN=eb30c7b108244c1f47f0d73300fbf779743701d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:5d:00:7b:01:f5:99:b1:27:e2:0b:e9:a3:
f6:d4:97:10:ed:22:ab:a3:20:d0:5f:6e:c7:24:3b:
34:c3:66:06:b9:66:8c:37:45:f4:5c:d3:39:ff:e1:
ea:68:4a:ce:68:ea:ad:ca:50:04:73:4a:2f:4b:52:
67:84:8a:c9:0f:45:39:be:22:c2:12:81:40:ba:85:
15:3e:63:01:12:49:cd:79:6a:2b:d3:06:66:ae:d8:
b2:88:38:80:f0:70:8a:22:b6:3b:f1:94:78:93:37:
cc:c4:b3:6b:c6:61:6f:26:d4:c9:30:e7:0b:f1:2f:
03:43:2c:26:8d:39:19:7b:52:d1:ba:e8:dc:7b:2a:
b7:b6:c3:5a:b1:d2:09:73:ff:5e:b3:e7:ec:ba:aa:
56:82:e2:8a:98:58:61:ae:0e:03:69:4e:14:fe:10:
ab:6e:b9:6d:65:13:ca:8a:b0:46:c3:82:7e:30:38:
88:0c:66:d4:49:3c:23:a4:4a:d9:0f:45:f0:85:5d:
b7:99:27:29:7d:5f:96:fa:c7:f6:f2:62:9c:fc:58:
38:63:44:f1:a0:46:88:0f:9a:e7:8d:78:c9:de:57:
ad:82:45:36:5e:88:6a:67:5f:95:46:f0:ae:5c:4f:
78:6e:34:f7:88:ae:05:e1:37:e5:e2:d0:aa:dd:39:
cc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:C7:B1:08:24:4C:1F:47:F0:D7:33:00:FB:F7:79:74:37:01:D2
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:44:c9:75:b1:0f:30:5b:ff:da:3e:45:d8:31:8f:d8:23:a4:
0d:3b:1a:84:bb:f8:14:a4:5a:f3:0f:b8:0f:88:6f:6d:c1:5a:
73:f6:70:aa:7c:ff:e6:32:56:e7:26:a6:2c:89:82:4b:79:f1:
e9:d2:ce:12:5c:a1:2e:34:11:da:70:d6:1b:fe:24:ca:56:2a:
18:43:3b:df:be:f2:80:74:46:ad:f9:7c:51:be:d4:5a:20:74:
c7:de:4c:5e:3e:49:1d:c4:7c:f6:e1:c0:5c:93:cd:56:3f:79:
9c:03:84:ee:8d:3a:6f:36:ca:a4:33:ca:2a:39:c1:ec:80:7c:
69:df:84:75:48:be:16:e5:7a:18:68:6b:32:4f:fd:c1:f7:b7:
6c:5f:9f:52:74:15:03:23:7b:9b:e0:75:6c:1c:da:30:9d:a8:
54:3f:5f:4a:f3:35:fc:3b:2e:61:b8:39:f4:33:8a:9a:75:eb:
1c:25:b0:ad:40:61:8a:d0:1b:74:98:ec:7a:66:d3:0d:fb:30:
bb:a1:40:e1:6d:e6:f2:a5:54:99:c7:cf:d5:1b:6b:65:c5:11:
de:8f:b8:6a:2c:10:5a:aa:b1:d3:04:f7:4c:76:05:e6:ab:6c:
b4:30:19:4f:79:00:c8:e2:54:06:e1:76:2c:dd:7f:e5:e8:8a:
1e:13:10:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:16 2026 by rpki-client