Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: 65zdOFNb0JmTzf76OzyXMCUS1sWAQju8X93W7j6Km/w=
Subject key identifier: D6:65:8C:70:3B:C0:92:0E:84:E9:C5:6B:09:C7:E2:5D:75:08:E3:D3
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 01A0C74636DEE215A69CC649833D9C785CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 04:01:02 +0000
Manifest this update: Tue 22 Sep 2026 04:01:02 +0000
Manifest next update: Wed 23 Sep 2026 04:01:02 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: ml66pomoUxGchQMBRxjLGwea8bZciQMZtp2nUrEP7ZU=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:36:de:e2:15:a6:9c:c6:49:83:3d:9c:78:5c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Sep 22 04:01:02 2026 GMT
Not After : Sep 23 04:01:02 2026 GMT
Subject: CN=d6658c703bc0920e84e9c56b09c7e25d7508e3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:a7:6b:9a:87:b6:1d:8c:09:0b:a0:37:3c:
52:34:1f:c0:f3:bc:8e:5e:6f:11:fb:b2:72:53:6d:
56:04:9d:c5:0c:1b:13:08:8c:18:78:f0:d2:53:99:
72:a5:ba:e7:63:9b:f9:e1:4e:28:5d:74:1e:9b:87:
5c:a2:04:28:ff:68:23:dc:b9:e7:01:26:ad:3c:d5:
d3:80:69:93:fa:ea:94:c1:95:93:dc:00:b3:41:1c:
18:b0:07:99:7b:9f:24:66:3d:df:32:23:ee:61:9b:
a1:5f:4d:d5:94:72:dd:6f:76:4e:3d:35:f8:10:3a:
c1:5f:03:cb:c7:57:73:db:45:9a:05:4b:5c:64:71:
67:48:e6:f6:56:0e:eb:a8:d1:d6:06:b4:43:59:0a:
60:fe:4a:b6:df:60:e0:2c:ed:fc:56:d1:3c:b6:73:
17:17:79:c2:f3:c4:b1:8b:80:89:23:ba:c5:a7:b7:
fa:a2:c3:ea:4e:17:92:ea:08:27:66:ac:80:8f:ed:
c8:d9:70:73:ed:61:29:94:c0:14:1e:53:ba:07:4e:
8b:49:be:94:1b:64:2f:99:8a:92:5c:76:84:3e:76:
40:9e:3f:e3:4d:59:af:93:6f:45:11:4d:9d:39:c9:
59:ed:e5:ad:a2:94:af:39:73:00:68:ae:c5:a0:38:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:65:8C:70:3B:C0:92:0E:84:E9:C5:6B:09:C7:E2:5D:75:08:E3:D3
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c9:bd:1b:60:4b:96:a2:1e:ff:c5:e7:7a:88:f5:04:e2:54:
b4:5f:16:a1:60:76:e5:ce:90:17:c4:72:b3:2b:a6:ab:85:53:
1a:e4:75:c3:32:85:eb:ff:d4:e6:83:ec:54:fd:81:24:d0:b6:
e3:47:8f:56:bb:03:6c:77:7b:66:b8:21:cf:60:38:9e:d7:53:
eb:4b:49:38:24:60:be:00:50:01:ca:fc:bf:42:7d:4d:a0:aa:
04:aa:cb:a8:2f:f5:fe:33:2b:a7:05:87:a0:c7:7c:8c:72:8d:
e1:56:87:9e:d5:2f:01:42:40:9c:c5:fa:bb:27:74:db:88:d0:
76:85:1c:4d:79:e3:bf:d4:78:cd:1f:5a:61:55:f3:95:1d:b4:
29:da:3d:40:ab:13:84:00:0f:f2:a4:39:7c:42:df:24:b7:e1:
af:5f:91:d8:20:a8:a8:47:f8:eb:c1:4d:35:8f:3a:b4:14:17:
af:43:13:c1:e6:a2:68:a2:e3:29:49:d0:b7:5e:e3:18:cd:7c:
bd:91:cf:65:29:84:f2:20:93:ca:cc:cf:42:bf:7a:e1:7f:99:
9a:96:6d:7a:18:9a:b7:f4:04:4e:27:ae:33:e5:8f:f2:40:14:
99:82:a4:d5:79:50:91:54:90:d6:5f:8a:c0:05:4c:ea:bd:15:
08:f0:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:54:58 2026 by rpki-client