Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: hdJ8NfQwqWtR0mDocMQgpFMxCRm0FT52jXjWA4pzPqw=
Subject key identifier: 8E:91:0D:6E:CA:90:C0:60:A1:73:A3:C0:18:E8:CE:9D:33:4D:85:87
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019CAAC62A1AE5139020D9C972D340BFEAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: kKJjMXvSKwpPGlDRSCAfFYPxYhbNH7i5PnHzP0tKjzc=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2a:1a:e5:13:90:20:d9:c9:72:d3:40:bf:ea:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=8e910d6eca90c060a173a3c018e8ce9d334d8587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:83:a3:44:28:77:ef:f8:7c:ea:4d:26:d2:
18:9f:1b:26:dd:be:82:77:03:e3:03:90:1a:84:4f:
31:6f:aa:80:80:a7:65:a4:5a:ff:bc:eb:80:9e:ad:
ff:b2:f0:ac:ce:78:10:ee:53:ff:86:d4:83:da:ca:
8d:4f:28:0c:31:c7:8f:80:1d:3e:91:32:47:28:67:
94:fc:bd:d1:3d:f2:e3:2e:8a:79:69:6f:e0:14:88:
6d:01:1f:27:8e:bc:1b:15:e2:b8:a7:2f:b8:9d:49:
08:5a:55:68:1d:03:b8:e4:84:a3:f7:c6:11:13:7b:
71:a8:7b:b1:46:44:97:17:69:bd:82:b8:b5:1a:35:
bb:6c:97:6a:1a:d1:09:14:56:47:d6:54:92:65:c4:
2f:a3:bc:95:5f:0d:9c:b1:c9:a4:f9:bd:70:f1:82:
64:f5:b2:69:a7:e3:bf:5c:b4:7e:0e:71:1f:b8:21:
f8:79:5f:32:ba:a0:cf:5d:8c:e6:34:8c:c7:d8:e7:
d0:85:6c:d5:63:03:57:5e:fa:ef:76:45:21:79:6b:
c3:c2:68:c1:fc:e2:cb:58:7a:0e:66:8e:a9:07:9d:
9f:9b:01:ab:f0:c9:6c:40:cd:4d:60:6c:58:86:b0:
29:72:8e:58:3b:23:e8:9d:93:6e:73:a4:d2:dd:2f:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:91:0D:6E:CA:90:C0:60:A1:73:A3:C0:18:E8:CE:9D:33:4D:85:87
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d8:a2:c6:ce:0c:05:dd:c3:44:f8:47:f0:d2:69:4c:d3:e1:
98:f2:d6:8f:94:a5:a3:9f:a1:ad:f1:10:7f:b7:96:9d:b5:61:
e6:a4:00:a9:76:fb:e5:5a:a3:9d:e5:9d:5f:d6:2e:27:71:cf:
9f:0d:ae:0d:41:03:3b:3a:0b:bc:4c:6f:d2:88:8e:ce:fa:ba:
a5:fb:e5:6b:df:cb:21:7d:e4:f7:f2:2a:58:b5:1d:9a:1d:a9:
7e:ff:dd:49:83:ce:01:6e:42:10:19:27:0b:0a:e3:7d:59:03:
c5:27:21:5f:0a:29:89:b6:21:bb:fb:93:91:c9:3f:87:4f:c0:
61:1b:4d:22:e3:fe:0d:b6:ca:2c:0c:ea:77:98:f3:21:27:2d:
97:af:fd:5c:08:be:08:4e:db:cc:e6:e1:fd:a5:e2:7d:87:73:
b4:ac:92:89:69:8b:5f:63:e4:bc:d4:7b:80:1b:5c:14:b5:83:
63:66:03:ba:7d:e5:ed:5e:11:ff:0b:fa:d9:da:2e:98:44:5d:
91:47:e4:f2:30:b1:f5:32:02:20:27:c5:e3:20:58:2c:87:ca:
29:40:1a:46:ba:bd:88:e4:3b:ce:66:20:b3:2d:73:ce:d9:4b:
c2:2c:fa:54:c1:46:87:5d:a0:81:2a:e3:9c:33:0f:1b:ee:23:
50:0c:d1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:08 2026 by rpki-client