Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: saX03YBcK4tSziRH7UxUghWflDtcJNSffcVodmB7rsA=
Subject key identifier: 3B:49:F2:5F:65:9F:44:D3:DD:05:3F:6E:E5:89:E6:55:32:33:ED:F6
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019D37C0709A20371F22C6F49818C8D53BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: FYifrcWauig/Ssg7LWuMApfDy60K3h8ZAWeN9ET+y8Y=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:70:9a:20:37:1f:22:c6:f4:98:18:c8:d5:3b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=3b49f25f659f44d3dd053f6ee589e6553233edf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:05:34:e8:55:3c:7a:e0:46:97:b4:77:3f:
ae:1e:fa:a9:27:f6:83:ac:96:0d:39:4a:de:e4:2d:
83:e2:e0:28:28:87:a0:49:1a:10:8d:04:4a:55:dc:
48:1d:6f:8c:eb:7f:cf:8a:04:d6:fb:82:75:60:70:
16:7c:98:f6:5a:42:1f:82:35:fb:02:66:fb:9a:29:
52:4f:03:08:d9:e3:09:a2:e4:2f:63:ed:e0:0b:4b:
ad:e6:07:e7:73:af:70:96:f5:7a:fa:35:ab:db:0f:
53:a4:69:5b:22:1a:8c:c7:9d:ab:e7:01:4e:15:e6:
33:d4:64:ab:e6:d1:1c:e4:28:9d:d3:71:af:2c:5b:
6e:84:f1:2b:58:23:c4:40:20:5c:d4:73:2a:88:a1:
7b:07:14:a3:54:b7:32:37:5b:dc:9c:e1:8e:2c:04:
0c:3d:a6:a3:df:86:81:f4:c7:a0:61:71:a5:50:e4:
e4:00:a6:96:6d:44:c1:a5:50:8d:bd:99:4e:9f:d9:
1d:9f:f6:d0:26:71:83:92:a1:31:c3:c5:b2:da:22:
f6:5e:50:26:59:ae:6c:18:a5:2c:ba:4c:67:b6:06:
6f:10:72:7d:c6:a2:20:0f:47:01:7d:ee:3f:4f:95:
94:12:ef:8a:59:1a:33:9c:79:70:ad:ee:7d:89:8b:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:F2:5F:65:9F:44:D3:DD:05:3F:6E:E5:89:E6:55:32:33:ED:F6
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c7:7f:36:84:13:ee:4f:a0:12:75:5c:49:41:39:52:c6:13:
a7:d4:7c:9e:43:c8:68:eb:01:29:87:3f:04:ec:c6:28:f9:25:
1d:2b:cd:6c:4e:21:7a:15:36:9f:ce:c8:37:0e:94:d9:3e:24:
bd:4b:4e:90:0b:24:e4:08:6b:eb:6d:bf:32:11:03:dc:1a:19:
7e:63:66:52:9f:20:db:37:b1:49:0a:26:9b:ca:e8:28:8e:a4:
51:0c:8b:09:64:62:da:18:17:81:f7:dc:48:ca:9a:8c:0f:6a:
f6:f4:4b:39:62:fe:db:51:63:02:2d:5c:69:05:67:f4:31:9a:
ec:1d:d3:31:dc:fb:04:19:5e:11:7c:8d:51:fd:7c:01:e7:ce:
19:3e:81:24:b5:6c:11:28:93:8f:7e:bf:6c:fa:38:97:52:bc:
dc:3f:88:31:f7:c0:2a:e9:d8:b3:70:3f:52:a9:39:55:7d:d1:
fa:66:45:77:4a:c2:35:e1:90:a9:a0:c2:d6:fc:f6:03:71:0d:
c4:8c:86:45:85:ab:7a:dc:29:bd:0f:32:a2:7d:92:0c:c8:d0:
1a:32:96:f0:ac:76:3c:b2:0d:81:97:97:c3:59:b7:af:e8:60:
92:84:21:cd:71:3e:bb:c5:e2:66:f6:d4:2d:f7:75:61:95:7b:
d6:80:14:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:04 2026 by rpki-client