Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: b5iO1+Y+/U3vjsbh5x/5PY8R9faOupTfoVdNmBRA01k=
Subject key identifier: 87:1C:CB:63:70:BF:86:5F:1D:86:A7:5B:ED:64:14:23:62:ED:09:62
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 01A14C8671EC37589B92034E350FE75D92AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1AAC
Signing time: Sun 18 Oct 2026 01:00:41 +0000
Manifest this update: Sun 18 Oct 2026 01:00:41 +0000
Manifest next update: Mon 19 Oct 2026 01:00:41 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: /v1SLChvjiuLaJdk3UobxAQm+zQ2jWxPqpHzQlAfjPk=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:71:ec:37:58:9b:92:03:4e:35:0f:e7:5d:92:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Oct 18 01:00:41 2026 GMT
Not After : Oct 19 01:00:41 2026 GMT
Subject: CN=871ccb6370bf865f1d86a75bed64142362ed0962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:69:c0:ce:4c:24:1b:bf:39:1c:37:a2:bd:
be:0e:22:b8:1e:7f:4c:52:7e:8c:89:1b:81:97:19:
46:f7:cf:ae:cd:50:38:44:52:e6:37:9f:76:52:e3:
dc:6d:a9:3e:09:d7:5b:39:f8:a7:d4:66:d2:9d:ae:
fa:ad:1b:25:4d:a3:e4:c5:fb:4f:b2:76:51:ef:be:
12:71:da:f8:90:e1:3e:3d:32:4f:2e:26:b8:4b:6f:
23:0c:07:c4:fd:53:21:e3:41:e0:bc:8d:2e:0c:f7:
3c:04:13:21:8f:13:5c:1c:3e:b7:ca:cc:36:65:45:
9b:72:e2:cb:f3:bd:51:a1:73:70:dc:2a:aa:d3:d9:
ad:9a:4e:f9:a7:61:61:32:85:c9:43:da:dd:cc:02:
39:23:65:93:fe:4f:f5:40:9b:d6:9f:ad:0f:12:a0:
d4:39:3c:66:b0:50:ee:1e:1f:94:90:26:af:56:8f:
f0:97:ae:04:9a:12:4f:93:19:df:65:91:b3:9f:23:
33:5e:45:2d:73:5e:48:85:c7:14:b3:3e:59:9d:6e:
24:8a:21:40:21:35:76:99:ba:92:f9:37:ba:a9:bd:
c5:e8:a9:ff:50:15:50:28:c3:69:11:b7:fc:2f:ed:
68:d0:e9:1b:8f:46:69:2f:e0:60:f6:eb:a6:8a:71:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1C:CB:63:70:BF:86:5F:1D:86:A7:5B:ED:64:14:23:62:ED:09:62
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f3:62:3a:33:c5:7b:af:12:36:35:43:39:d2:df:2d:ed:47:
a6:43:20:9e:de:1e:68:57:65:1d:f0:a8:47:73:37:8f:24:8e:
0c:33:52:38:44:2e:47:fd:dd:fb:27:58:9f:56:0a:65:ac:08:
75:a5:11:3f:39:e1:1f:a0:48:57:50:f1:c9:94:5b:b2:5f:93:
3e:d4:ad:19:21:de:02:13:2c:40:d9:16:78:f8:6a:2c:64:cd:
17:f7:b3:83:72:f3:b3:64:ec:75:17:2c:5a:89:d2:6f:91:14:
a7:e2:a1:fc:d8:35:ac:60:28:0d:54:57:f9:9b:1d:d4:07:04:
8d:e0:65:ff:a4:df:80:ef:3e:00:be:e8:c7:53:b5:61:4d:c5:
10:34:30:ab:60:5a:33:d1:d2:77:f4:4d:54:07:8c:eb:1a:25:
26:71:15:02:ae:80:c1:4b:53:34:0c:14:13:4c:d2:e8:28:0c:
76:ee:4a:8a:a4:9c:a5:b8:73:66:d8:aa:31:6d:80:6c:b0:58:
d8:00:3b:a7:3b:84:ef:a1:02:1c:39:0f:a5:d5:59:5f:3e:58:
4a:f7:21:93:f6:4d:a0:ae:57:39:85:d8:f6:40:c1:60:63:17:
1d:cf:7a:14:71:48:23:66:77:ae:d4:22:26:11:f3:b2:b6:ca:
eb:20:66:cf
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaFMhnHsN1ibkgNONQ/nXZKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx
ZGVlMGEwHhcNMjYxMDE4MDEwMDQxWhcNMjYxMDE5MDEwMDQxWjAzMTEwLwYDVQQD
Eyg4NzFjY2I2MzcwYmY4NjVmMWQ4NmE3NWJlZDY0MTQyMzYyZWQwOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluBpwM5MJBu/ORw3or2+DiK4Hn9M
Un6MiRuBlxlG98+uzVA4RFLmN592UuPcbak+CddbOfin1GbSna76rRslTaPkxftP
snZR774Scdr4kOE+PTJPLia4S28jDAfE/VMh40HgvI0uDPc8BBMhjxNcHD63ysw2
ZUWbcuLL871RoXNw3Cqq09mtmk75p2FhMoXJQ9rdzAI5I2WT/k/1QJvWn60PEqDU
OTxmsFDuHh+UkCavVo/wl64EmhJPkxnfZZGznyMzXkUtc15IhccUsz5ZnW4kiiFA
ITV2mbqS+Te6qb3F6Kn/UBVQKMNpEbf8L+1o0Okbj0ZpL+Bg9uuminECzQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIccy2Nwv4ZfHYanW+1kFCNi7QliMB8GA1UdIwQY
MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy
LTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmLzY4YjFiZi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIz
YWIvMS8xLUJhR1dTanU3dVhMeVM5TVRUaXVYR0FkN2dvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/Ni
OjPFe68SNjVDOdLfLe1HpkMgnt4eaFdlHfCoR3M3jySODDNSOEQuR/3d+ydYn1YK
ZawIdaURPznhH6BIV1DxyZRbsl+TPtStGSHeAhMsQNkWePhqLGTNF/ezg3Lzs2Ts
dRcsWonSb5EUp+Kh/Ng1rGAoDVRX+Zsd1AcEjeBl/6TfgO8+AL7ox1O1YU3FEDQw
q2BaM9HSd/RNVAeM6xolJnEVAq6AwUtTNAwUE0zS6CgMdu5KiqScpbhzZtiqMW2A
bLBY2AA7pzuE76ECHDkPpdVZXz5YSvchk/ZNoK5XOYXY9kDBYGMXHc96FHFII2Z3
rtQiJhHzsrbK6yBmzw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:14 2026 by rpki-client