Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: ahdv0bJ9prETTQ5o8x1hZh7+OSFbRLPtP3xOe73YGmY=
Subject key identifier: 16:1A:19:8A:BA:C7:59:00:8D:B9:F5:D9:4D:66:AD:9C:EA:47:AA:E4
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019F189E0B2F703001BBAB1E0BEE2B065F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 13:00:38 +0000
Manifest this update: Tue 30 Jun 2026 13:00:38 +0000
Manifest next update: Wed 01 Jul 2026 13:00:38 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: 0xpYOgPPtDha+N60RIqrfKQmRMJYVVliOPLAjO1+zGc=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:0b:2f:70:30:01:bb:ab:1e:0b:ee:2b:06:5f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Jun 30 13:00:38 2026 GMT
Not After : Jul 1 13:00:38 2026 GMT
Subject: CN=161a198abac759008db9f5d94d66ad9cea47aae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:ec:3e:82:5a:97:b3:2a:50:35:a3:02:6a:
b8:58:04:7a:3b:99:00:51:31:cf:be:06:ae:35:a9:
90:d1:41:f9:50:16:72:f3:64:59:49:d8:7b:48:af:
29:ad:be:b4:e8:b5:81:15:21:00:6b:8f:3a:f0:15:
3a:cf:cf:4e:2c:98:90:73:38:e5:9e:f6:ef:4c:4a:
79:64:9f:4f:1e:be:a5:be:cc:8a:07:0f:4f:c4:58:
e0:d8:c4:c9:fe:fb:54:2d:66:32:9a:fd:4b:72:0a:
31:7d:cf:d9:dc:57:1f:35:4f:99:d1:0e:b4:f3:6e:
be:af:42:d4:f7:d0:0e:ea:ea:98:5e:8a:b6:78:09:
8c:be:2d:21:70:b8:a5:cf:4a:73:ac:34:34:51:2e:
e5:80:36:53:65:fc:a9:24:dc:b2:e0:37:dc:03:09:
cd:9e:84:ec:da:e5:b4:c4:b9:83:f5:6f:8d:1f:b8:
c5:ca:cb:36:2c:96:d7:4d:c4:d0:d6:a8:a7:cc:16:
da:dc:28:f7:55:0e:f1:10:0a:2c:46:40:25:fd:e8:
62:ef:ce:74:44:3a:df:4b:21:bf:e2:74:d7:10:f0:
d7:59:56:ad:42:4c:04:b3:6d:ef:91:03:71:14:66:
01:99:64:64:70:84:8c:cb:51:8e:03:20:29:d7:55:
3d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1A:19:8A:BA:C7:59:00:8D:B9:F5:D9:4D:66:AD:9C:EA:47:AA:E4
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d6:71:a8:09:fb:40:e8:88:61:1c:ec:4c:a3:79:28:84:d5:
a2:d5:ae:99:4e:31:15:4f:ae:c0:4c:5a:31:44:2d:b8:e6:9d:
c7:a8:ea:2d:53:c2:57:99:e4:0c:14:32:2b:59:e4:e5:92:26:
c0:03:83:71:00:a4:82:fb:19:e5:fd:44:ac:20:0d:c5:ba:b5:
0a:79:b6:b7:6a:e5:7f:80:10:85:9c:bd:7d:6d:ad:25:01:ca:
47:41:98:45:f9:50:d6:86:f1:0a:e2:3c:eb:0b:52:b0:c3:3b:
d8:48:b6:40:2f:18:f9:2b:b3:a1:4b:53:3b:a9:7d:36:d0:a9:
a1:a5:28:9c:bc:ae:c5:5a:b1:e7:eb:06:86:2f:0a:0a:2d:6c:
51:a6:78:21:06:c1:32:20:c1:15:71:72:d3:fc:64:60:db:0d:
67:80:66:c0:ce:3d:26:1f:8a:e0:e3:81:30:ae:ed:99:dd:cb:
60:c6:78:0f:5f:88:b8:d5:cc:4e:69:06:78:17:b4:a9:9f:10:
e6:b1:a0:1c:db:c7:26:b1:cc:08:b5:03:01:a5:f5:6b:b5:b3:
ba:d6:80:25:0c:7c:3a:b5:6f:bd:7c:63:97:25:04:d0:62:94:
a5:e5:14:8c:54:b8:1b:f0:41:50:11:9e:76:71:04:c1:8f:6a:
69:0f:f0:48
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8YngsvcDABu6seC+4rBl86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx
ZGVlMGEwHhcNMjYwNjMwMTMwMDM4WhcNMjYwNzAxMTMwMDM4WjAzMTEwLwYDVQQD
EygxNjFhMTk4YWJhYzc1OTAwOGRiOWY1ZDk0ZDY2YWQ5Y2VhNDdhYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuETsPoJal7MqUDWjAmq4WAR6O5kA
UTHPvgauNamQ0UH5UBZy82RZSdh7SK8prb606LWBFSEAa4868BU6z89OLJiQczjl
nvbvTEp5ZJ9PHr6lvsyKBw9PxFjg2MTJ/vtULWYymv1Lcgoxfc/Z3FcfNU+Z0Q60
826+r0LU99AO6uqYXoq2eAmMvi0hcLilz0pzrDQ0US7lgDZTZfypJNyy4DfcAwnN
noTs2uW0xLmD9W+NH7jFyss2LJbXTcTQ1qinzBba3Cj3VQ7xEAosRkAl/ehi7850
RDrfSyG/4nTXEPDXWVatQkwEs23vkQNxFGYBmWRkcISMy1GOAyAp11U9KQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBYaGYq6x1kAjbn12U1mrZzqR6rkMB8GA1UdIwQY
MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy
LTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmLzY4YjFiZi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIz
YWIvMS8xLUJhR1dTanU3dVhMeVM5TVRUaXVYR0FkN2dvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtZx
qAn7QOiIYRzsTKN5KITVotWumU4xFU+uwExaMUQtuOadx6jqLVPCV5nkDBQyK1nk
5ZImwAODcQCkgvsZ5f1ErCANxbq1Cnm2t2rlf4AQhZy9fW2tJQHKR0GYRflQ1obx
CuI86wtSsMM72Ei2QC8Y+SuzoUtTO6l9NtCpoaUonLyuxVqx5+sGhi8KCi1sUaZ4
IQbBMiDBFXFy0/xkYNsNZ4BmwM49Jh+K4OOBMK7tmd3LYMZ4D1+IuNXMTmkGeBe0
qZ8Q5rGgHNvHJrHMCLUDAaX1a7WzutaAJQx8OrVvvXxjlyUE0GKUpeUUjFS4G/BB
UBGednEEwY9qaQ/wSA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:44 2026 by rpki-client