Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: ayqvG/RKSEegwjxtBSShnZzaiMJI35QPshBUzfCbLUA=
Subject key identifier: 5D:1F:45:A8:32:EB:69:43:4B:01:B4:BA:55:F9:1E:77:A6:33:37:1E
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01A06D5E210966C5ACF1BCD5C45C796A5EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0C03
Signing time: Fri 04 Sep 2026 17:01:20 +0000
Manifest this update: Fri 04 Sep 2026 17:01:20 +0000
Manifest next update: Sat 05 Sep 2026 17:01:20 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: Qd0aob3e3UnyOXD+UGsy09G+MiOswSyVLvNygc6+MKU=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5e:21:09:66:c5:ac:f1:bc:d5:c4:5c:79:6a:5e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Sep 4 17:01:20 2026 GMT
Not After : Sep 5 17:01:20 2026 GMT
Subject: CN=5d1f45a832eb69434b01b4ba55f91e77a633371e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:90:23:3c:0c:80:94:69:c6:b1:12:31:8d:
77:ea:2b:0f:83:42:91:ca:e4:29:1c:e7:75:67:78:
76:94:08:ef:2e:33:fc:00:c8:4c:ac:28:55:60:0f:
48:ba:c9:d4:b4:87:ed:e0:15:88:65:9a:49:ce:05:
26:1b:9b:a0:ad:07:8e:1a:4a:2f:81:d7:b2:1b:27:
bc:44:00:e9:8a:06:d1:c0:41:c4:7c:1d:75:d6:af:
9a:d8:da:bd:94:89:89:21:e9:38:35:1f:bc:45:a1:
03:8b:21:26:2e:e6:13:36:3a:14:07:05:f4:01:9a:
65:b7:82:4e:34:6c:29:57:25:c0:f9:bb:c1:70:0b:
4c:53:64:6c:aa:b5:a8:ed:0c:f7:c1:12:be:eb:2d:
e6:cb:9f:f4:54:a6:c9:2b:b9:51:27:85:aa:73:de:
e4:f8:e5:6b:57:30:48:ff:a6:0b:8a:1d:19:5e:5a:
8e:7d:9c:a8:bf:d2:e5:80:13:38:b1:f4:ea:7d:17:
d8:4d:80:ad:2d:de:e2:e0:0f:17:06:b6:90:dc:08:
56:3d:24:b4:10:3b:fe:6a:e9:68:f8:cb:76:25:94:
d6:84:9e:2a:be:55:e4:54:c6:f4:d3:f7:5a:39:33:
45:f1:7e:3b:4a:da:d5:30:00:4e:4d:00:54:cf:95:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1F:45:A8:32:EB:69:43:4B:01:B4:BA:55:F9:1E:77:A6:33:37:1E
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f4:3b:7f:1f:83:d3:d9:e7:c1:22:cb:94:c4:2e:9c:cb:9d:
1e:fa:d9:c5:b3:30:95:83:59:34:a7:cf:56:15:11:60:1d:fa:
6f:11:2d:d6:e6:76:f3:f3:34:81:27:e8:5d:4b:f9:2a:bd:d9:
15:d7:9a:84:c1:22:f1:b8:eb:b9:8e:c0:52:06:fe:28:bc:e4:
69:9b:27:dc:15:b7:b8:bb:d9:32:70:0d:63:5b:97:c1:51:39:
8b:f2:f7:dd:9c:69:4b:07:d8:ea:fb:4f:7b:bb:0e:83:5c:88:
e4:f7:6a:7c:13:56:cb:5f:17:dc:8a:1f:88:ce:28:f1:e3:46:
23:60:4f:94:84:b7:72:a3:7d:84:36:ed:63:8d:d1:54:74:9d:
08:f8:51:61:ad:26:3d:30:8c:37:53:4e:73:aa:01:8e:28:35:
98:4a:53:44:8c:a7:b0:3e:b1:51:27:d4:21:5d:2b:b5:79:a4:
ea:13:ce:29:6f:9e:3b:aa:18:f2:39:7c:a0:6f:cf:6b:5b:2a:
ab:70:d0:1c:42:07:2a:7b:bd:34:99:14:92:b4:7a:0d:45:6d:
7a:ff:0f:78:d8:bc:2c:10:b2:0f:d5:f2:4b:62:f0:9b:52:69:
5f:07:cb:38:cb:b8:b7:d3:54:a7:28:dd:3b:35:6d:35:4b:eb:
26:fa:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:57:21 2026 by rpki-client