Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: jrJXg05jpJHpcKouCU7Jw7xK0YR8E3PJY8qgk9ZMsKg=
Subject key identifier: E6:85:1F:16:6A:6E:D2:54:9E:4B:9D:D2:73:DD:60:FD:E5:06:9F:8C
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 019D3865C52E0138778BF2839C2CCD7E17CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: 58YF0ymtPf000UYsXQwLeX0ZufU.roa (hash: 40hd3BRBbvBiTvhYzazTmqFgM3O0ax5/aAw4bE5lLLg=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: 4cI4YvZxez2plR9c5KbOwW9iNSXKCwD4wiOwTQppAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c5:2e:01:38:77:8b:f2:83:9c:2c:cd:7e:17:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=e6851f166a6ed2549e4b9dd273dd60fde5069f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:2a:75:cb:c2:52:ac:29:69:e8:c8:c7:62:
a2:14:a0:77:66:5e:ae:2f:12:9c:97:3d:98:e9:76:
2b:32:51:8a:c9:2b:c3:73:40:29:98:ed:9b:11:dc:
3e:9e:74:b1:f6:4e:95:f6:36:a7:d5:1a:4a:c3:71:
41:4d:0a:07:be:c2:61:cd:e9:27:65:22:86:49:1b:
89:87:63:59:94:fd:c0:40:79:ea:fa:bb:72:85:38:
98:d5:55:42:02:84:7c:13:9e:9c:9b:21:8f:da:ac:
c4:c4:98:0d:31:08:72:ec:7b:91:22:f1:1b:1c:0e:
c7:73:52:53:84:8a:d3:6b:78:3a:93:4d:02:6d:e8:
af:87:df:ac:d9:31:41:c8:b3:8e:7b:45:8c:91:f3:
cd:26:48:65:69:85:2f:d7:e3:a6:7c:17:7c:c7:c3:
d7:cd:18:53:49:61:28:b2:ca:c3:75:53:d3:a1:fb:
62:45:e1:68:36:56:54:59:55:1b:6a:02:c7:2e:a4:
33:81:01:9e:a3:15:cd:e2:13:27:5d:72:37:f7:c3:
4a:0d:1d:06:59:6e:c6:4d:80:27:16:93:ab:d5:ef:
81:1c:f1:88:48:93:8e:04:73:27:af:45:20:ae:3b:
ed:5d:6b:79:9d:1b:07:c0:bf:23:27:05:47:62:de:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:85:1F:16:6A:6E:D2:54:9E:4B:9D:D2:73:DD:60:FD:E5:06:9F:8C
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d9:51:19:93:96:ec:8b:f5:3b:18:49:62:5b:ee:9a:8d:ba:
98:6c:2a:f8:3c:74:ca:e8:3e:2a:f1:4d:24:6e:9d:19:70:f0:
05:a7:fe:b2:3a:41:b9:ae:b8:a2:b8:8a:0a:42:03:0b:0a:85:
fb:c4:3d:a0:51:de:4d:c6:50:d2:c6:2d:ad:52:06:3c:11:98:
93:c2:42:25:d0:00:7d:0a:64:94:c7:b2:b3:1a:9c:d9:01:e2:
7f:7f:72:2e:a8:6b:2c:dd:f2:75:61:bc:ef:e0:24:56:e9:bd:
f7:10:4b:d4:01:ee:a7:5e:0c:55:62:d3:6d:40:93:53:d8:14:
b4:0f:fa:46:62:03:53:62:f3:6c:7e:b6:e7:8a:69:b6:d3:97:
39:92:8a:0c:38:9b:76:31:e0:9c:69:d2:b6:37:b4:9b:cb:bc:
e4:b2:bd:84:85:c4:02:d3:2e:36:b9:76:2f:16:5c:4d:4c:38:
44:8c:a3:5f:3d:0f:7d:47:f8:a0:b4:8b:8f:48:72:b6:e5:8b:
92:38:43:33:18:9f:8c:55:04:36:4c:78:07:f1:f1:ad:60:ff:
4e:c3:cc:49:c4:a0:d9:22:47:7b:2d:b4:42:53:5a:10:d2:f2:
65:30:0f:4a:e1:d2:ca:4b:4e:8a:34:6f:76:a8:c2:51:91:d8:
ea:ff:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:58 2026 by rpki-client