Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: Mdjqv3CDj46kbeEgsoVsR92f0oha5ArUGCg0BB/TTMY=
Subject key identifier: 22:DB:82:4E:E8:5F:78:C6:ED:DD:C0:6D:13:5C:AD:D2:27:74:B4:51
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 01A17BBB3F3602450B051F977E8E1CC9C9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 05:00:31 +0000
Manifest this update: Tue 27 Oct 2026 05:00:31 +0000
Manifest next update: Wed 28 Oct 2026 05:00:31 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: DFy1+oPju4x1/TJqXrfiKrywoWBvG0WHrLIinb9+kz8=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:3f:36:02:45:0b:05:1f:97:7e:8e:1c:c9:c9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Oct 27 05:00:31 2026 GMT
Not After : Oct 28 05:00:31 2026 GMT
Subject: CN=22db824ee85f78c6edddc06d135cadd22774b451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:a7:0b:f8:8f:16:89:d4:22:88:a9:f9:30:
e6:f3:92:5f:89:a7:45:48:44:f4:28:02:f9:43:06:
4b:28:73:4a:e7:1d:8c:5e:65:a7:78:d9:d5:4e:7f:
67:5a:49:09:c3:23:43:32:58:e3:2c:7e:22:42:a2:
5b:28:87:33:20:86:9d:30:55:c6:f9:44:1a:6b:80:
56:c1:8e:e0:4f:a0:de:b3:1f:14:54:5c:97:90:ca:
b1:fe:86:bf:29:34:d9:61:b3:6b:d0:98:d8:d5:83:
6b:2e:40:fb:1c:35:0d:a6:5a:56:de:87:7a:d5:27:
ac:e9:75:41:eb:f9:a1:77:7b:ab:32:27:fd:42:4b:
3b:70:f0:f2:f2:2d:fc:59:eb:86:1a:0f:b8:ec:d2:
c8:86:ab:a0:6d:a5:71:03:55:e4:46:46:09:c8:ee:
61:19:23:2e:ec:23:3a:d8:36:59:6d:19:ae:5d:42:
2f:0a:9c:7b:d8:07:94:2e:3a:8c:78:4e:c8:7e:f4:
43:42:61:fb:28:16:ce:24:83:f8:db:76:93:b1:77:
9a:25:06:4e:09:08:e6:a4:dc:0b:d3:85:29:ff:30:
33:ef:c6:5a:82:72:7e:be:6f:83:e0:48:62:6a:0c:
84:27:79:c9:1d:4f:d6:db:ee:99:8c:e7:f7:d0:05:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DB:82:4E:E8:5F:78:C6:ED:DD:C0:6D:13:5C:AD:D2:27:74:B4:51
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:51:71:ec:3e:f3:38:71:50:fe:b8:76:b8:3e:78:45:70:cc:
a1:47:30:7e:52:9e:cf:84:15:70:0a:2f:6f:26:00:0d:21:7f:
eb:9b:79:6d:25:d6:b5:0d:74:9a:b5:b1:05:e3:b5:9f:40:71:
68:27:3a:c1:96:81:63:4c:4e:90:8a:9b:da:a5:54:9b:63:a1:
f4:44:5c:c7:78:e3:c1:1d:ff:f7:5d:e3:e3:4d:c9:9e:1e:f9:
87:e2:84:78:c4:78:48:79:ca:c1:10:c3:c4:ae:44:05:f6:d9:
20:9d:38:eb:02:58:14:24:05:25:dc:bf:22:6f:5b:2f:55:f8:
b3:4a:6d:8c:0c:e8:4a:64:58:61:ee:f0:99:58:9f:5c:b7:60:
5c:3b:42:cb:2a:02:22:cc:ec:a4:3d:ae:e8:93:cb:bc:8f:20:
e7:b0:b0:f0:05:2c:18:88:05:47:a9:65:32:0c:07:65:6b:15:
e1:69:61:ef:7d:1b:f0:20:7f:76:c2:7c:1b:6b:67:7f:b9:d4:
0a:ec:1b:18:c6:ad:c4:77:20:e1:3e:81:9b:70:f4:ad:e0:c8:
f9:3a:60:bc:32:2a:53:2d:04:89:47:ab:10:2a:11:96:5a:96:
aa:43:80:7a:d7:a5:42:e4:c0:16:a2:f2:49:b3:76:af:0f:74:
ec:ff:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:49 2026 by rpki-client