Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: rINksmpeeqFaNACAeohAXICN5cQcw73BkUIOno7EpQQ=
Subject key identifier: 72:90:E3:75:53:CA:A0:B6:3D:3D:1B:8C:87:E5:26:A1:63:B6:F2:92
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019EB6FBD5F0EC3270AF7A866DA807D1C30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 14:00:18 +0000
Manifest this update: Thu 11 Jun 2026 14:00:18 +0000
Manifest next update: Fri 12 Jun 2026 14:00:18 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: ceiWkAEwEf4K8CnkcHYk9cwabogVyFbNPcrKZknkOt4=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fb:d5:f0:ec:32:70:af:7a:86:6d:a8:07:d1:c3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jun 11 14:00:18 2026 GMT
Not After : Jun 12 14:00:18 2026 GMT
Subject: CN=7290e37553caa0b63d3d1b8c87e526a163b6f292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:07:df:3c:fc:b0:75:90:67:95:bc:ed:69:7f:
2e:99:9a:47:a3:4d:9a:94:73:ac:dc:48:d0:a6:8b:
42:2e:a8:71:86:3c:df:d6:4b:32:38:cf:2f:b7:bc:
34:7e:67:98:1b:81:f3:44:a9:18:20:61:8f:c1:d6:
63:ea:f0:1d:8b:a5:80:6b:24:9e:6a:d2:54:bc:8b:
cd:4f:93:71:84:48:0e:50:32:d2:24:17:47:16:1c:
30:95:3a:8e:99:91:fb:53:68:64:76:2f:e7:eb:fd:
25:b0:85:77:ee:78:3b:b8:1f:6b:20:0a:6f:9d:84:
84:9b:ba:9d:1a:4a:d8:f2:0e:32:1d:f6:c5:5f:ce:
28:ea:57:90:8b:d9:0d:ab:38:01:ca:15:e4:e5:c2:
9f:59:1c:0b:f7:79:1c:e6:e6:03:15:5b:c6:85:b7:
e9:c9:cb:dc:3c:e2:e1:33:1d:4e:47:be:20:5a:57:
db:1c:9f:21:35:a1:98:85:97:6d:0f:c3:0e:e9:bf:
8a:23:21:52:16:d9:1c:07:1f:17:21:09:4a:77:55:
0a:1b:8e:07:a9:fc:e3:85:96:1b:e3:71:9b:ab:1f:
ad:05:40:e3:61:a6:86:80:40:3f:e7:60:a0:ea:b8:
61:0a:d7:a0:18:45:cf:01:df:05:57:fe:0b:0e:81:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:90:E3:75:53:CA:A0:B6:3D:3D:1B:8C:87:E5:26:A1:63:B6:F2:92
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b0:b9:c1:43:dd:38:0d:35:38:29:9b:14:9a:8d:ed:de:ab:
40:bb:6f:68:06:1b:22:98:70:d1:f3:9c:5a:17:ca:8a:ff:fe:
00:f6:c2:f8:aa:98:24:8d:7b:10:4d:e6:c2:a6:c7:f3:3b:27:
08:90:5c:29:0b:f4:da:9a:2c:b1:d4:10:93:32:45:14:b8:a7:
35:71:02:5f:37:ef:a5:38:3d:35:9a:06:32:41:cf:1e:82:4a:
a6:e6:ff:e6:d3:3e:39:e3:c8:69:7c:0e:3e:3a:89:31:c7:56:
a8:09:6e:9e:d5:a5:0b:43:e9:35:9b:28:6d:b4:9a:6a:bf:83:
b4:ca:9a:01:45:5a:c3:3b:85:b7:f4:59:cb:ae:36:b5:6f:07:
4c:46:7f:0e:9a:5e:ea:4e:21:7d:2e:af:b1:d7:8e:02:af:25:
33:e9:7f:3c:41:03:ca:44:07:47:b7:ac:b7:7e:56:3c:cc:3a:
d0:34:ed:50:db:4c:25:52:06:7c:8a:58:c2:b9:4d:d3:f9:40:
ab:d3:05:8c:f3:8d:35:e9:36:7c:79:13:c2:2e:83:30:25:33:
a5:85:54:45:71:cc:90:73:7a:51:cd:68:8f:1f:10:2b:44:83:
cd:b1:3a:83:ce:5d:cd:00:79:0e:02:bd:22:97:4f:78:6c:fd:
8f:d8:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:27 2026 by rpki-client