Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: y6lse2YKCldHpFry03bOMOg/Mwp+APd2cbq5l+QUlCo=
Subject key identifier: B2:C6:3E:97:F1:AB:46:B0:F2:F0:7C:65:DB:C1:E1:7A:FD:FF:4C:2C
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019CE5912908A8C1DD27D90D3F245550E727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 05:00:21 +0000
Manifest this update: Fri 13 Mar 2026 05:00:21 +0000
Manifest next update: Sat 14 Mar 2026 05:00:21 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: 9iWTTeqjjlpfcO2p/U5+XbXhr3zzcpOjHwh82KVR3is=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:29:08:a8:c1:dd:27:d9:0d:3f:24:55:50:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Mar 13 05:00:21 2026 GMT
Not After : Mar 14 05:00:21 2026 GMT
Subject: CN=b2c63e97f1ab46b0f2f07c65dbc1e17afdff4c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:b3:9c:73:c5:b8:8e:67:b5:3e:59:9e:87:
5c:34:ca:c9:e6:e8:43:8f:48:64:6a:0b:8f:fb:68:
73:00:99:0c:4f:44:9f:19:29:37:fd:cd:a3:05:d8:
bd:e1:3f:4a:08:8d:71:9d:72:4f:9b:cc:55:6d:5a:
0d:f2:31:7c:46:5e:63:18:8e:63:68:92:37:b3:90:
b1:19:2d:96:49:09:17:9c:b7:14:f8:08:ce:48:6b:
2b:a5:42:19:dc:fb:3c:5c:6a:66:a2:10:69:5a:a9:
bd:9b:92:0c:f2:a1:12:82:ec:53:00:ce:c6:fc:2a:
ac:91:c3:bd:ed:42:ec:98:f6:c6:ec:c0:3e:bf:ae:
bb:cf:a7:85:b4:10:3d:f4:5b:4f:a8:ec:33:53:c1:
58:78:d4:d9:a0:88:aa:98:18:ce:68:43:52:9c:3a:
17:79:7f:d1:73:5b:0a:60:9e:66:39:8c:cb:b7:68:
bb:a0:96:5a:b7:1e:5a:1b:6e:b5:90:05:e3:97:4a:
d0:38:63:6e:a7:1f:28:fe:43:e2:1b:3a:89:96:a1:
31:69:99:08:0c:04:e0:cf:32:7c:83:e6:3c:8e:3e:
7a:cc:e6:36:de:63:79:64:6b:1e:a5:a1:01:04:98:
9a:de:1c:16:2b:fe:6b:d9:12:c6:24:e6:9a:ab:ec:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C6:3E:97:F1:AB:46:B0:F2:F0:7C:65:DB:C1:E1:7A:FD:FF:4C:2C
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4a:65:41:92:87:1f:1d:ef:61:cd:73:a8:4f:78:9c:a7:05:
90:bf:04:bb:2b:49:5d:8f:e1:72:9f:86:51:57:f7:fe:68:aa:
8b:cc:5c:7a:5f:36:69:17:74:65:cb:a5:bd:fe:c0:39:51:e8:
ea:a1:b5:c3:30:b6:da:b9:e6:cd:7b:b8:f6:a4:fc:91:3c:ba:
f6:40:0a:94:03:ed:ca:fd:fb:4f:d6:ba:75:11:6c:44:10:9f:
37:58:6a:23:d1:b0:ee:5b:c1:83:00:86:a3:51:bd:3e:0c:8b:
0d:e7:07:c7:09:01:b0:b9:9d:98:94:fe:46:5b:79:06:a6:99:
a8:fb:bb:67:23:5e:c2:4b:02:d6:30:31:39:cc:0e:4b:a8:cf:
52:98:9f:3f:ea:51:9b:94:7d:a5:35:1a:6b:0f:b7:53:f6:b9:
e1:a3:71:d3:2d:e2:13:98:b5:3d:17:dd:57:3e:ed:57:00:ec:
9a:49:85:c2:20:0b:c4:3a:07:3f:9c:7b:b4:e9:de:99:cb:05:
43:5f:a6:3c:0f:e2:a8:92:0a:f3:a7:18:cf:fd:86:f3:51:02:
99:4f:bd:d2:5a:d9:a1:a3:f0:c4:40:9c:ba:85:b1:92:85:70:
cf:89:64:5a:32:5f:e9:e1:45:f6:fa:31:21:21:2b:3d:01:e5:
75:12:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:45:21 2026 by rpki-client