Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: ilJTRZPGHYAE1RAIVqJmPWyhOCsVhAhs6zf0T6yVI+c=
Subject key identifier: 6D:4D:32:33:1C:9B:3C:9F:F8:EB:5D:B1:86:71:DD:54:53:EC:3E:DB
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 01A08C43A9864460563BC87C9931D375857C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 17:00:39 +0000
Manifest this update: Thu 10 Sep 2026 17:00:39 +0000
Manifest next update: Fri 11 Sep 2026 17:00:39 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: ZciQgCGjh5uElHDa/6u20QjMj/nWHK5EMkbKn3LHCvc=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:a9:86:44:60:56:3b:c8:7c:99:31:d3:75:85:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Sep 10 17:00:39 2026 GMT
Not After : Sep 11 17:00:39 2026 GMT
Subject: CN=6d4d32331c9b3c9ff8eb5db18671dd5453ec3edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9b:7c:4d:a3:4f:f7:2b:dc:85:ef:82:6e:16:
a7:aa:da:7a:74:7a:0a:40:10:17:0c:52:c0:46:49:
7c:e2:9c:f1:9b:3d:0f:0a:2d:e2:2a:b9:03:69:c7:
aa:2a:bd:45:59:7c:5b:3d:7a:85:10:e9:97:e1:d4:
85:54:b7:ee:b0:31:cf:51:80:5a:ee:57:cd:a8:00:
55:0c:1e:97:d5:79:b0:6b:ad:14:a0:44:00:3e:1a:
1c:1a:df:b7:8a:28:56:e6:3c:3b:87:bf:85:5a:c1:
a6:ec:48:cc:21:50:20:8f:a9:04:73:ac:c7:dc:c2:
d1:46:2c:ce:c0:16:8e:81:0f:ef:1e:b1:04:06:29:
b0:b8:a4:e3:c4:6f:0f:81:2f:48:13:d3:7a:b6:54:
3d:c2:fd:73:1e:34:e8:f1:47:c1:e6:6b:3d:7b:40:
e9:fc:88:0e:64:2c:ab:2b:c7:4e:91:a7:f8:a4:58:
be:18:2d:f0:98:64:1f:60:bb:52:ef:54:36:46:42:
b7:f1:ec:c4:be:0c:48:95:d2:eb:55:61:d5:ac:42:
88:d6:b4:b9:1c:4b:d3:af:ef:fb:c0:2c:24:91:5e:
a4:98:eb:bf:e8:d6:d3:f0:a1:2d:15:f5:bc:11:8a:
4f:27:06:13:85:5d:a6:59:07:3a:1f:65:b2:7e:2a:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4D:32:33:1C:9B:3C:9F:F8:EB:5D:B1:86:71:DD:54:53:EC:3E:DB
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6d:31:8c:ca:85:59:6e:0b:6e:05:9f:6e:05:04:e1:1c:7e:
33:5e:d9:ff:54:67:63:ae:c4:52:d3:7a:b4:6b:2e:42:3d:f9:
eb:67:a2:31:f8:22:d1:f7:c1:6e:d9:5c:93:b7:0b:30:56:e6:
90:0c:f2:f9:f0:5b:4e:ef:0b:b9:cd:52:68:ea:a2:35:ea:c6:
72:bd:fd:e0:f7:7d:07:bc:d9:7f:41:24:eb:33:78:47:6a:c5:
c0:c1:43:c8:20:a1:03:6b:2a:9e:90:a9:b6:83:a7:ea:3a:3c:
c7:3a:e1:78:f4:53:f6:5b:85:7a:f9:cf:54:0d:0d:1c:4d:83:
97:43:f6:41:9a:f5:a4:c2:95:2d:ea:7d:d8:80:0f:42:cf:94:
6d:dd:dc:78:da:ef:37:e4:bb:0e:7b:37:9a:7e:22:24:11:84:
e1:0d:9b:49:0d:48:6c:1a:f8:6d:70:3e:84:fb:a9:fe:86:36:
55:db:58:7d:ee:d1:55:e5:46:ff:ad:20:b3:25:e6:6d:05:02:
cb:7b:17:cf:92:e6:47:64:fb:c9:85:e1:51:41:9a:19:09:ed:
4f:b7:8a:a3:18:b6:4c:7f:f9:b7:fe:0b:04:72:7b:d7:6c:ff:
cf:2f:fd:d7:7f:4d:b2:c9:97:de:f2:60:56:31:a3:57:2d:ec:
3f:3e:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:22 2026 by rpki-client