Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: X9+p4rYLIgOzleCIag0RXEAB9nL6+bLO3Ml8JaI4CRQ=
Subject key identifier: 4E:0B:78:92:C1:D5:5C:F3:17:A6:BC:F5:20:05:10:A6:5B:50:94:DC
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019FA0A8669B7F0BE1F76B897FA31C56988C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 23:00:18 +0000
Manifest this update: Sun 26 Jul 2026 23:00:18 +0000
Manifest next update: Mon 27 Jul 2026 23:00:18 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: /F+/rfw0pOIx5QmM9MqBjZ3+WcfKxAXZ8v0PkS5TdgM=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:66:9b:7f:0b:e1:f7:6b:89:7f:a3:1c:56:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jul 26 23:00:18 2026 GMT
Not After : Jul 27 23:00:18 2026 GMT
Subject: CN=4e0b7892c1d55cf317a6bcf5200510a65b5094dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a5:9d:a6:a5:fd:cb:33:21:63:58:d7:88:63:
48:dd:c4:11:ec:36:f0:80:6e:28:9e:eb:e3:b0:0e:
1c:1f:55:c7:c6:f4:31:c3:de:6a:aa:8a:31:05:b8:
3f:bd:8e:24:c0:46:22:18:52:e1:b7:12:d7:67:88:
d6:5e:1e:36:80:46:79:5a:da:96:1f:e3:57:8c:26:
90:69:1a:fb:5c:6b:fc:c0:ad:61:14:a7:2c:57:5d:
43:11:5a:d4:6a:71:cb:03:81:71:b0:19:e0:da:df:
90:fb:0c:58:35:42:c2:c1:46:a3:eb:c1:38:4a:9c:
b7:4b:bd:f5:11:6b:dc:33:77:e8:c3:14:c4:26:85:
d3:c6:c4:02:f7:82:0e:9d:9d:aa:51:81:80:30:9f:
3f:48:6e:b0:50:85:f6:04:63:7f:48:ed:c4:43:b8:
01:9a:12:0f:86:45:b1:e3:9f:bb:bc:b3:de:41:53:
ab:6a:72:ae:d8:c7:4b:df:75:0a:65:e4:49:57:f0:
bf:ba:4a:e3:7e:69:af:48:fc:7f:33:bb:65:bb:1e:
b3:be:f7:96:84:ee:d1:f2:6b:16:8f:f1:0a:80:a5:
23:02:4f:ed:58:46:c8:88:44:5e:f1:5a:c9:6a:a5:
b2:66:e6:a3:2d:1a:40:62:7c:c9:f3:12:6e:38:15:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0B:78:92:C1:D5:5C:F3:17:A6:BC:F5:20:05:10:A6:5B:50:94:DC
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ec:52:3b:b1:dd:53:aa:c0:14:91:05:a8:e5:31:3a:99:30:
b2:76:44:5e:45:a7:08:fd:a0:6e:05:9a:dd:f2:59:c8:e3:20:
bd:fa:b6:84:72:bc:64:41:91:72:60:79:38:ad:9a:3a:e3:86:
8b:93:c8:f0:2f:6c:16:ae:1b:b5:21:fe:c0:55:d7:c8:2a:34:
82:7e:04:b4:5f:d2:50:6d:4c:ce:7d:dc:3f:42:59:8d:dd:6f:
26:c3:c6:94:c8:62:6c:44:09:60:f6:d8:75:b4:8b:f7:a2:4d:
a4:53:36:76:02:f2:d4:fd:77:15:b2:b8:a7:45:e6:a0:3c:10:
da:fb:b3:82:c1:6d:25:0b:b4:64:7d:b2:87:05:14:40:b3:77:
93:e3:b2:d2:41:00:66:fd:c2:c6:fb:c9:99:8c:4a:50:70:71:
41:46:f2:9a:a6:0c:90:98:21:e6:3c:2e:ce:4f:f2:20:f2:06:
0c:c9:5b:59:15:b5:13:31:a3:ea:e1:67:e2:c3:65:e6:7a:90:
ac:cf:48:6d:f2:31:ac:9e:e2:db:64:c1:f3:74:84:0a:b3:c1:
27:36:d4:a2:4b:b4:63:45:c5:02:9a:5d:5f:60:2a:c6:be:cc:
29:b0:cd:ce:5b:62:78:29:60:64:de:73:d0:36:38:09:7b:0c:
2d:8c:f7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:36 2026 by rpki-client