Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
File: AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft (raw, json)
Hash identifier: z/jDKzrg7J9SIVtU3ayPQg/rb620fMUIpIpVHq/BImo=
Subject key identifier: F9:F5:5B:CE:66:91:08:06:9B:E4:77:CD:A0:20:28:10:9A:00:F9:F1
Authority key identifier: 00:64:1B:7B:07:72:1D:62:06:60:39:D1:85:F0:63:B5:9D:D1:C5:38
Certificate issuer: /CN=00641b7b07721d62066039d185f063b59dd1c538
Certificate serial: 01A03F3BF091DECEEB0BB9BC16BDA60787EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:01:27 +0000
Manifest this update: Wed 26 Aug 2026 18:01:27 +0000
Manifest next update: Thu 27 Aug 2026 18:01:27 +0000
Files and hashes: 1: 1LHEn3caqRdFx-FrVpJMaU0UBGw.roa (hash: JGFRK1aYZGR9nC1KAUCC1g5sne7T9Z9BLwNpceN88z4=)
2: AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl (hash: wZj/l7yIcWSd4unAqsh8EGJE/haYZ8oh84eh6eMYBL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:f0:91:de:ce:eb:0b:b9:bc:16:bd:a6:07:87:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00641b7b07721d62066039d185f063b59dd1c538
Validity
Not Before: Aug 26 18:01:27 2026 GMT
Not After : Aug 27 18:01:27 2026 GMT
Subject: CN=f9f55bce669108069be477cda02028109a00f9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:15:0b:6f:f0:53:5d:d7:e2:7b:cb:46:5c:
80:07:85:b5:0d:a3:82:ba:00:c1:da:5e:6e:8c:92:
65:8b:50:f3:06:c0:59:4b:84:8b:68:3b:5d:9b:aa:
ff:49:da:92:05:bb:80:38:52:68:e5:60:cb:45:bf:
05:e9:62:d2:54:c3:20:c2:ef:58:5b:c5:2f:22:a7:
7a:2c:66:1e:61:ba:4b:05:7b:8e:e8:de:6f:6a:08:
a1:58:32:ff:60:b3:b4:5b:e2:f0:64:e9:64:21:07:
6c:13:e3:f7:df:26:42:10:45:2d:b1:ed:71:9c:7d:
f6:b4:aa:b4:3a:da:e6:fa:21:80:f1:c0:bd:b0:14:
50:0e:dd:ed:bf:38:2b:26:37:ce:65:0b:1d:04:45:
79:58:b2:4e:03:b3:d6:d2:43:f0:57:fa:26:db:2c:
06:b6:3f:02:90:10:92:76:77:f5:fa:dd:8d:0d:07:
41:9c:59:da:0f:87:0b:b0:a7:87:d7:cf:09:80:28:
4a:93:91:e4:47:97:e5:6b:44:8b:9e:a2:ba:90:bc:
58:2a:bb:f3:f6:67:81:c5:6c:46:0f:d4:39:15:b7:
9c:fe:52:7e:76:2b:82:59:8b:a3:11:57:a7:b1:5a:
25:b3:56:21:a2:c7:db:fe:90:b7:38:9a:57:61:35:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:5B:CE:66:91:08:06:9B:E4:77:CD:A0:20:28:10:9A:00:F9:F1
X509v3 Authority Key Identifier:
keyid:00:64:1B:7B:07:72:1D:62:06:60:39:D1:85:F0:63:B5:9D:D1:C5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:12:91:8a:f8:97:d4:df:65:4b:a3:3b:7a:19:98:af:14:6d:
b4:40:3b:8d:80:27:8e:a0:b1:81:8e:71:0d:1d:9b:2b:45:61:
c9:af:fd:71:6a:9f:f2:c2:91:74:91:6c:da:c4:9d:88:85:24:
9b:82:cd:ed:cb:4a:27:48:47:52:42:4a:df:6b:dc:b5:48:a7:
b0:f0:84:f3:ea:89:77:3a:2c:3e:fa:28:22:5f:cd:93:c6:31:
ff:f7:1e:ab:17:49:27:b1:67:8a:d8:6a:0d:2c:d0:eb:cf:25:
5a:0a:4a:b9:3a:b4:5d:14:4b:9c:dc:55:35:f4:38:42:b0:2e:
f1:1e:fa:fc:de:fa:9e:03:88:80:e1:2a:7c:0d:5c:e2:5e:79:
90:ca:a0:8c:31:4e:2e:44:1b:88:ed:22:3c:cc:46:6d:a5:d0:
c6:ae:68:92:30:07:1a:51:a2:f0:24:8e:9b:53:a9:cc:3e:91:
50:1a:51:04:5d:27:22:23:17:c6:9e:12:56:9e:ee:d5:44:6d:
66:f5:3a:f6:05:ab:42:44:f3:c8:d4:53:0c:17:2e:64:6e:56:
40:b5:e0:d9:60:17:b4:a4:ea:db:4c:5e:e7:f7:0d:cb:98:aa:
c0:72:bd:b4:e4:b1:b1:2d:05:69:f8:98:01:d5:98:86:55:e6:
79:4d:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:34 2026 by rpki-client