Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
File: AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft (raw, json)
Hash identifier: XVX8pO6tUdTyU5MZLgxuiXGQRY0ounYMYnrcTY+6VqQ=
Subject key identifier: 7E:8F:68:C9:19:C2:38:94:87:2A:69:00:0A:AE:C0:07:77:AC:81:DD
Authority key identifier: 00:64:1B:7B:07:72:1D:62:06:60:39:D1:85:F0:63:B5:9D:D1:C5:38
Certificate issuer: /CN=00641b7b07721d62066039d185f063b59dd1c538
Certificate serial: 01A1483C40BDA828BB2BC76C663783414230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
Manifest number: 0124
Signing time: Sat 17 Oct 2026 05:01:10 +0000
Manifest this update: Sat 17 Oct 2026 05:01:10 +0000
Manifest next update: Sun 18 Oct 2026 05:01:10 +0000
Files and hashes: 1: 1LHEn3caqRdFx-FrVpJMaU0UBGw.roa (hash: JGFRK1aYZGR9nC1KAUCC1g5sne7T9Z9BLwNpceN88z4=)
2: AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl (hash: tHcA2R2B22/Z6FysUsB6kfMn4agipdFF/dPtAfTwib4=)
3: TVB0_E2KqLreYZmGB-ctEX6GA-Y.asa (hash: jdcHKKQpPfeQbmp/MbhyPskNpABx3dwvkIeGRRHhdfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:3c:40:bd:a8:28:bb:2b:c7:6c:66:37:83:41:42:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00641b7b07721d62066039d185f063b59dd1c538
Validity
Not Before: Oct 17 05:01:10 2026 GMT
Not After : Oct 18 05:01:10 2026 GMT
Subject: CN=7e8f68c919c23894872a69000aaec00777ac81dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:d4:e8:ac:20:e6:89:2b:39:3f:c0:b2:05:
c0:43:cd:bb:3a:0f:a5:4f:6c:97:be:45:3a:99:5a:
1a:9b:0d:ed:df:28:c8:f4:78:46:7c:1f:45:df:c6:
4f:b0:fc:75:43:c5:cf:d1:fd:de:dc:e2:a0:7e:5b:
d0:3c:b9:11:63:22:7f:a1:d6:2e:d4:06:79:12:3a:
12:64:ae:71:10:10:a3:66:4c:c7:a1:43:9f:eb:da:
09:86:1f:d4:52:c1:aa:14:ed:0c:1a:76:62:71:e7:
2c:3e:86:19:e1:b7:32:b2:a9:0f:c0:fa:10:f6:b7:
53:85:d6:47:bc:da:d4:c5:3f:08:a9:d9:13:97:5e:
92:27:14:3a:41:dd:48:59:ea:e6:db:1c:3e:85:8b:
79:ec:b7:24:8a:f0:cc:d9:c3:44:f4:b2:4f:ac:dd:
db:7d:5c:67:f4:e7:5a:3c:8e:21:05:f1:d3:ec:20:
0d:ff:98:0c:45:97:11:8c:3a:52:6a:b9:88:93:76:
11:4f:92:e8:a7:c6:4d:f0:51:07:59:21:f2:97:0c:
f9:fd:93:3e:d0:27:63:65:c9:37:1e:cd:46:f6:a5:
f3:4a:af:39:8a:fc:4a:0f:34:52:76:19:d6:26:ac:
7e:ad:d1:90:5f:23:d7:c4:1b:73:e1:1e:1f:7b:86:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8F:68:C9:19:C2:38:94:87:2A:69:00:0A:AE:C0:07:77:AC:81:DD
X509v3 Authority Key Identifier:
keyid:00:64:1B:7B:07:72:1D:62:06:60:39:D1:85:F0:63:B5:9D:D1:C5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:58:9d:ce:aa:0d:52:5a:81:52:19:2b:00:77:d5:17:8a:90:
b0:75:72:9a:0e:9e:84:96:a8:fc:8e:dc:46:1a:f8:71:c5:65:
13:8b:f2:20:9b:7c:2e:13:d0:b4:ab:65:b7:b7:bb:74:a7:80:
66:fd:a4:b6:29:62:71:ce:ab:3a:88:4a:33:2c:15:9f:62:08:
0b:38:39:9d:8f:a9:f1:61:a6:c4:89:f3:90:1f:ec:58:6c:03:
22:d2:9c:28:8f:8f:1d:ee:f5:c4:ee:2e:4a:f5:9a:61:bb:0e:
66:e7:0b:33:b4:82:0c:67:68:bf:75:40:2e:d5:51:b6:9a:d9:
87:b8:d9:69:6e:25:87:27:4f:55:2f:70:03:a8:a7:7e:e2:be:
60:db:23:6b:88:52:48:14:a0:7b:89:52:b9:04:10:15:09:94:
d1:5f:e9:7c:f7:2e:97:81:7e:ea:03:6b:76:74:78:33:ba:95:
00:41:bf:bc:20:65:5d:1b:73:7f:a5:90:51:9f:4b:8d:50:0d:
8c:49:78:04:6d:34:3e:81:8d:61:54:3c:14:17:2c:a7:ff:ac:
5a:cd:bb:52:41:40:40:6c:03:dc:23:1c:41:88:c3:56:a7:51:
1e:76:84:80:11:ec:a0:eb:e4:08:9c:fe:fd:39:25:aa:a5:d4:
6a:a0:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:58:26 2026 by rpki-client