Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier: +QACuxRPhXUF+3SQpN/rAIT2ARFYSkC0MkjNhT9woL0=
Subject key identifier: 42:79:E4:8D:6B:27:5F:BB:39:36:2B:21:4C:E7:5E:46:EE:FE:0E:65
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 019DCC742353DA18C3685D2EC3B8DD4A11F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 01:00:56 +0000
Manifest this update: Mon 27 Apr 2026 01:00:56 +0000
Manifest next update: Tue 28 Apr 2026 01:00:56 +0000
Files and hashes: 1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: mpN4IlsO5h6njxRJ/f/mZxgXNjzXPMXGHc/sL6FnecE=)
3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:23:53:da:18:c3:68:5d:2e:c3:b8:dd:4a:11:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Apr 27 01:00:56 2026 GMT
Not After : Apr 28 01:00:56 2026 GMT
Subject: CN=4279e48d6b275fbb39362b214ce75e46eefe0e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:d1:29:a7:57:a7:9e:38:1d:7f:47:85:0f:
0f:c0:17:74:3b:0f:1a:21:20:6d:c5:15:91:39:97:
8d:52:b0:43:fc:5c:5a:80:60:e2:4d:d7:ac:04:af:
a1:03:96:39:20:0b:5d:6a:50:b9:be:e4:df:49:40:
83:af:0d:78:ce:ea:0c:9f:9e:b5:a7:46:e0:ab:b0:
6c:36:33:d8:c2:4f:73:38:77:04:97:68:16:87:a6:
d8:da:bb:57:0c:65:b5:ef:bb:d9:a5:67:f4:02:db:
d3:dc:e1:a7:3a:aa:10:7f:a9:20:82:fe:78:d1:85:
1c:06:54:79:1a:67:38:c4:48:e0:a0:fc:8d:df:e7:
14:10:8d:1a:f1:53:60:69:7c:15:ac:f1:2b:01:c8:
a4:ac:a7:28:97:1e:9b:1f:62:fd:07:34:17:1e:c4:
a6:ef:e7:72:20:04:b0:f6:0c:90:8c:99:7b:1e:58:
bf:70:f7:df:a6:8f:dc:3c:a1:f0:64:1e:ca:1a:7d:
4e:8d:e2:b9:ae:19:0d:32:58:28:b1:6e:40:48:30:
a8:3e:4e:a9:03:78:2f:4f:63:1b:35:e0:39:67:b1:
33:6e:73:00:c9:2b:ab:14:8e:1e:63:34:60:90:c2:
ba:de:c6:9f:e8:dd:a2:71:2a:bf:ed:e2:44:f0:0a:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:E4:8D:6B:27:5F:BB:39:36:2B:21:4C:E7:5E:46:EE:FE:0E:65
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9b:eb:d5:e3:f2:22:14:c7:c8:86:3f:0f:d4:89:92:bb:7b:
ab:bf:8f:fe:fb:52:a3:a9:2d:a7:b2:9b:43:3c:dc:66:3a:85:
d0:14:23:b6:b6:af:df:2c:f9:82:41:2b:ae:23:52:31:6f:76:
31:3c:43:e0:2b:a6:95:0c:a2:57:7b:91:6a:70:61:3b:1b:94:
d5:d7:4b:36:7a:9c:77:39:b0:43:42:2a:49:18:bb:a4:81:87:
20:0d:01:9f:20:eb:0a:82:27:8b:1e:28:f1:4a:ee:53:7a:fd:
9b:56:fc:8e:a5:c4:68:16:3c:68:0f:d2:fd:bd:c3:57:6b:67:
49:a4:74:af:fd:ac:f9:3c:ee:f9:3e:3f:37:41:d8:59:20:aa:
88:89:e1:59:70:c8:ef:d4:b2:44:27:8b:94:5b:4c:51:8f:86:
9b:dd:a4:a5:e6:20:1e:57:7a:68:90:95:ad:15:43:8f:81:52:
7a:22:2c:33:60:48:53:1e:fd:6b:fd:1b:83:ff:89:ab:3c:81:
79:71:b8:be:ee:71:3b:19:c5:17:d5:9a:36:37:76:91:f4:fe:
6b:88:56:59:cb:d3:20:6e:26:8c:4b:98:3c:ed:86:e3:75:6b:
be:e9:da:8b:4f:0a:35:7a:4b:ab:7a:9f:c4:87:94:46:fe:80:
fb:83:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:04 2026 by rpki-client