Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier: JfDlulGMYJunr55OsidllWKCtmDx3HFCkOhCp1VR+CM=
Subject key identifier: 86:41:3E:2A:0F:E6:35:1E:0C:40:A5:16:02:B5:0B:12:37:08:C2:76
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 01A178F1A298D5DFB200C1A1BC1D44EAB025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number: 1AC8
Signing time: Mon 26 Oct 2026 16:01:04 +0000
Manifest this update: Mon 26 Oct 2026 16:01:04 +0000
Manifest next update: Tue 27 Oct 2026 16:01:04 +0000
Files and hashes: 1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: 61KTu6avA3ksy/p5EPihCZf1ssI/Sq8fFvzSBLNvjHQ=)
3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:a2:98:d5:df:b2:00:c1:a1:bc:1d:44:ea:b0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Oct 26 16:01:04 2026 GMT
Not After : Oct 27 16:01:04 2026 GMT
Subject: CN=86413e2a0fe6351e0c40a51602b50b123708c276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:d1:b0:99:07:db:38:de:a2:23:dc:4e:0c:
5d:d6:f6:f5:b3:be:e5:87:45:6f:50:29:a2:93:43:
cc:b3:56:b2:9f:33:ab:bb:fa:4e:16:ca:7d:d9:05:
8d:59:b2:d1:14:81:3d:1c:1c:3a:6e:4e:1f:b0:af:
64:93:c0:38:78:f3:2c:64:c4:f6:22:e4:fe:35:bc:
8b:0a:02:9d:5a:e0:4f:e4:e4:02:77:02:15:17:56:
91:aa:42:91:8c:bd:60:d6:38:a4:07:50:f8:87:94:
3b:5c:ad:b8:4e:dd:04:b2:be:a5:c2:08:92:28:a1:
0a:e4:3a:69:7b:ca:d4:19:24:9f:b9:2a:7e:b9:7b:
3b:78:bc:8a:34:44:b3:54:ad:88:37:c6:99:24:0b:
f5:e3:98:cc:a9:4c:7f:b9:69:6b:53:d9:0d:0c:95:
a2:42:b8:66:ce:31:91:69:cd:e8:a9:6d:da:e1:df:
97:57:72:7d:77:52:39:be:64:8a:7c:94:db:1a:7f:
ae:79:78:4f:e8:e2:22:10:4a:e9:fe:8e:cf:21:6f:
38:0f:5d:33:66:5e:ae:e4:2e:29:50:69:31:ab:9c:
91:cb:85:04:4a:7b:e7:12:bd:1b:1a:80:5f:1f:08:
d4:ae:62:d8:4c:8f:36:ae:5b:df:ce:9c:59:34:69:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:41:3E:2A:0F:E6:35:1E:0C:40:A5:16:02:B5:0B:12:37:08:C2:76
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0f:61:f9:bd:c2:18:c7:80:aa:2a:85:2c:3d:04:d4:60:03:
58:4e:d6:be:d3:fb:37:d2:65:11:32:22:05:89:52:cb:a6:f1:
6a:88:c0:f6:07:c5:b1:aa:96:1d:44:e2:c4:3e:e4:1a:9e:ac:
d0:04:fd:0b:57:4c:75:41:7b:63:3a:19:93:ef:ce:2a:a9:50:
35:01:6c:dc:33:87:34:fe:42:57:bd:8e:8d:71:c7:37:b3:84:
f0:6a:08:a2:a8:08:0d:e9:06:2e:a3:6c:dd:72:2c:d7:b5:29:
92:58:cc:a3:6b:52:ee:ce:82:52:be:50:c1:c6:17:db:da:c5:
08:a5:a9:9a:4b:ca:37:0d:f7:2c:39:5d:32:34:d2:99:e4:a0:
1c:e5:fa:8c:38:dc:38:97:26:b6:10:8d:98:7f:3a:70:7b:50:
1e:64:fe:cd:04:7c:56:92:84:6e:c1:3b:29:e3:6b:5b:b8:b6:
3d:52:21:03:a0:39:55:69:f1:62:39:2b:ed:ac:d2:b9:24:fe:
12:44:40:2f:e3:bc:c4:8c:55:29:74:7f:b6:97:07:0c:cf:7c:
6c:e0:85:dc:1a:96:9a:3e:7f:11:39:da:9e:47:90:91:4d:0f:
af:97:90:f0:3b:20:85:c5:30:30:4c:e7:77:49:36:0f:a4:f0:
7e:7d:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:04 2026 by rpki-client