
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier: ji031nqtSVOW9eWyooS2mHdl7P+SNBkTBEHQiZjMtfI=
Subject key identifier: 20:28:F3:47:ED:BA:CD:47:BB:65:94:04:75:0A:3D:4D:2C:86:C5:36
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 019EB620E405C1408463C7D9E08ADAAFACEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 10:01:09 +0000
Manifest this update: Thu 11 Jun 2026 10:01:09 +0000
Manifest next update: Fri 12 Jun 2026 10:01:09 +0000
Files and hashes: 1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: zEm5IJGhxUNg5aNtjLddmd82LleDWC6MPr4/fjKga1Q=)
3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:e4:05:c1:40:84:63:c7:d9:e0:8a:da:af:ac:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Jun 11 10:01:09 2026 GMT
Not After : Jun 12 10:01:09 2026 GMT
Subject: CN=2028f347edbacd47bb659404750a3d4d2c86c536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:50:3d:21:65:3e:2b:39:bf:a6:7c:91:9e:
ec:60:17:e8:10:8d:a1:4f:93:90:79:da:67:57:1f:
1a:72:ff:5a:db:11:98:10:68:fc:93:b3:4a:46:31:
1a:95:af:01:88:af:f3:d0:ae:ba:da:3b:08:e2:a2:
dc:83:3a:aa:0e:4a:e4:11:4d:96:9c:0a:3f:91:b9:
c2:0a:4c:55:58:f2:62:7e:a5:ad:da:06:b9:ce:0f:
08:33:f0:0e:c9:f7:21:29:92:cb:bc:33:60:2a:77:
cb:be:bd:7a:c6:60:63:cb:99:c3:82:56:06:99:d8:
01:b9:5f:61:db:ef:0c:a1:bb:f3:6f:47:73:e9:ae:
c9:0e:48:ea:7e:61:14:cf:f0:b1:fc:42:98:8d:c1:
91:16:18:d8:37:1a:35:d8:80:fb:e7:d3:89:5e:49:
42:70:88:58:2c:41:f8:1a:cd:71:44:75:92:4a:d8:
de:ca:85:18:a9:59:55:19:c0:08:4c:c4:01:ea:22:
8f:3e:cb:ec:f5:d1:d0:13:6b:b6:33:c4:b6:1c:98:
64:0d:12:56:99:a0:99:a4:0e:09:fc:9e:d7:a3:7c:
59:0a:0e:af:8c:ba:b6:66:3b:33:44:42:56:a3:02:
11:60:92:d6:b3:cc:f0:45:6b:89:9c:0f:a4:37:b5:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:28:F3:47:ED:BA:CD:47:BB:65:94:04:75:0A:3D:4D:2C:86:C5:36
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:75:9a:a6:16:ed:90:35:fc:43:87:dc:66:7b:00:95:81:
2d:fe:44:0b:30:d7:2f:8d:76:d9:1d:53:e0:4d:b5:ef:0c:72:
34:1f:a1:e8:41:77:f5:f4:03:97:05:d0:16:ec:01:7a:70:b7:
dd:fa:f1:14:78:ab:94:17:fd:a3:63:d1:f6:67:92:53:93:fc:
e3:39:ba:e3:92:0b:83:16:e9:c1:f7:67:f1:35:02:45:3f:0b:
b5:6d:4c:78:2c:b5:3d:43:b5:94:85:cb:40:6e:05:60:b2:a3:
1f:f3:ed:d3:58:48:f8:0e:f2:78:b3:15:72:32:b2:b5:c5:94:
a1:a3:e1:30:41:ab:be:f9:c8:f5:0b:6e:ca:e5:17:f6:a8:a6:
e4:9e:9f:c2:4c:26:91:ba:35:90:90:c8:57:16:6a:65:75:65:
69:30:af:70:33:49:7e:90:25:8d:10:51:3d:53:c1:22:f1:5f:
30:5a:2f:25:c0:c3:bd:7e:3a:81:5f:ac:b4:b3:9c:b2:52:4f:
ea:f5:61:3a:c3:be:c5:5d:8f:c9:57:42:1b:17:13:bc:c1:c5:
7a:e8:77:b9:2e:77:5d:f4:17:50:d6:09:83:78:ce:6a:bc:7b:
7f:b9:e6:b6:cb:07:fe:4d:b7:9a:76:be:6b:3b:36:a1:fe:a2:
2e:f0:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:07:55 2026 by rpki-client