
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier: UFd92G618rtVOAlbBiYutvX87m8PEIKxJSux9sIOx3U=
Subject key identifier: 09:70:61:7F:BD:50:61:D8:E5:F2:2E:E4:7A:A6:55:8E:C8:0F:FC:8D
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 01A0859CA98412FD060B41CB258C74AEA348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number: 1A4A
Signing time: Wed 09 Sep 2026 10:00:31 +0000
Manifest this update: Wed 09 Sep 2026 10:00:31 +0000
Manifest next update: Thu 10 Sep 2026 10:00:31 +0000
Files and hashes: 1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: 7+0yTA1a/lq3XC0h5tVoAQYYAZZo3gSGr2wXZ5ceww0=)
3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:9c:a9:84:12:fd:06:0b:41:cb:25:8c:74:ae:a3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Sep 9 10:00:31 2026 GMT
Not After : Sep 10 10:00:31 2026 GMT
Subject: CN=0970617fbd5061d8e5f22ee47aa6558ec80ffc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:1f:df:07:70:19:d1:71:e0:d3:bd:66:32:
38:3d:25:5f:ac:e1:26:30:6f:c2:1f:b4:69:3e:be:
e6:d8:d1:51:06:51:de:e8:8a:5f:9e:3c:5a:41:64:
72:89:8a:a7:52:94:8a:1d:02:f8:48:84:5c:ab:6d:
c7:f8:22:42:cc:09:bb:7f:55:a6:4e:f6:5e:e6:f7:
93:09:35:ad:53:d4:d5:ad:fd:5f:21:0c:53:3e:db:
cf:50:d9:b4:a6:80:0b:79:e6:1c:73:8f:9a:5c:09:
06:ee:42:fc:77:8b:b5:d7:83:51:73:eb:81:3f:78:
d5:35:82:b6:c2:c9:30:ae:30:a8:c6:1d:c0:79:8a:
91:61:57:d2:a7:cc:34:a0:5c:7c:0f:fe:82:69:4b:
24:29:d7:9f:3a:3a:77:bb:e6:ec:e2:84:86:10:b7:
e7:c8:80:0a:4e:df:70:0c:9d:2f:a0:43:49:c7:3a:
a9:ef:5f:45:4b:00:64:36:96:db:79:fd:97:52:c9:
38:bf:c5:5b:21:75:f3:65:90:83:fb:d3:0c:4a:d1:
7b:fd:28:52:5d:9b:cf:2b:87:f1:a0:df:24:60:2e:
dc:69:50:98:cf:f7:43:9f:13:50:57:12:5c:3e:3c:
03:88:4b:f9:f0:28:a7:2a:e2:61:77:94:9e:34:70:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:61:7F:BD:50:61:D8:E5:F2:2E:E4:7A:A6:55:8E:C8:0F:FC:8D
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:44:3d:0f:33:c7:5a:93:f5:92:4c:cf:a0:65:d4:8e:ee:e1:
74:c7:75:e9:cd:05:ee:8b:32:d0:de:20:45:df:0e:45:72:eb:
a8:4e:71:19:e1:7b:33:7d:51:23:9b:16:87:f0:20:6c:fd:6c:
82:18:5b:21:fd:da:b9:c2:37:13:f5:58:35:e9:26:a6:14:e3:
96:a0:0a:12:31:29:26:56:69:55:4d:e7:d3:91:19:18:2f:0c:
12:00:2c:36:64:6a:63:79:de:e3:76:67:65:1b:3d:5b:c7:a5:
f1:f4:12:c2:97:36:fd:86:a8:d6:9d:6d:ae:01:e9:26:26:5c:
28:d9:d7:4e:65:cf:72:d1:d0:4b:6a:30:da:bd:5d:e1:85:32:
e9:49:59:8d:7c:7d:9d:f6:54:cf:82:ea:35:69:e3:77:21:c3:
fb:33:1f:19:3b:5e:47:da:d9:1a:f8:6d:f0:e0:57:e1:35:53:
a9:49:59:a4:5c:d9:13:57:eb:71:9b:2a:1b:84:d4:45:50:26:
fe:2a:6d:dc:77:78:2a:78:06:21:8d:4d:72:aa:30:29:a4:0d:
f8:f8:a3:e3:fc:c0:33:93:0a:3e:a6:10:c9:31:af:53:ed:a1:
c3:5e:7d:c2:41:7e:87:f8:7e:e2:52:14:fd:b5:81:98:bb:fd:
40:f7:c1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:18:52 2026 by rpki-client