Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier: M+Ah3iIdnKy3dcAhi5fuwlYq1RJ3SF1R4TydM83YvX4=
Subject key identifier: 88:27:EB:64:5D:FC:AD:43:17:E1:A4:8F:32:55:CC:F1:9D:3A:95:D7
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 019F9DDF4491E5DD8DEDCED8CA4E7804F066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number: 19D2
Signing time: Sun 26 Jul 2026 10:01:22 +0000
Manifest this update: Sun 26 Jul 2026 10:01:22 +0000
Manifest next update: Mon 27 Jul 2026 10:01:22 +0000
Files and hashes: 1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: g1jVz7prIQ1l61C+GWzHbyXEj2w/ppEx95nw/b9aFPI=)
3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:df:44:91:e5:dd:8d:ed:ce:d8:ca:4e:78:04:f0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Jul 26 10:01:22 2026 GMT
Not After : Jul 27 10:01:22 2026 GMT
Subject: CN=8827eb645dfcad4317e1a48f3255ccf19d3a95d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:34:98:1a:47:7d:54:f4:25:b2:e6:f7:19:
d3:dc:8a:4b:bb:03:83:4f:7a:73:fb:23:0e:3c:75:
5d:f8:34:08:8d:77:7a:d8:1b:5d:f9:6c:02:72:28:
ab:75:48:8e:27:2c:7a:86:b9:fb:20:33:8e:2a:65:
5e:b4:f1:df:c8:be:4f:07:c5:79:a9:8a:d3:5c:3a:
c8:bf:fb:0a:e4:9a:b2:3e:69:26:20:ae:fd:a1:99:
9d:6c:a2:f7:27:6d:a9:4a:67:1e:70:cc:d8:24:05:
5d:8f:d9:26:60:28:ce:7d:5f:7d:df:47:5a:ec:7b:
9a:b0:85:9d:0e:3f:70:c4:18:ce:68:5b:e9:e2:27:
04:ea:53:07:b1:8a:35:2f:de:68:6b:74:93:dd:5e:
05:83:76:15:3a:5e:2e:07:e6:f7:14:df:0e:43:ce:
24:cb:0b:2e:ff:b9:00:bc:92:65:d8:63:18:0d:db:
ac:8b:a8:5a:ee:96:9e:13:2e:b7:72:dd:b5:82:d9:
8e:32:36:e8:d4:60:3a:38:33:95:ee:c3:fb:30:5d:
c3:51:96:61:c0:e9:5d:74:a9:e6:0c:bf:6a:2a:25:
66:c5:96:77:68:f7:8f:f9:bc:0f:ab:5d:6c:f0:ff:
c9:eb:bb:34:bf:c6:af:48:98:ba:9e:c8:88:9a:d0:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:27:EB:64:5D:FC:AD:43:17:E1:A4:8F:32:55:CC:F1:9D:3A:95:D7
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fa:51:13:aa:f2:ef:c9:79:d3:51:aa:63:fd:e9:28:9e:27:
12:22:bd:64:d7:1d:e8:0a:5c:6f:49:55:db:61:9a:93:64:de:
30:56:db:c3:c5:a7:1f:93:f0:b8:5a:0c:0d:83:f2:99:f3:4f:
6c:63:23:0f:b8:99:c3:2c:a9:5e:8d:2c:29:61:69:c3:0e:7a:
49:ee:17:99:14:b7:e2:ed:e0:e7:36:1e:c4:7b:d7:43:46:12:
64:62:b8:f9:20:1d:5a:15:b3:77:32:c3:3e:ac:51:1a:13:58:
3c:35:e8:bb:61:ea:2d:91:67:5a:68:d6:15:8c:82:1a:0b:c0:
23:1f:f7:38:77:c6:b9:35:22:8e:eb:67:32:14:79:36:f9:36:
54:88:15:66:b6:3b:fa:6f:fa:35:37:a2:90:f3:a6:b1:3a:60:
37:74:74:34:cf:c3:dc:88:50:8c:12:57:d8:a2:97:18:e1:4f:
17:1c:7e:00:c7:f6:59:41:6f:63:8d:ed:73:d4:20:92:32:5a:
40:ca:ce:b4:54:d5:24:a8:19:12:2c:cb:53:fa:0c:3f:c3:01:
e6:d4:0f:ce:cc:02:3a:f5:f3:35:fb:ba:d1:8d:ee:75:b2:56:
fa:16:fd:35:6f:06:56:22:a9:03:4f:c0:8a:16:7f:4e:a8:2c:
a8:f3:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:51:50 2026 by rpki-client