Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: OQqLcEeB7k6NOiVuHAyHcR22Pzq1yUJHUyUEvqiGGBA=
Subject key identifier: 12:C8:6F:D0:0B:28:AA:2F:02:5E:29:72:2A:99:20:F7:EB:57:F0:B3
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019CC899E6D23770CA0088A5FDC1D06995F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0A20
Signing time: Sat 07 Mar 2026 14:00:54 +0000
Manifest this update: Sat 07 Mar 2026 14:00:54 +0000
Manifest next update: Sun 08 Mar 2026 14:00:54 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: a/N/8ZgUYhxjknYjCQRUJdRKIiGYYH4UT/OppgDHjHY=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:99:e6:d2:37:70:ca:00:88:a5:fd:c1:d0:69:95:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Mar 7 14:00:54 2026 GMT
Not After : Mar 8 14:00:54 2026 GMT
Subject: CN=12c86fd00b28aa2f025e29722a9920f7eb57f0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:c6:22:51:72:fa:60:dc:41:62:62:b3:52:
ab:1e:a4:dd:9f:eb:f8:bc:36:de:3b:91:83:5a:01:
1e:4d:fb:1e:09:2d:af:5f:83:07:33:49:e4:c9:0c:
e9:2c:3b:e1:83:6e:91:47:4b:df:75:be:d5:4a:d2:
db:08:1f:48:bc:ed:80:2c:c2:b3:2e:fb:37:4d:95:
37:5e:28:83:e6:a4:74:fb:c7:9c:b9:a3:10:45:9f:
ed:42:43:ec:01:9f:89:6d:b6:1c:ba:fe:0e:71:42:
29:90:cc:13:ea:a4:1a:01:da:bc:d6:7f:d9:f5:b5:
8f:29:c0:87:3c:f1:59:6d:ee:49:1c:cb:23:58:65:
6e:33:59:66:77:db:91:8d:1c:6b:41:ee:9b:35:93:
f8:4b:2b:f4:91:76:24:c5:75:f1:ba:9a:b6:f8:c2:
1f:0c:21:0e:af:cf:81:aa:be:3a:e1:18:5a:36:1a:
ba:75:9f:43:08:a8:e9:78:77:cb:7d:be:d8:53:11:
82:14:cd:b6:ea:0d:0e:49:cb:be:67:74:22:f6:1f:
6c:8e:48:ab:3e:96:b8:61:10:9e:b8:75:1c:7e:03:
8f:10:ed:14:75:83:ac:b8:67:97:99:0d:a0:f7:46:
ef:59:1b:4c:cf:df:bb:71:6c:04:5b:b1:dc:f4:95:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C8:6F:D0:0B:28:AA:2F:02:5E:29:72:2A:99:20:F7:EB:57:F0:B3
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b4:29:13:84:d7:93:8b:eb:d7:45:fb:0d:da:ac:20:be:b6:
ae:1b:bb:a3:82:ca:38:d2:b3:15:98:78:ab:e8:2f:14:2a:1f:
cc:99:3a:89:c9:7b:64:80:1c:73:cd:53:ab:5d:04:2f:6b:93:
6d:dc:22:7e:0d:66:8c:60:19:f2:58:f0:bc:cf:49:49:bb:a2:
fe:c0:1c:dd:0c:de:62:19:69:15:2f:bd:3a:5e:7d:77:83:68:
1a:b6:e5:a3:22:5a:d3:a4:d3:c3:57:8c:a7:87:89:76:6f:96:
11:86:c4:70:f3:43:5e:b8:6b:91:a1:31:c5:df:62:02:ec:d8:
d6:f5:25:ec:5e:20:01:7e:63:79:c1:9a:64:01:38:51:4e:13:
b7:73:88:ac:b8:47:71:4a:89:c2:48:73:82:7c:4e:ef:b5:ee:
a9:ab:71:89:73:b6:68:17:88:ab:d4:cb:dc:ff:78:40:6f:94:
78:14:65:67:eb:62:78:d4:e6:18:23:43:0f:bd:a7:df:dc:6f:
20:64:b9:0b:9e:4e:a8:ac:61:b2:e4:4f:ac:fd:36:08:2d:ae:
85:f5:29:fd:64:38:87:67:a3:18:04:91:eb:74:22:82:49:4c:
dc:95:fb:96:5b:26:28:d1:9f:e8:60:4b:c1:a0:da:23:67:fe:
d4:ff:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:06:50 2026 by rpki-client