Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: XF8+hn1qJbjm8dDfFJXlm8QJXs+rq2PAHAbUMJhJxek=
Subject key identifier: C1:9D:7E:D4:B1:B0:13:56:80:96:44:66:BD:6C:9D:EC:F6:04:72:8A
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019E9A048EB7E57CD2BC3ED96881AF41CF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0B11
Signing time: Fri 05 Jun 2026 23:00:50 +0000
Manifest this update: Fri 05 Jun 2026 23:00:50 +0000
Manifest next update: Sat 06 Jun 2026 23:00:50 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: rvsFj/avgC0NTZ780cEwwelRdnuG31g74Q7upNdub4A=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:04:8e:b7:e5:7c:d2:bc:3e:d9:68:81:af:41:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jun 5 23:00:50 2026 GMT
Not After : Jun 6 23:00:50 2026 GMT
Subject: CN=c19d7ed4b1b0135680964466bd6c9decf604728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:48:e4:ad:57:ed:7a:eb:ee:ad:4a:51:b7:
98:e7:b5:75:3f:a0:25:90:b7:67:ac:65:95:50:52:
d5:ac:0e:75:b9:cd:44:6a:d8:84:44:14:92:22:5e:
81:ae:ea:2d:4f:41:3f:82:fa:ab:52:45:16:ae:05:
55:8e:6e:fd:80:60:c4:2f:75:ed:c1:0d:d1:39:91:
ab:54:41:28:c3:0f:c9:57:2f:fc:93:ac:75:a4:64:
25:e1:a6:14:c9:37:07:82:71:98:17:c7:06:6a:40:
f8:54:18:14:9b:e3:d2:b8:2f:9e:d9:48:bf:56:c2:
d2:fc:ba:68:69:9a:a1:c7:1a:c5:65:2a:d7:b2:5a:
6a:c0:2c:bb:25:cc:14:d9:90:7b:f7:a9:5e:ee:28:
1c:a8:bd:aa:1f:da:7e:f7:58:51:f1:5b:41:8c:bc:
7d:dc:54:d6:83:fb:56:83:1a:e9:2c:ca:2b:20:7b:
b4:17:2d:c6:e6:76:fd:b7:87:5d:0d:99:e4:5f:a5:
46:2f:4d:ad:2b:18:d3:0c:c6:98:b0:8a:0c:9c:0b:
04:6b:5f:4b:f9:90:f3:6b:4a:83:5e:9c:66:7f:de:
78:fb:60:17:d0:ea:76:56:1c:a7:3e:fd:f9:62:3f:
8b:54:59:4b:d0:a9:b7:da:8d:66:06:17:cf:99:e8:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:7E:D4:B1:B0:13:56:80:96:44:66:BD:6C:9D:EC:F6:04:72:8A
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a2:20:9a:20:e5:da:0f:48:05:ae:d2:4e:f7:d8:c0:8f:93:
86:05:a9:a6:d6:13:fe:c0:09:00:e6:6e:c9:85:3a:95:a2:11:
8c:9a:6f:fa:43:b8:c0:ab:0b:b8:33:66:bb:47:63:e6:30:87:
23:63:64:d2:ca:c4:4f:22:5e:b6:51:ad:7c:fb:82:bf:be:98:
25:4c:8f:63:51:be:eb:6f:cd:09:32:da:10:f6:8a:26:97:8d:
b8:7c:40:70:91:22:f3:16:7c:89:7c:bb:06:53:b3:71:34:96:
22:3b:7b:28:50:2e:a9:d7:6d:b2:89:ab:d8:3d:bf:78:e5:ec:
5a:e7:4e:d6:5e:69:32:ea:f7:c6:3f:12:da:7c:9c:13:77:a5:
d5:cd:76:13:f5:68:d7:65:ae:85:c8:04:1d:ee:b4:79:ec:7f:
95:1d:4c:36:35:be:33:d6:01:d9:39:f6:8f:e7:9f:c5:1c:24:
ae:42:62:23:ad:34:b2:88:65:23:88:ab:9b:d1:2f:0f:39:bd:
d8:77:3f:31:95:14:7b:2d:29:df:82:21:31:f0:3f:cf:c9:cc:
6b:81:dc:f0:e8:a2:8c:21:e7:5b:01:62:0c:ee:ba:17:f8:f4:
fe:3b:df:a9:30:0a:ac:84:49:ac:8b:e1:74:d6:ce:54:96:9f:
48:60:fc:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6aBI635XzSvD7ZaIGvQc9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm
NmExMTMwHhcNMjYwNjA1MjMwMDUwWhcNMjYwNjA2MjMwMDUwWjAzMTEwLwYDVQQD
EyhjMTlkN2VkNGIxYjAxMzU2ODA5NjQ0NjZiZDZjOWRlY2Y2MDQ3MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUVI5K1X7Xrr7q1KUbeY57V1P6Al
kLdnrGWVUFLVrA51uc1EatiERBSSIl6BruotT0E/gvqrUkUWrgVVjm79gGDEL3Xt
wQ3ROZGrVEEoww/JVy/8k6x1pGQl4aYUyTcHgnGYF8cGakD4VBgUm+PSuC+e2Ui/
VsLS/LpoaZqhxxrFZSrXslpqwCy7JcwU2ZB796le7igcqL2qH9p+91hR8VtBjLx9
3FTWg/tWgxrpLMorIHu0Fy3G5nb9t4ddDZnkX6VGL02tKxjTDMaYsIoMnAsEa19L
+ZDza0qDXpxmf954+2AX0Op2VhynPv35Yj+LVFlL0Km32o1mBhfPmej1ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGdftSxsBNWgJZEZr1snez2BHKKMB8GA1UdIwQY
MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et
ZTY2NzllN2I3OTVhLzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh
LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaIgmiDl
2g9IBa7STvfYwI+ThgWpptYT/sAJAOZuyYU6laIRjJpv+kO4wKsLuDNmu0dj5jCH
I2Nk0srETyJetlGtfPuCv76YJUyPY1G+62/NCTLaEPaKJpeNuHxAcJEi8xZ8iXy7
BlOzcTSWIjt7KFAuqddtsomr2D2/eOXsWudO1l5pMur3xj8S2nycE3el1c12E/Vo
12WuhcgEHe60eex/lR1MNjW+M9YB2Tn2j+efxRwkrkJiI600sohlI4irm9EvDzm9
2Hc/MZUUey0p34IhMfA/z8nMa4Hc8OiijCHnWwFiDO66F/j0/jvfqTAKrIRJrIvh
dNbOVJafSGD82A==
-----END CERTIFICATE-----
Generated at Sat Jun 6 06:59:07 2026 by rpki-client