Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: h8cgnKvKT7DQ+i98BMntY5su7tKsd0rxXbTegD2igDg=
Subject key identifier: E7:06:C3:EF:69:40:B3:3D:6C:D2:B5:A2:6D:0F:74:E8:01:94:8B:73
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019DB057CAE834BAFAB28CF325154E00710E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0A98
Signing time: Tue 21 Apr 2026 14:00:36 +0000
Manifest this update: Tue 21 Apr 2026 14:00:36 +0000
Manifest next update: Wed 22 Apr 2026 14:00:36 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: 6/B3vgvhlzsV7IWh7t0s8gK83x9KL7pjYN+Z5xl14q4=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:57:ca:e8:34:ba:fa:b2:8c:f3:25:15:4e:00:71:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Apr 21 14:00:36 2026 GMT
Not After : Apr 22 14:00:36 2026 GMT
Subject: CN=e706c3ef6940b33d6cd2b5a26d0f74e801948b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:e3:f1:10:51:bc:fc:25:77:b6:b5:74:6d:
31:75:17:72:0f:ed:90:cc:c4:6d:98:6c:58:5f:0a:
78:f3:1e:60:d0:fb:fe:2c:18:b4:9b:32:2a:88:6d:
e8:3d:82:c5:29:e5:7f:11:83:90:ad:30:83:05:79:
e4:5f:06:34:55:ba:00:33:1a:16:19:c5:64:11:a8:
07:35:44:6a:d8:2d:51:3c:95:07:79:30:71:65:26:
7a:1a:6f:cf:8b:4e:a5:7b:07:e2:08:1b:a7:97:e6:
1c:00:30:eb:88:1e:fe:43:ee:85:bc:83:34:fe:e8:
46:22:d3:d6:aa:a9:fd:29:1e:b9:00:80:e8:27:43:
50:f1:5d:f5:fe:ad:64:01:11:5c:d0:8f:ba:4c:80:
fd:0a:1e:b1:38:71:d8:11:fc:d3:1d:d2:2c:0f:ac:
a8:8c:2f:9f:dd:91:70:02:4a:79:8b:be:34:73:14:
0d:af:a0:e2:35:c8:f4:c2:8a:60:3d:eb:e8:66:16:
8f:1d:5d:df:b4:89:e7:57:cb:f6:2b:a2:bf:dc:7e:
96:6e:f4:32:7a:4b:84:74:34:63:05:f5:8d:13:c5:
d9:1f:81:7e:92:78:1d:1f:3a:f8:18:ae:7a:62:8f:
a0:b1:db:25:b8:b0:c2:c5:6d:29:7a:2d:ac:a9:0d:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:06:C3:EF:69:40:B3:3D:6C:D2:B5:A2:6D:0F:74:E8:01:94:8B:73
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b8:a0:d1:7f:69:42:a1:53:20:f2:0f:e0:90:71:89:4b:07:
04:fc:03:d8:ff:c3:e5:52:29:29:27:50:03:4c:6e:74:e5:1b:
a6:b9:f5:a3:57:1f:29:64:28:49:ce:93:e7:b9:30:ff:a6:e2:
40:6d:b8:48:33:79:30:c6:67:ab:c4:97:02:e8:23:51:e2:77:
31:e3:8d:06:63:9f:b9:c1:2f:d1:23:2a:5f:f4:64:ee:f0:a2:
e7:40:3e:44:a5:d9:fd:8a:4a:e1:2a:a0:51:68:49:86:79:1d:
a8:2c:2a:4e:74:31:b9:dd:2b:91:67:4b:7d:5b:a6:69:b6:91:
52:02:fe:4b:4c:59:da:fb:b5:71:40:2b:45:c6:16:58:ef:0c:
7a:d2:b6:be:c8:c6:8b:a2:72:71:e4:7c:b5:bf:42:33:d7:4e:
10:98:cf:b8:49:8f:00:83:52:18:c6:19:ac:85:ee:cf:3a:93:
73:8c:b3:67:43:81:21:7e:36:9f:bb:45:50:59:5e:41:e6:21:
43:a7:73:73:4a:35:96:c0:a9:52:cb:0f:a4:04:59:2d:1b:56:
ae:e8:3e:5e:f8:f3:a3:d2:57:e7:94:db:2d:cd:83:53:25:89:
55:ec:14:b8:13:0a:ff:c0:c7:30:46:cc:79:b4:26:39:8e:fd:
71:36:e6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:19:21 2026 by rpki-client