Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: hLykpdzNin/J6GUd12ZQhv1Cfhq/fSQ2fvBVdriyxFk=
Subject key identifier: DF:EA:6D:B9:F8:81:A2:A8:D6:94:21:04:6B:50:92:2A:C2:9A:C9:36
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01A1686B2BE5BA0314AC97124BC5754CA867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0C85
Signing time: Fri 23 Oct 2026 11:00:16 +0000
Manifest this update: Fri 23 Oct 2026 11:00:16 +0000
Manifest next update: Sat 24 Oct 2026 11:00:16 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: vJqBkhYna8j3MXyfBUyifFQepclmq88IvrzQTiroBxA=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:6b:2b:e5:ba:03:14:ac:97:12:4b:c5:75:4c:a8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Oct 23 11:00:16 2026 GMT
Not After : Oct 24 11:00:16 2026 GMT
Subject: CN=dfea6db9f881a2a8d69421046b50922ac29ac936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:2d:0e:ce:76:6d:bf:6b:fc:53:9c:f3:19:
c9:df:bb:4d:ca:8d:e2:88:e6:63:fe:4b:c0:d4:a4:
57:17:5e:33:54:6d:ca:d4:1c:df:ec:26:0d:78:ed:
85:2c:84:f5:de:8a:76:72:cf:bd:ff:cd:53:f2:68:
83:94:11:10:b2:ef:26:77:ae:3c:ba:71:9d:67:7d:
cd:4d:c0:34:a2:05:f2:e2:a5:9e:99:9a:ea:d7:7a:
ea:ca:2d:b5:68:ed:f2:29:40:fb:17:ee:24:0c:7c:
bc:45:c3:0f:2b:75:4a:42:c5:ab:cd:00:2f:c2:e7:
ac:10:2a:b5:87:f0:01:78:e0:d5:e6:48:4c:20:0f:
26:fc:96:50:64:ad:06:74:97:8f:e4:e2:55:06:57:
2b:0e:48:41:a4:e7:fa:b2:3d:79:66:f4:a8:87:78:
5b:8d:d1:48:da:ec:ec:8f:dd:59:54:01:68:66:8b:
04:b7:7b:03:65:ee:a8:98:e3:18:d5:c9:93:70:5c:
4a:06:30:a0:f6:cc:41:91:ea:93:ef:a5:ab:b9:22:
f0:90:41:a4:2f:e6:48:3a:b9:66:d1:b3:ff:07:16:
59:07:c8:2b:c1:f4:cb:e0:44:9e:ad:ef:4e:16:19:
18:b7:ec:01:f2:9d:77:97:83:b4:8a:56:39:f3:71:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EA:6D:B9:F8:81:A2:A8:D6:94:21:04:6B:50:92:2A:C2:9A:C9:36
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a9:80:f2:8c:89:39:4f:ef:53:a5:3f:c1:ef:23:36:bf:dd:
65:5d:8d:ff:fd:a8:0f:1b:31:11:25:89:25:6b:2e:d8:be:cb:
03:4c:bb:c6:09:ce:16:ab:3f:70:41:93:30:4c:c3:dc:63:2c:
c1:76:7b:40:c2:1d:87:70:80:a0:e6:7f:ae:63:3a:f9:bc:c5:
3a:d0:38:5d:0c:ab:2a:b8:1e:4a:ff:ad:ad:71:47:b7:9f:b9:
e4:18:dc:b6:09:5a:82:53:22:9c:b5:c4:36:44:b5:7c:da:f2:
e5:f4:0c:0c:9c:cf:e5:2c:be:d3:d6:58:fa:9e:6d:71:d7:e5:
6a:ce:aa:86:b0:d6:0c:a6:5d:b0:03:2a:c4:02:60:1a:0c:fd:
5f:e1:23:a2:f9:3e:a5:92:c1:92:9e:72:e8:f6:cc:81:fb:ca:
74:5e:db:f3:09:de:61:61:6f:11:2c:7f:e6:68:50:ae:7f:95:
43:72:2a:f3:55:83:23:ae:e2:28:14:a1:a5:ab:08:e1:a0:a1:
8e:c7:bc:ab:47:06:ee:b8:db:49:98:48:cb:e9:bc:8c:9f:5e:
24:c4:60:78:a5:14:43:bd:f1:1b:cf:95:3a:35:28:bb:f2:e3:
57:e7:bf:ff:35:0e:65:3b:10:cd:81:58:68:85:a3:36:2e:66:
db:bd:b1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:36:14 2026 by rpki-client