Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: qn0E3UEWKuLQqt8UJT5akdwLFF2neZUSGcopmVq0B+w=
Subject key identifier: DA:7B:F9:0A:5E:76:87:DF:76:8D:45:EA:C2:73:E4:63:FA:63:96:19
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01A1667D4F4CF3EE680590227E4390B0B597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0C84
Signing time: Fri 23 Oct 2026 02:00:50 +0000
Manifest this update: Fri 23 Oct 2026 02:00:50 +0000
Manifest next update: Sat 24 Oct 2026 02:00:50 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: JsU49po+g1Ymi/gimNiCxge0qVd1df81AqWs0RsGujQ=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:7d:4f:4c:f3:ee:68:05:90:22:7e:43:90:b0:b5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Oct 23 02:00:50 2026 GMT
Not After : Oct 24 02:00:50 2026 GMT
Subject: CN=da7bf90a5e7687df768d45eac273e463fa639619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:30:75:76:18:d3:3d:64:a0:16:ff:f4:9a:
f5:91:1c:bc:37:a8:25:74:b5:45:a8:bd:d3:c5:e8:
c4:25:7e:1a:ba:84:76:c6:97:a5:f8:8e:3a:56:6e:
41:b0:5f:4b:75:2c:09:4f:6b:85:9a:67:dd:bf:27:
b9:a3:cf:46:c5:ac:3c:50:7e:33:b0:76:6a:ff:fb:
94:d5:74:de:24:44:bb:77:86:e1:eb:e1:c0:83:76:
05:01:5d:0d:5f:29:b2:b2:42:ed:ec:4d:c0:b2:5c:
b8:5e:c7:1b:b3:39:16:2b:a7:d7:ea:64:49:ef:b8:
37:4f:78:4a:da:95:a6:73:72:4c:77:dd:3e:d2:ce:
68:cf:59:6b:b7:03:a6:6c:22:d1:60:ab:67:86:a2:
d0:09:62:78:dc:ac:df:e3:2f:ac:8f:56:e0:1a:d5:
f2:bd:5a:63:04:ef:bb:7c:8e:3b:4f:d0:58:ec:b8:
54:e0:46:12:be:39:d3:d2:dd:30:ce:09:78:a4:a7:
31:2a:7c:ec:39:0c:6f:91:2d:12:a7:36:34:1a:92:
6b:82:71:9c:b8:b6:b6:71:3d:05:b4:6c:c9:94:ef:
1f:fe:0f:ba:c5:e5:cb:f5:df:07:af:41:1b:1c:52:
0c:e0:3d:9d:4c:e0:fc:0b:61:29:02:43:3a:9b:5c:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7B:F9:0A:5E:76:87:DF:76:8D:45:EA:C2:73:E4:63:FA:63:96:19
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:76:f1:d3:f8:53:18:ce:9b:22:81:67:24:9b:8b:7e:86:b4:
9d:18:49:38:c9:90:24:cd:22:07:0d:1a:9d:4d:1c:6d:f5:f4:
7d:ec:4f:8b:77:60:31:c6:b4:09:27:2c:e1:09:f7:20:46:94:
71:f0:71:bf:b1:6d:ce:b5:ef:9b:ae:1f:5d:78:ce:6f:82:26:
69:46:fe:51:cb:fe:61:37:ad:20:86:1c:54:ad:d2:03:15:d1:
d6:7a:ed:67:8f:e1:f9:4e:48:a4:73:ee:8a:fe:1c:26:e4:9e:
e3:78:9a:47:84:9a:fc:7d:73:9e:b1:22:8b:dc:d2:92:63:30:
c1:e4:48:26:10:f3:dc:42:3d:33:3b:63:db:ad:28:4b:84:b9:
a7:d1:71:c0:c9:87:a7:50:67:a0:dd:1a:e3:30:01:f2:9f:d7:
52:56:e3:c3:af:21:23:d3:ad:8c:28:fc:d4:f1:83:24:91:2a:
48:f3:b7:0d:f8:3e:38:68:7f:09:ad:9b:21:64:da:53:b2:cf:
1b:6f:b5:20:81:14:74:e6:86:43:68:eb:d1:ae:d1:6d:3b:62:
4e:b0:21:42:b6:db:9d:27:a4:1c:fc:92:36:05:ca:d2:eb:46:
41:76:f4:08:6d:a3:d5:ac:2e:9d:08:9e:4d:66:26:32:8e:0e:
69:97:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 05:05:01 2026 by rpki-client