Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File: aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier: gmnpwavxFwla9MGgJeVYn1saxdP7MBYnU8SSKrAxxpY=
Subject key identifier: 44:FE:F4:38:20:31:89:EC:8E:46:A8:1B:5D:D8:96:D6:A3:FD:DE:DD
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 019D38D2B36EA68016C851CC79FAB24613FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number: 15D9
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: Q3icqhJs5qAyA3hER2hkXKmmVkg.roa (hash: Vd3hohE6ub6CWkSKlO/X8MF+gU7dSgWfrpJ+oaxmW9o=)
2: RpKFlDqbj29Bav_Lkhu3kyJzzKU.roa (hash: 9GM2BLzn5MHA7HpZGUV7uK2cEDGeWuWkdj2aeKwl3TA=)
3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: SMvIu51/QZL4jHfdMmOhJhzif/1tcOBiE/tT2IOZiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b3:6e:a6:80:16:c8:51:cc:79:fa:b2:46:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=44fef438203189ec8e46a81b5dd896d6a3fddedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:84:c4:c7:a0:c1:44:02:aa:85:28:ef:6a:
39:fe:ac:c9:fe:d3:ba:03:45:6f:cd:0a:81:b8:5f:
b5:61:7a:c4:c6:5c:9f:2b:30:a3:20:b5:b9:f4:60:
2f:4d:9f:ce:70:68:9b:b0:24:5d:31:3e:bc:89:da:
54:e9:a0:e7:c5:0e:66:55:08:46:4f:7c:e8:95:c4:
58:a0:e2:6a:0e:29:b4:23:d3:d9:23:1a:d7:fd:ce:
94:65:53:a9:3b:10:88:fb:0c:28:7b:67:ce:62:c7:
29:14:de:32:5b:1e:d6:ac:cd:e9:84:01:c7:82:01:
d5:4f:4b:77:c3:10:e9:a7:bd:ca:ba:67:9d:7b:cf:
0a:f0:31:8a:d9:ae:07:8a:8f:d0:23:2b:b0:87:8c:
62:88:83:49:ca:08:f2:d6:67:7d:62:b3:15:77:b3:
48:0d:09:ce:80:78:bf:d3:99:a1:27:7d:c4:f9:3a:
c6:7b:ff:d9:1d:55:8b:eb:d3:98:cd:27:f7:15:2d:
37:f4:38:0a:f8:06:69:be:44:85:25:34:32:e7:02:
e7:b3:34:b5:db:e8:5f:d9:8b:ad:da:b3:7b:0c:82:
ab:08:8c:51:2e:37:68:9c:df:24:2a:a1:9b:6b:1f:
6b:a6:37:50:44:83:41:d4:d9:ef:14:83:88:a3:14:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:F4:38:20:31:89:EC:8E:46:A8:1B:5D:D8:96:D6:A3:FD:DE:DD
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:10:51:5f:23:a5:60:09:14:3a:a7:97:25:7b:41:e2:a8:c3:
0c:cb:d6:e6:86:f4:61:e3:7c:01:03:2c:de:c1:2d:62:9e:cc:
4b:28:1a:40:9b:df:e8:13:11:08:ce:a1:94:99:aa:82:1c:53:
d3:f2:27:bd:92:cd:70:67:33:20:4d:71:bf:28:80:5d:37:81:
fd:53:93:c9:ac:f5:cc:18:0a:39:97:cd:50:4c:78:d2:3e:26:
ca:95:24:e6:13:4c:01:eb:8e:19:32:9e:77:62:d6:62:64:d4:
4e:11:ed:5c:43:a0:c9:1e:9b:2c:c1:a9:89:bf:6a:5f:18:dd:
a6:bd:ab:4e:c3:c6:ff:3f:a7:5f:db:e3:21:75:6b:49:27:be:
f1:19:bb:d5:1a:be:b1:4e:a0:23:e7:93:4b:fd:57:fe:b5:28:
0c:52:b9:a7:cd:7c:42:06:3c:ef:db:10:5c:fb:75:aa:fa:89:
05:de:2b:b9:bf:7e:25:17:f8:98:e6:b0:ff:2b:f5:d6:a8:65:
63:60:b5:bb:9e:96:3d:45:14:00:e6:2e:48:f1:73:ec:e9:b9:
22:bb:f3:fd:b5:cd:7f:c5:93:79:2e:b1:d3:6e:1e:b7:12:33:
c5:13:59:00:1f:4c:ff:87:a2:74:3e:41:57:42:ba:ae:3c:8b:
e8:ed:c1:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040rNupoAWyFHMefqyRhP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM5YTIxNzU5Nzk2ZmUzYTFkOTE5ZjliNTczN2ViNjhk
NzA4ZTQwHhcNMjYwMzI5MDkwMDI1WhcNMjYwMzMwMDkwMDI1WjAzMTEwLwYDVQQD
Eyg0NGZlZjQzODIwMzE4OWVjOGU0NmE4MWI1ZGQ4OTZkNmEzZmRkZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXuExMegwUQCqoUo72o5/qzJ/tO6
A0VvzQqBuF+1YXrExlyfKzCjILW59GAvTZ/OcGibsCRdMT68idpU6aDnxQ5mVQhG
T3zolcRYoOJqDim0I9PZIxrX/c6UZVOpOxCI+wwoe2fOYscpFN4yWx7WrM3phAHH
ggHVT0t3wxDpp73Kumede88K8DGK2a4Hio/QIyuwh4xiiINJygjy1md9YrMVd7NI
DQnOgHi/05mhJ33E+TrGe//ZHVWL69OYzSf3FS039DgK+AZpvkSFJTQy5wLnszS1
2+hf2Yut2rN7DIKrCIxRLjdonN8kKqGbax9rpjdQRINB1NnvFIOIoxRHjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET+9DggMYnsjkaoG13Yltaj/d7dMB8GA1UdIwQY
MBaAFGhjmiF1l5b+Oh2Rn5tXN+to1wjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTct
MTNkMTY4ZDU5YjExLzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTctMTNkMTY4ZDU5YjEx
LzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhBRXyOl
YAkUOqeXJXtB4qjDDMvW5ob0YeN8AQMs3sEtYp7MSygaQJvf6BMRCM6hlJmqghxT
0/InvZLNcGczIE1xvyiAXTeB/VOTyaz1zBgKOZfNUEx40j4mypUk5hNMAeuOGTKe
d2LWYmTUThHtXEOgyR6bLMGpib9qXxjdpr2rTsPG/z+nX9vjIXVrSSe+8Rm71Rq+
sU6gI+eTS/1X/rUoDFK5p818QgY879sQXPt1qvqJBd4rub9+JRf4mOaw/yv11qhl
Y2C1u56WPUUUAOYuSPFz7Om5Irvz/bXNf8WTeS6x024etxIzxRNZAB9M/4eidD5B
V0K6rjyL6O3BSg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:33 2026 by rpki-client