Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: x66r57E+xgyWha8GCCrEpnCs0RJQucCx7ZV+732qLek=
Subject key identifier: 03:04:DE:75:E7:E1:E3:EC:02:93:A5:E1:9F:BB:3E:52:47:A5:E2:8F
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 019D28F3239F4DC71570B249EFA57283AF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:01:56 +0000
Manifest this update: Thu 26 Mar 2026 07:01:56 +0000
Manifest next update: Fri 27 Mar 2026 07:01:56 +0000
Files and hashes: 1: 58YF0ymtPf000UYsXQwLeX0ZufU.roa (hash: 40hd3BRBbvBiTvhYzazTmqFgM3O0ax5/aAw4bE5lLLg=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: eEYdiAjpxlQGgHyWuW/vgVJVGgIjhW4q3HmLr5lguXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:23:9f:4d:c7:15:70:b2:49:ef:a5:72:83:af:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Mar 26 07:01:56 2026 GMT
Not After : Mar 27 07:01:56 2026 GMT
Subject: CN=0304de75e7e1e3ec0293a5e19fbb3e5247a5e28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:aa:8c:1a:7a:e3:95:48:1a:44:43:30:8c:
98:57:46:1b:c6:35:58:3b:46:b1:4e:91:9e:65:5c:
f0:92:2a:fe:2f:1d:39:ce:ac:6b:07:31:ca:7d:4a:
28:1b:c3:4c:2f:37:02:e6:6f:4f:74:e2:6d:48:fb:
b4:ed:87:44:cb:cf:39:dd:93:f3:5c:58:e1:49:e6:
12:9a:8a:c2:88:b9:ea:fb:f4:b7:8a:f0:80:10:bf:
69:f9:93:6e:40:c8:52:c6:79:1c:61:92:4f:e0:23:
a1:5a:ec:9f:47:4c:ed:fd:73:50:ce:0b:54:03:bc:
9a:5b:9b:4d:6a:07:42:5b:8d:8f:cc:cf:a0:c7:80:
bd:62:42:b3:6c:5f:87:88:05:01:2a:e5:63:6c:9d:
c9:32:0d:b7:f8:d6:1e:1d:ff:7a:42:ff:06:e0:90:
70:52:eb:fa:3d:6f:00:7f:00:cc:0b:7f:6c:1a:f4:
6d:04:86:1c:62:d1:18:5f:4e:3a:bd:d3:ed:dc:b1:
92:92:39:19:8d:17:65:91:24:51:ee:79:ae:02:fd:
77:b0:be:1c:95:40:2a:25:54:d2:13:98:e9:0a:e0:
f9:45:9b:97:81:71:23:c9:38:38:d7:96:61:0d:9e:
69:7d:d1:58:66:b8:14:ba:a2:5d:c9:45:7d:95:f8:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:04:DE:75:E7:E1:E3:EC:02:93:A5:E1:9F:BB:3E:52:47:A5:E2:8F
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8c:42:0d:e4:63:38:4d:5c:29:17:1d:e0:48:79:4d:bf:c5:
0c:39:4c:1e:db:8b:9e:5a:b9:86:01:29:58:2e:ec:3e:48:47:
ee:33:23:1b:d0:8b:ba:35:9a:27:49:16:89:2c:0a:ca:e7:d5:
2b:bc:51:1e:70:9e:11:64:eb:2d:67:00:fc:74:9c:8e:de:f7:
a6:2a:d3:4c:6b:95:b2:91:bb:43:70:4a:27:eb:13:ed:9c:7e:
b7:d1:09:8d:62:1b:ad:35:f9:98:3a:44:9f:44:b9:18:ba:d7:
ee:a6:80:6a:df:a8:a4:f3:dc:23:f1:09:1d:9b:2c:b4:01:20:
03:ab:32:90:e9:a9:9d:68:2a:ff:ad:81:23:c5:d8:2a:4d:da:
6b:b3:23:ec:f4:c6:ef:05:72:ee:df:02:07:c4:e1:f8:f4:af:
07:10:df:fe:d0:e5:ca:c9:e1:b1:29:0b:1c:f5:81:de:36:6d:
1e:e3:0a:a5:bd:2a:01:b0:5e:7a:db:a9:ea:85:0f:73:3a:41:
35:0e:6e:e0:13:e0:5e:86:b8:c0:1d:91:ed:0f:18:dc:64:aa:
76:57:73:37:3c:b1:c2:22:f1:7e:9b:09:81:83:84:3b:f2:e7:
77:30:d4:a7:12:4a:52:1e:9d:68:88:73:22:93:d2:8c:d9:51:
0c:25:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:48 2026 by rpki-client