Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: uGBEqazwwzNTK55cDW0/fgw+/v93bSpJfRiPoDJ6xKo=
Subject key identifier: 2F:EF:9E:01:00:D9:42:07:36:C9:B2:A0:A9:33:77:40:83:D5:A7:A1
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019D29290640469C5AE5D0348779F345E6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:00:47 +0000
Manifest this update: Thu 26 Mar 2026 08:00:47 +0000
Manifest next update: Fri 27 Mar 2026 08:00:47 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: 21i1IlLtLgvCObeWOepNyvYR2yej1WhA00IAy3aIoqI=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:06:40:46:9c:5a:e5:d0:34:87:79:f3:45:e6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Mar 26 08:00:47 2026 GMT
Not After : Mar 27 08:00:47 2026 GMT
Subject: CN=2fef9e0100d9420736c9b2a0a933774083d5a7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:09:0e:9f:6e:fe:38:8d:ab:e7:95:d9:c2:
26:23:31:e8:32:39:16:c1:93:d3:ef:99:4c:3a:80:
0e:c4:96:01:e1:40:bc:d3:1d:b6:6b:77:e1:ed:f3:
f1:93:6d:81:16:b2:79:22:f2:c8:28:0f:05:c7:9f:
6f:4c:5c:15:34:18:a3:65:76:28:8d:d8:15:01:18:
5c:e0:3a:5f:cd:28:77:8a:52:54:a5:98:49:2e:f8:
70:ea:24:54:aa:73:d4:46:2f:d4:14:b1:c1:86:83:
9e:1a:7e:4a:5b:79:88:cf:a5:9c:bd:34:35:36:2d:
d2:82:91:6e:c3:81:09:d6:92:97:bf:c3:49:80:6c:
a2:60:aa:ed:0e:2b:2f:79:7f:b1:3b:bb:db:5b:b2:
d5:d3:8e:8e:6c:fa:4d:ae:d3:69:28:2f:4e:65:29:
df:2b:65:58:ee:83:cd:53:48:51:b3:07:56:bf:3d:
19:bf:c2:c7:ae:b8:b3:bc:e6:85:ed:11:ec:2e:47:
02:67:5b:fd:fa:8c:16:6c:20:67:00:95:d0:14:5b:
0d:f5:e7:b0:ca:11:f6:8c:11:4c:27:d7:a0:c6:c6:
21:c3:fc:d9:d5:d6:6d:7b:78:e5:98:7d:15:c8:03:
a0:27:e3:93:28:59:2a:06:ff:05:fe:89:43:e4:91:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:9E:01:00:D9:42:07:36:C9:B2:A0:A9:33:77:40:83:D5:A7:A1
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:47:80:70:05:eb:6c:dd:b7:ee:a7:13:cd:e4:83:1e:a0:0f:
21:97:cd:da:2d:4d:94:25:dd:08:6a:18:92:13:21:b0:5a:87:
6a:f1:a2:78:dc:48:fc:7c:15:a9:2e:0a:54:1b:76:9e:75:bf:
b5:e9:0d:c5:b0:7f:d8:0f:2a:90:b5:e1:a7:54:7e:f9:02:b8:
0c:47:7b:ec:7c:08:38:ba:45:8c:75:d0:c4:90:66:99:a9:aa:
27:03:c1:a1:1d:d4:9a:2a:19:32:58:3f:2e:ba:dc:34:0a:fd:
6c:3d:97:a6:3f:23:04:d9:c1:b1:c9:2d:bb:5f:1b:49:7d:ec:
ae:57:97:cd:90:bc:63:d6:5d:d9:88:91:6b:a2:43:e6:6a:5d:
5b:20:16:e9:57:c9:b7:b4:d3:ca:bd:07:32:78:46:1d:29:6a:
9f:d4:82:0d:ed:f0:2f:7b:58:7a:81:5f:a4:35:22:2d:44:3a:
dd:49:8d:f4:57:6d:d3:78:ac:ac:c5:aa:32:50:b2:f3:d7:d7:
a8:00:f3:3b:4a:4c:71:8f:ef:66:2d:8e:f8:86:fd:ca:a4:1c:
14:7d:e0:f3:3f:6f:1a:35:43:4d:6a:99:8f:58:0b:41:ae:e7:
bd:fd:2e:7d:74:e1:d2:f0:b7:ba:f5:c7:a9:31:8b:e2:d6:91:
e0:6d:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:09 2026 by rpki-client