Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: ewL3t5G/57SvWyoFlQxb+kgzDqvefhY0U1pb2uPi2wo=
Subject key identifier: 02:3E:34:B6:B1:8F:F7:43:14:45:49:DF:8F:88:A8:79:20:31:52:C8
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019F9323FE3C32EBC03CD7D4EB5F6468E7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 08:00:37 +0000
Manifest this update: Fri 24 Jul 2026 08:00:37 +0000
Manifest next update: Sat 25 Jul 2026 08:00:37 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: HFqy6HSic3jtJbX13Ym4F04efQNP2Y18qNFO+3pNGr4=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:fe:3c:32:eb:c0:3c:d7:d4:eb:5f:64:68:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jul 24 08:00:37 2026 GMT
Not After : Jul 25 08:00:37 2026 GMT
Subject: CN=023e34b6b18ff743144549df8f88a879203152c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:d3:4e:68:e3:dc:5a:66:60:70:54:5d:aa:
50:59:03:a2:ca:8a:f1:30:26:a8:c8:60:5f:15:66:
9b:90:f4:e5:14:1f:02:3a:f2:60:50:92:69:8e:eb:
0c:a4:bb:82:13:25:5f:7a:92:8a:ae:25:6d:b3:c1:
83:f5:bd:56:1f:e6:fd:a1:64:6f:07:30:42:53:a3:
bd:07:7d:22:23:dc:d6:92:92:0f:eb:97:61:85:e8:
29:0e:12:e4:61:56:74:8a:57:50:31:f0:1c:b2:b1:
b4:43:d1:72:0a:28:ef:2a:26:a9:45:67:a8:20:be:
77:62:ce:43:e4:0e:c8:b0:59:84:a1:f3:ce:13:51:
a1:3d:66:51:d1:74:1d:0d:97:58:36:bd:23:21:82:
76:93:f1:fc:dd:e9:84:84:7b:25:f8:33:1b:e9:ff:
7f:9d:66:73:6c:15:4f:95:f2:33:90:c3:d5:0a:86:
8e:dc:34:73:8b:10:2e:0b:d1:ce:cd:0e:09:77:39:
7f:d9:8c:63:a2:06:4c:5d:d9:93:d3:63:42:14:95:
4e:63:64:57:d5:b3:53:82:c1:bf:cb:00:9b:ca:c4:
33:e6:10:81:21:b8:9a:d2:5c:87:95:74:36:ad:cd:
39:43:21:ac:07:c3:f3:3e:8f:04:e1:57:88:ee:40:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3E:34:B6:B1:8F:F7:43:14:45:49:DF:8F:88:A8:79:20:31:52:C8
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7f:a5:77:df:e7:02:57:71:77:ff:11:21:a1:5d:06:e0:60:
58:81:b8:40:e9:c9:a1:6a:cf:99:a9:8c:ae:a2:eb:f0:f4:8e:
66:df:30:31:5f:e9:a6:dc:00:a7:44:72:fb:6f:99:58:ca:cc:
b0:44:a0:d8:de:e2:03:1c:ba:1a:53:de:e0:68:53:50:bd:7d:
cf:36:4d:f1:3f:33:bb:fb:99:c8:cf:bb:5c:8f:fb:61:dd:4d:
d4:17:dd:62:d5:fb:70:62:c3:a6:7b:82:50:08:f8:ad:3e:00:
67:17:29:62:0c:b2:ab:c5:b2:b4:b3:84:7d:07:b4:ef:92:33:
d1:d1:25:b0:03:7e:b6:26:64:51:bf:53:a5:ee:de:e6:0e:e7:
3d:08:b5:df:fe:c6:e0:f1:08:28:bc:04:0d:87:8b:51:70:7e:
99:2a:36:6f:40:5e:18:66:55:9b:b9:c6:62:ff:eb:51:9b:e6:
ce:b2:a7:44:82:a0:2e:93:4c:06:e3:af:bb:29:bd:04:27:c3:
43:57:b0:47:85:b8:30:c4:05:21:f9:af:b7:6b:aa:a5:b5:cb:
5f:96:cb:68:23:4d:72:b3:e2:2c:eb:32:ee:11:f8:13:8a:a5:
e5:d3:d9:cf:6b:cc:44:ac:5c:68:e2:13:03:41:bf:68:0d:99:
04:a3:d6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI/48MuvAPNfU619kaOfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDRjYTRhOTY2MTYzMWM0ZWM2MTVhM2E2ZDE1ZDIyMDMw
ZGNmNDkwHhcNMjYwNzI0MDgwMDM3WhcNMjYwNzI1MDgwMDM3WjAzMTEwLwYDVQQD
EygwMjNlMzRiNmIxOGZmNzQzMTQ0NTQ5ZGY4Zjg4YTg3OTIwMzE1MmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYDTTmjj3FpmYHBUXapQWQOiyorx
MCaoyGBfFWabkPTlFB8COvJgUJJpjusMpLuCEyVfepKKriVts8GD9b1WH+b9oWRv
BzBCU6O9B30iI9zWkpIP65dhhegpDhLkYVZ0ildQMfAcsrG0Q9FyCijvKiapRWeo
IL53Ys5D5A7IsFmEofPOE1GhPWZR0XQdDZdYNr0jIYJ2k/H83emEhHsl+DMb6f9/
nWZzbBVPlfIzkMPVCoaO3DRzixAuC9HOzQ4Jdzl/2YxjogZMXdmT02NCFJVOY2RX
1bNTgsG/ywCbysQz5hCBIbia0lyHlXQ2rc05QyGsB8PzPo8E4VeI7kA/mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI+NLaxj/dDFEVJ34+IqHkgMVLIMB8GA1UdIwQY
MBaAFGoEykqWYWMcTsYVo6bRXSIDDc9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMt
ODExM2RhNjdlZjc1LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMtODExM2RhNjdlZjc1
LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn+ld9/n
Aldxd/8RIaFdBuBgWIG4QOnJoWrPmamMrqLr8PSOZt8wMV/pptwAp0Ry+2+ZWMrM
sESg2N7iAxy6GlPe4GhTUL19zzZN8T8zu/uZyM+7XI/7Yd1N1BfdYtX7cGLDpnuC
UAj4rT4AZxcpYgyyq8WytLOEfQe075Iz0dElsAN+tiZkUb9Tpe7e5g7nPQi13/7G
4PEIKLwEDYeLUXB+mSo2b0BeGGZVm7nGYv/rUZvmzrKnRIKgLpNMBuOvuym9BCfD
Q1ewR4W4MMQFIfmvt2uqpbXLX5bLaCNNcrPiLOsy7hH4E4ql5dPZz2vMRKxcaOIT
A0G/aA2ZBKPWOQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:17 2026 by rpki-client