Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: LA6hwLdGS0bkEeUxrmZAdTF9wX2Lk1OZgd6+e1g1XXU=
Subject key identifier: 2D:D8:50:3E:1B:1B:A7:30:47:33:26:0E:D6:3E:17:9F:0B:39:8C:82
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019E1E6C6A5540611DA84B2349F8FD63CAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 23:01:22 +0000
Manifest this update: Tue 12 May 2026 23:01:22 +0000
Manifest next update: Wed 13 May 2026 23:01:22 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: iwmteTxuVB5xQedR+BlMW30WXPBOyYXDHzIv+iTYcJk=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:6a:55:40:61:1d:a8:4b:23:49:f8:fd:63:ca:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: May 12 23:01:22 2026 GMT
Not After : May 13 23:01:22 2026 GMT
Subject: CN=2dd8503e1b1ba7304733260ed63e179f0b398c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:6a:d2:2c:b4:fc:5f:6c:1a:42:ef:15:40:
a8:a9:69:89:46:de:e0:7f:1e:5f:a0:fd:7b:af:c0:
39:1d:aa:b1:ae:2b:02:ac:b5:f6:6e:12:b5:81:03:
ff:4d:7b:ab:bd:c9:31:16:eb:80:c1:c6:91:6c:91:
fa:42:07:1d:f6:c2:8f:c0:be:39:85:38:18:23:de:
9f:4f:74:04:13:5d:cf:ba:f7:f8:81:ad:5a:f5:b8:
b8:aa:a8:19:72:17:7d:9d:eb:fe:9c:10:80:78:d0:
3d:57:4f:e5:1b:fe:27:9b:72:c5:0b:50:5c:a4:bc:
da:d2:bc:9d:db:bc:5d:d7:90:78:b2:f3:45:38:4e:
7e:2c:cf:95:00:1a:8b:74:7c:ad:a3:4a:4d:5b:a5:
7f:e3:42:5b:59:54:ea:3d:74:1c:5b:98:cd:fd:3c:
9f:b1:36:36:53:4e:26:05:72:a3:e8:fe:4c:2a:44:
cc:30:ce:1a:f8:a7:66:f4:92:71:25:30:b8:f6:04:
98:12:a9:c8:3a:1c:01:ba:46:e9:43:72:7b:1d:18:
62:bb:1b:0c:dc:1b:15:29:13:22:f3:bb:66:f2:0a:
08:1d:e7:95:23:a3:77:5b:a0:7a:0f:b1:9a:87:5e:
50:bd:84:b7:c2:d0:d0:dc:cd:f8:f5:46:2e:7f:ad:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D8:50:3E:1B:1B:A7:30:47:33:26:0E:D6:3E:17:9F:0B:39:8C:82
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c0:a0:17:d1:d1:84:ff:ce:aa:85:d7:50:59:51:5d:ce:7d:
ff:c6:41:67:f9:36:fe:32:5c:c1:d3:15:44:01:17:86:af:95:
b1:3d:1b:db:9f:84:4a:64:83:41:99:9e:af:d7:71:8f:c8:bd:
1d:84:85:40:ff:86:b7:97:cb:eb:b2:a0:a2:0d:46:45:a1:b2:
3d:70:c4:f8:3f:86:cb:fc:a2:fc:e2:70:a9:da:74:25:b7:78:
0e:5f:3a:4e:12:74:2d:e2:43:78:34:27:6c:36:7c:20:b5:a2:
21:2e:b6:80:a0:60:5e:3a:59:7c:f5:5d:a6:af:8e:8f:cc:94:
d7:38:a4:1b:b6:99:81:6f:90:5c:24:33:a6:ee:0f:49:b5:ff:
e3:51:e1:1b:31:83:18:77:76:92:43:63:ff:26:35:8e:fc:1b:
5e:e3:04:b9:1b:8b:9d:28:39:7f:51:41:85:7e:a7:e6:9f:67:
c2:97:63:6b:e1:fa:be:a0:31:0b:e6:2b:e0:7e:05:40:19:23:
9b:a6:c7:38:0d:66:54:6a:0a:ff:fd:67:cc:67:6c:3f:e7:5a:
c8:8a:3f:13:9e:0c:26:90:43:bc:47:3f:08:a6:86:d6:9a:98:
d1:99:e0:d2:16:94:f2:41:b5:55:35:42:a5:ec:31:7c:de:f6:
93:fc:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:40 2026 by rpki-client