Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: 2/3/Rq3MCrBcE/JVfE3bVXA/C0Ub3ci2JdLkcVsat08=
Subject key identifier: 75:E0:5B:08:52:BD:A0:A0:7B:B8:6C:62:A8:9E:89:07:AA:54:8E:07
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 01A105EECCDC52D5885475B9E60420C2A8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 08:01:38 +0000
Manifest this update: Sun 04 Oct 2026 08:01:38 +0000
Manifest next update: Mon 05 Oct 2026 08:01:38 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: DeElaBrVUxeRQuhUiI7Zlo01LvpVRzaIBmFFpx4rfik=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:cc:dc:52:d5:88:54:75:b9:e6:04:20:c2:a8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Oct 4 08:01:38 2026 GMT
Not After : Oct 5 08:01:38 2026 GMT
Subject: CN=75e05b0852bda0a07bb86c62a89e8907aa548e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:50:16:a7:33:10:24:bb:f7:e0:72:87:0b:
71:c7:a6:db:e6:18:78:be:85:b6:fc:5a:e9:09:17:
98:c9:9e:f9:05:22:a7:cc:9e:58:f0:65:1f:96:eb:
77:a0:6b:6b:c4:24:7c:70:27:1b:b0:cc:07:b6:93:
02:d0:81:82:68:bc:0f:ac:d5:93:38:8b:2f:c8:bf:
5a:43:27:b1:4b:91:13:d4:92:fc:42:b4:c2:b6:6d:
74:64:4f:f8:1b:78:40:59:de:29:10:7b:65:31:4b:
4f:8d:5e:85:52:12:33:9c:4a:f3:8d:15:98:24:04:
2c:7d:98:1d:11:f3:91:45:e1:01:e4:ec:62:2f:2d:
70:cc:ea:db:a1:7f:7a:07:6b:70:f3:9b:d7:95:24:
02:b7:55:11:51:fd:15:81:96:3b:33:81:50:5b:7c:
de:f2:94:8b:35:a6:84:00:30:0f:3c:fb:fb:ea:cd:
2f:68:03:bd:d2:39:5a:bf:e6:09:ed:7a:11:3a:9d:
7a:e0:d6:af:29:eb:4a:bc:69:8c:60:8e:9f:38:cd:
fe:13:39:9d:d4:2b:9f:e2:41:99:1c:7b:7a:37:dc:
f7:83:5c:3e:2a:49:f0:94:e9:b1:62:c0:e8:03:63:
59:15:75:e3:1c:85:9e:a4:0a:b2:11:d0:d7:b9:bf:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E0:5B:08:52:BD:A0:A0:7B:B8:6C:62:A8:9E:89:07:AA:54:8E:07
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:45:89:67:0f:7d:6f:5c:b3:99:9d:25:a5:7b:84:ff:66:75:
38:c2:73:3e:95:a9:f8:49:cf:29:87:64:68:8a:85:dd:4b:7e:
a7:0f:bd:b9:d7:6f:b8:9d:67:7c:13:13:9d:c9:7d:8d:bc:cf:
ee:61:8e:7a:7d:37:a0:f9:c4:d3:e2:7a:9e:c3:b4:2b:03:03:
5c:66:af:a6:b6:aa:72:4d:9d:dc:97:72:67:0c:10:bf:75:af:
f6:a7:38:d8:89:bd:23:a9:bd:b0:96:23:15:4c:73:fd:dd:38:
e9:58:a2:59:20:4b:7c:6a:8e:43:81:29:77:40:c9:6d:04:b0:
ec:9c:37:5b:76:68:a8:71:e5:0c:e6:35:77:6f:0f:85:b2:5f:
98:e5:60:e4:5f:5e:ae:f0:e0:43:b7:69:1f:44:9f:c6:35:98:
ce:c7:6c:d8:dc:22:66:89:41:45:7d:9b:da:8c:e9:83:71:20:
c0:c8:07:ba:e3:de:37:64:5c:ea:8d:06:8b:84:17:63:1d:22:
75:91:4c:ca:eb:dd:46:b6:a2:6f:95:2d:69:a9:3a:ae:99:07:
0d:c2:af:63:b7:ef:ff:a3:ed:11:4a:d7:32:36:46:ad:a9:33:
b2:da:87:f0:75:9f:2e:0e:91:bd:fc:d9:12:3e:89:a1:56:d2:
c1:80:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:05:07 2026 by rpki-client