Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: n/ti6nPs3GWQogwTregunwSi6e06pS+aTS2uyLlx0lg=
Subject key identifier: AB:B3:E4:DE:AE:9F:88:46:5B:78:C9:A0:17:99:AF:72:AE:59:5B:14
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 019D284D54B495EC26CC4E30434608B3C2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:00:49 +0000
Manifest this update: Thu 26 Mar 2026 04:00:49 +0000
Manifest next update: Fri 27 Mar 2026 04:00:49 +0000
Files and hashes: 1: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: aYmoUvFDYB+1UNfJ7JrlshZ0RGsEMxvsn8ZWEzszRBc=)
2: cYvxZjuDDPfYb4kbDcbg3IK4fP4.roa (hash: YupuMCLuStDQjV8tMBI6D+BTvg79pFQHOi7BQJOC5fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:54:b4:95:ec:26:cc:4e:30:43:46:08:b3:c2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Mar 26 04:00:49 2026 GMT
Not After : Mar 27 04:00:49 2026 GMT
Subject: CN=abb3e4deae9f88465b78c9a01799af72ae595b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:45:ac:73:e3:79:4c:b4:de:18:98:51:9f:
33:55:0c:06:0f:57:61:e5:51:4c:83:eb:ca:a9:5b:
4a:f7:28:1d:1a:d1:69:2d:92:7b:e4:b2:d1:bb:bb:
3d:fa:4d:82:f2:1e:bf:8f:27:e8:6a:f7:80:82:72:
a9:f9:c3:37:4a:4c:78:2c:9f:0f:bb:c9:64:09:f9:
65:55:73:db:0c:09:a8:9c:02:26:e2:ca:de:9c:73:
50:6f:ae:f0:c7:c1:27:ad:a1:97:9f:09:a1:94:6f:
af:d7:de:2d:82:76:7c:94:90:2a:3c:42:b4:6f:a0:
bc:e7:18:1d:f3:23:7e:cc:d7:2f:e4:d5:79:65:fb:
9d:86:5f:25:7e:79:71:82:d0:c4:42:4b:61:12:9e:
24:50:dd:cd:b0:08:c0:e1:76:73:88:79:28:24:41:
72:29:13:40:64:a4:3d:fc:c1:85:8a:f6:e2:65:84:
3c:c9:78:0b:53:40:f9:5c:f3:a9:e8:71:ed:e8:ef:
0c:dd:02:15:11:e3:1e:d5:dd:08:e1:1f:7d:fc:36:
71:aa:a5:cb:2b:8e:ef:c3:56:f1:d8:c5:8c:b1:80:
58:ac:c2:07:c8:de:b9:d6:43:41:2a:91:29:68:1f:
85:d7:07:de:ad:c2:98:79:00:d7:08:8d:7f:b6:5e:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B3:E4:DE:AE:9F:88:46:5B:78:C9:A0:17:99:AF:72:AE:59:5B:14
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d8:96:c1:b3:99:20:81:de:7c:44:97:1b:2f:7a:1d:97:6d:
0e:c3:7e:62:ae:6b:32:f1:89:db:ef:95:bc:a9:29:c3:f3:82:
7b:f6:1f:1c:89:14:61:6e:7a:3d:9e:3f:f4:ca:b7:13:05:28:
d4:80:24:6c:34:c1:89:7e:0a:0c:c3:60:fe:21:3f:f9:02:c7:
7f:cb:c6:bf:be:f5:04:8d:ad:96:90:d4:3a:50:a7:a0:fe:24:
4f:ec:e2:a0:07:85:74:eb:81:cd:d6:8a:b7:43:eb:dd:36:37:
a5:c1:69:22:3a:e4:30:e5:11:60:26:0d:15:ea:0a:0f:a7:92:
3d:9b:a7:ed:bd:73:65:58:7e:0d:9d:64:b5:f0:98:d7:22:73:
0a:2a:78:92:47:ee:fb:44:4e:ff:2f:24:13:f6:ef:f0:91:e9:
cc:b5:53:0e:91:e9:2d:be:55:41:79:ae:30:30:b3:c3:bb:ca:
72:fc:1f:b0:ec:a1:49:26:79:0a:6d:b5:6f:c8:42:53:c4:85:
c6:21:65:c8:36:64:05:fe:cd:d7:7c:de:d4:f8:87:f7:87:ec:
25:2e:08:06:94:7d:84:44:d9:64:66:d5:14:5b:5d:55:3d:16:
f6:d8:c2:2a:5f:e8:3d:ed:cd:44:2f:45:3e:35:49:58:24:ef:
af:07:de:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTVS0lewmzE4wQ0YIs8K4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDg0NmJkYmIwODA1NWFjYmQ2YWI1OWQ5NTYwOTgxZTA0
NmVlNmYwHhcNMjYwMzI2MDQwMDQ5WhcNMjYwMzI3MDQwMDQ5WjAzMTEwLwYDVQQD
EyhhYmIzZTRkZWFlOWY4ODQ2NWI3OGM5YTAxNzk5YWY3MmFlNTk1YjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+JFrHPjeUy03hiYUZ8zVQwGD1dh
5VFMg+vKqVtK9ygdGtFpLZJ75LLRu7s9+k2C8h6/jyfoaveAgnKp+cM3Skx4LJ8P
u8lkCfllVXPbDAmonAIm4srenHNQb67wx8EnraGXnwmhlG+v194tgnZ8lJAqPEK0
b6C85xgd8yN+zNcv5NV5Zfudhl8lfnlxgtDEQkthEp4kUN3NsAjA4XZziHkoJEFy
KRNAZKQ9/MGFivbiZYQ8yXgLU0D5XPOp6HHt6O8M3QIVEeMe1d0I4R99/DZxqqXL
K47vw1bx2MWMsYBYrMIHyN651kNBKpEpaB+F1wfercKYeQDXCI1/tl7SzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuz5N6un4hGW3jJoBeZr3KuWVsUMB8GA1UdIwQY
MBaAFGoIRr27CAVay9arWdlWCYHgRu5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDct
Nzc5MTc1MmE5YzZlLzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDctNzc5MTc1MmE5YzZl
LzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdiWwbOZ
IIHefESXGy96HZdtDsN+Yq5rMvGJ2++VvKkpw/OCe/YfHIkUYW56PZ4/9Mq3EwUo
1IAkbDTBiX4KDMNg/iE/+QLHf8vGv771BI2tlpDUOlCnoP4kT+zioAeFdOuBzdaK
t0Pr3TY3pcFpIjrkMOURYCYNFeoKD6eSPZun7b1zZVh+DZ1ktfCY1yJzCip4kkfu
+0RO/y8kE/bv8JHpzLVTDpHpLb5VQXmuMDCzw7vKcvwfsOyhSSZ5Cm21b8hCU8SF
xiFlyDZkBf7N13ze1PiH94fsJS4IBpR9hETZZGbVFFtdVT0W9tjCKl/oPe3NRC9F
PjVJWCTvrwfeAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:57 2026 by rpki-client