
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
File: AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft (raw, json)
Hash identifier: mOd+1cpgSlL8EBSKloLGRMgc7ixCtzp8WChcsQ8RXFc=
Subject key identifier: A1:43:07:82:E4:33:AB:F2:BD:3B:BF:72:39:A5:8F:1A:A4:83:45:70
Authority key identifier: 02:05:BA:1D:94:37:94:CA:D9:D7:BE:8C:6E:CF:B2:BA:CD:C8:50:5B
Certificate issuer: /CN=0205ba1d943794cad9d7be8c6ecfb2bacdc8505b
Certificate serial: 019F9090F32EB6C7589A2E4BE588F0DC93FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
Manifest number: AF
Signing time: Thu 23 Jul 2026 20:00:46 +0000
Manifest this update: Thu 23 Jul 2026 20:00:46 +0000
Manifest next update: Fri 24 Jul 2026 20:00:46 +0000
Files and hashes: 1: AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl (hash: Hh2sOz4IkrvPIoq87UKcgniO+wQ7690BANDFf+eJYo0=)
2: AheurXSAwG3K8xjvCSAB_OgXDkE.asa (hash: 37Fmeaq+GhOVQi6i9jELNgyV9qWcf6gQUQ1iLmTpfG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:f3:2e:b6:c7:58:9a:2e:4b:e5:88:f0:dc:93:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0205ba1d943794cad9d7be8c6ecfb2bacdc8505b
Validity
Not Before: Jul 23 20:00:46 2026 GMT
Not After : Jul 24 20:00:46 2026 GMT
Subject: CN=a1430782e433abf2bd3bbf7239a58f1aa4834570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:d7:c9:a3:64:52:a3:2c:83:7e:7c:72:c7:
ec:98:b4:a5:0e:53:9b:a4:6e:fc:d0:37:d7:be:ff:
4d:d1:d9:43:ee:47:44:c7:77:28:7d:c0:ce:29:4e:
8a:49:db:04:fa:0c:2d:00:bb:b0:08:9b:26:0b:9d:
b1:41:f4:69:19:d3:61:b3:24:a6:28:94:6f:87:02:
ec:b5:18:99:97:98:17:41:64:fa:60:9e:6e:d5:6b:
64:0b:0a:5c:40:2c:56:95:69:7f:32:51:e4:df:97:
56:82:e8:89:c0:c0:62:71:a3:53:cb:49:5b:4a:4e:
f5:71:a1:f0:ac:84:25:a8:17:f3:34:ee:b3:57:78:
ae:82:65:32:27:4d:67:0a:8e:2b:9c:31:ba:23:57:
74:a9:a6:9a:a0:f6:ab:31:e8:43:ae:84:39:15:dd:
73:dc:44:b0:29:ea:70:58:43:6d:da:c1:fd:14:3d:
b5:c7:97:e4:5a:1f:3f:fd:59:95:eb:fd:86:47:a5:
5c:34:0e:81:d0:18:6f:87:29:51:c2:55:e3:2a:7d:
7b:b3:e9:56:66:76:0c:ad:4a:d8:71:0d:2c:90:a8:
7a:57:15:0d:95:d5:30:a3:d6:60:b9:08:24:99:bc:
36:6f:76:9c:83:65:f1:23:56:2a:89:8b:45:6e:d4:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:07:82:E4:33:AB:F2:BD:3B:BF:72:39:A5:8F:1A:A4:83:45:70
X509v3 Authority Key Identifier:
keyid:02:05:BA:1D:94:37:94:CA:D9:D7:BE:8C:6E:CF:B2:BA:CD:C8:50:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a8:0b:01:7c:c8:34:7e:ea:e5:9b:ad:c7:00:a1:f2:22:36:
c8:34:4c:05:f2:0f:33:aa:31:ff:2e:2a:5b:1f:5e:b3:d7:9b:
71:62:ef:6d:1b:b7:c5:ed:c5:7f:76:ea:ec:b3:0e:42:1f:4e:
3e:b5:18:47:0e:03:4a:c5:aa:57:a6:c9:1f:af:25:b0:a3:07:
c0:27:98:f3:a9:7a:6e:cf:66:dc:ce:3c:05:c1:4b:cd:f7:7c:
ca:39:89:90:07:65:a7:f4:d3:21:14:72:3a:25:48:ae:3b:8b:
ab:bd:53:1f:95:54:1d:89:76:1d:d4:0b:22:a2:3e:19:92:be:
24:c9:da:eb:72:cc:af:11:d8:4d:f9:66:5c:4a:29:3b:b3:31:
20:98:76:3f:ab:02:7d:e0:1a:16:3d:18:13:50:df:d2:f9:b6:
39:43:e0:06:e7:12:95:21:53:f7:aa:85:51:30:43:80:69:4d:
82:ae:b5:a4:65:06:62:85:21:e5:c7:3f:a5:4b:73:01:fb:12:
4d:9c:c6:5d:f3:ba:5d:28:f6:d5:ef:68:0c:40:8e:28:98:d8:
e7:52:2d:8d:01:09:85:f7:d6:09:d0:3f:b6:63:b2:30:19:7d:
48:e3:94:cc:74:c8:28:7b:46:95:92:db:78:4b:34:fb:c4:e8:
3f:88:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:21 2026 by rpki-client