Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier: D8VS4gVNnY3tbn984ZN/kWFRm9Pb1+GemcqpeH2CaGE=
Subject key identifier: 28:D3:44:78:04:EE:0A:F6:F4:0B:FE:F5:8C:75:7F:73:01:F9:87:37
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial: 019D27DFE9EFF9DA60022B5359AA83CABAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number: 0BB9
Signing time: Thu 26 Mar 2026 02:01:18 +0000
Manifest this update: Thu 26 Mar 2026 02:01:18 +0000
Manifest next update: Fri 27 Mar 2026 02:01:18 +0000
Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: 5S9sooNbCdIkK5L5Au1n/5j9zpE80TjQz7qGrRz+BM4=)
2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e9:ef:f9:da:60:02:2b:53:59:aa:83:ca:ba:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Validity
Not Before: Mar 26 02:01:18 2026 GMT
Not After : Mar 27 02:01:18 2026 GMT
Subject: CN=28d3447804ee0af6f40bfef58c757f7301f98737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:f1:1d:4f:8e:41:ff:b2:f9:e1:c3:b9:99:
27:10:f8:35:a4:52:54:d5:4e:02:51:c3:3e:75:7f:
2b:d5:a8:18:6b:c9:2f:1c:cf:ec:6f:e4:31:5a:52:
11:c7:f5:80:4d:da:89:f3:ca:80:d9:be:6c:af:db:
1c:86:db:02:94:be:cc:89:cf:3a:50:74:cf:ad:89:
18:17:60:5d:81:9a:71:64:16:dd:76:fd:e3:ac:7f:
df:90:ed:ab:b5:bd:97:b0:d8:9d:86:be:4c:d7:a5:
4d:2f:d0:c4:2e:5d:02:bb:f5:4f:1f:ab:b3:81:46:
95:ee:5c:11:3a:90:13:9f:76:7a:e1:86:c9:01:0b:
85:15:14:83:2b:7f:44:06:dc:ab:b9:3b:44:61:ad:
42:31:05:02:df:65:46:b0:30:4f:b4:6a:8b:d7:8a:
ac:5a:a9:0d:7e:d2:f4:fe:21:7b:74:50:d7:65:d7:
92:af:fb:b2:5d:b4:fb:dd:ff:5b:db:36:1d:75:6a:
03:18:56:83:0a:f7:87:8d:35:46:11:b7:af:8c:5e:
97:17:6f:c5:70:dc:07:0c:0f:49:ee:e8:37:e3:c2:
3e:6f:67:57:cb:0f:ea:5b:9d:81:4a:4c:46:c5:5c:
e2:a3:53:4e:20:c4:da:a4:b4:4a:83:24:46:37:3a:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D3:44:78:04:EE:0A:F6:F4:0B:FE:F5:8C:75:7F:73:01:F9:87:37
X509v3 Authority Key Identifier:
keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b5:9b:57:e6:e0:6b:84:c6:f5:6b:11:0b:d1:94:8b:a6:c3:
ef:73:f2:da:04:59:e0:5d:ff:5f:22:d3:0c:30:f9:d0:57:0f:
2f:be:f0:08:06:03:d4:8a:bb:f5:ab:21:c2:70:de:d6:8c:67:
d7:7b:f3:18:3f:e0:e5:77:0f:56:cf:e1:f6:4f:30:e8:22:81:
51:c1:ec:ef:b6:4f:8e:72:a3:69:69:38:61:39:80:46:b3:71:
42:d5:47:b2:7b:3e:d3:f7:74:1c:c0:4d:64:83:50:37:d1:45:
f0:bb:d1:13:11:28:be:4b:25:ef:5c:01:0c:63:a3:f8:68:cc:
05:db:92:71:1e:4a:87:0b:11:f8:68:0d:15:c0:47:82:45:3b:
a7:3c:14:f2:d8:b2:a0:83:b8:c3:cf:38:1d:44:fa:41:95:92:
e5:3f:b6:ef:3d:86:64:d6:d9:7b:4e:7d:b2:64:cb:96:b2:af:
38:81:e6:e8:cc:3a:d4:06:8d:1d:01:08:ee:ea:5e:9c:6f:7d:
ae:24:14:6a:8c:3b:39:6b:b6:8d:65:22:e5:aa:c5:ab:73:a1:
7c:22:cd:8e:54:cc:d4:d2:26:9f:37:75:3d:e5:fa:06:b1:2d:
4e:5d:6c:52:8c:13:ea:01:bd:ac:f9:eb:b7:8e:7e:5f:15:25:
2d:5f:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:56 2026 by rpki-client