Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
File: AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft (raw, json)
Hash identifier: 7YLtsLVFUFat7KoNetr2SsBMReHxOsfQxvfOPv2bY9I=
Subject key identifier: 8A:E5:76:A6:39:E6:F6:2B:89:50:C3:44:1F:C3:6C:BF:98:F3:DF:A2
Authority key identifier: 00:64:1B:7B:07:72:1D:62:06:60:39:D1:85:F0:63:B5:9D:D1:C5:38
Certificate issuer: /CN=00641b7b07721d62066039d185f063b59dd1c538
Certificate serial: 019F8F7DF459A1725BE90B1B1B2E9CBB4B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:24 +0000
Manifest this update: Thu 23 Jul 2026 15:00:24 +0000
Manifest next update: Fri 24 Jul 2026 15:00:24 +0000
Files and hashes: 1: 1LHEn3caqRdFx-FrVpJMaU0UBGw.roa (hash: JGFRK1aYZGR9nC1KAUCC1g5sne7T9Z9BLwNpceN88z4=)
2: AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl (hash: ouiGGYcIVm1afSjRH0h4qYyW4fXhl2x7wdkJjdmJrd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:f4:59:a1:72:5b:e9:0b:1b:1b:2e:9c:bb:4b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00641b7b07721d62066039d185f063b59dd1c538
Validity
Not Before: Jul 23 15:00:24 2026 GMT
Not After : Jul 24 15:00:24 2026 GMT
Subject: CN=8ae576a639e6f62b8950c3441fc36cbf98f3dfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:57:cc:e2:8d:5f:f1:41:8e:ae:38:b0:37:
c3:11:5b:fc:8e:9a:06:7b:32:b1:d5:66:1b:3f:1a:
aa:e9:0f:64:dd:00:1a:30:5d:e4:08:c8:75:5e:08:
61:f8:50:f3:60:ad:cc:98:ad:13:52:a5:08:f9:1d:
d9:50:c1:e0:67:48:b3:fc:fc:8c:a0:5d:0b:ae:21:
68:b0:99:19:fa:d1:5e:f8:72:16:23:d0:20:f8:b7:
d4:5c:d1:65:62:df:48:b3:cb:65:e7:c8:80:fe:2d:
89:69:0f:40:0b:65:8d:30:d2:77:33:81:d9:28:e5:
9d:4d:0f:fc:1d:3d:bb:ea:7d:f2:4d:f2:d1:bd:9f:
55:a1:d2:25:83:40:2b:d9:50:bc:b1:91:7c:78:e9:
a4:37:a4:fc:07:ed:1f:cc:71:64:93:5e:00:94:4e:
eb:d4:1c:36:04:fd:91:d1:1b:52:94:f7:f9:80:d1:
1b:e4:78:eb:98:5d:f4:47:64:1d:fb:6e:8b:24:3a:
61:b5:80:7d:e7:b2:de:fb:59:07:0e:4a:99:15:1d:
5d:a7:d9:cd:43:3c:2f:2c:be:ca:40:0e:23:6a:7c:
cc:ed:43:20:34:99:70:b4:de:d5:ae:c6:a5:50:55:
71:c1:aa:71:11:9e:51:40:50:f9:ae:97:e0:42:5d:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E5:76:A6:39:E6:F6:2B:89:50:C3:44:1F:C3:6C:BF:98:F3:DF:A2
X509v3 Authority Key Identifier:
keyid:00:64:1B:7B:07:72:1D:62:06:60:39:D1:85:F0:63:B5:9D:D1:C5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c9:42:00:0e:6b:46:d0:88:7f:e5:33:7b:c3:01:05:9c:21:
75:a9:a2:8b:4a:e0:f8:0c:a0:6f:69:bb:66:02:2c:67:97:9d:
e5:0d:0e:2d:45:b7:35:21:74:d3:07:f5:b0:e2:cd:a2:06:53:
0c:a6:07:0b:d7:52:6c:86:2d:1d:25:68:1b:e0:f3:b4:55:26:
d2:eb:29:c7:d7:28:9e:1d:fd:b6:e3:7c:3d:e0:8e:47:14:ec:
be:ac:66:c1:ac:7d:6c:ca:3e:20:05:ff:60:c3:cb:a4:7a:de:
f5:fe:e0:12:a6:cf:75:93:69:68:53:5c:25:58:52:f0:bf:57:
0c:2b:cc:79:ec:90:db:8d:2a:b5:aa:00:b2:fa:4b:f3:50:60:
b6:d3:91:37:83:76:5b:57:a2:d4:9b:34:0f:40:b0:4e:d8:4c:
8a:cb:cc:f8:95:bb:54:fc:07:6a:35:9f:6a:e2:14:f6:a7:ce:
ff:5b:a8:43:4c:55:9c:37:9c:73:4d:cd:d0:e4:60:fa:bc:0f:
43:cd:14:c3:71:5e:92:bf:bd:b1:d0:4c:e5:6a:ae:53:02:1e:
8a:1d:82:d0:64:f6:9d:7e:e3:c7:0f:fb:53:5c:c0:8e:af:b7:
e4:c0:05:11:3d:64:7a:82:87:48:12:94:4d:09:f3:d7:17:fc:
74:77:58:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PffRZoXJb6QsbGy6cu0sqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNjQxYjdiMDc3MjFkNjIwNjYwMzlkMTg1ZjA2M2I1OWRk
MWM1MzgwHhcNMjYwNzIzMTUwMDI0WhcNMjYwNzI0MTUwMDI0WjAzMTEwLwYDVQQD
Eyg4YWU1NzZhNjM5ZTZmNjJiODk1MGMzNDQxZmMzNmNiZjk4ZjNkZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEZXzOKNX/FBjq44sDfDEVv8jpoG
ezKx1WYbPxqq6Q9k3QAaMF3kCMh1Xghh+FDzYK3MmK0TUqUI+R3ZUMHgZ0iz/PyM
oF0LriFosJkZ+tFe+HIWI9Ag+LfUXNFlYt9Is8tl58iA/i2JaQ9AC2WNMNJ3M4HZ
KOWdTQ/8HT276n3yTfLRvZ9VodIlg0Ar2VC8sZF8eOmkN6T8B+0fzHFkk14AlE7r
1Bw2BP2R0RtSlPf5gNEb5HjrmF30R2Qd+26LJDphtYB957Le+1kHDkqZFR1dp9nN
QzwvLL7KQA4janzM7UMgNJlwtN7VrsalUFVxwapxEZ5RQFD5rpfgQl0M7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrldqY55vYriVDDRB/DbL+Y89+iMB8GA1UdIwQY
MBaAFABkG3sHch1iBmA50YXwY7Wd0cU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdRYmV3ZHlIV0lHWURuUmhmQmp0WjNSeFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQt
MzY2OGYwMDA4NjQ4LzEvQUdRYmV3ZHlIV0lHWURuUmhmQmp0WjNSeFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQtMzY2OGYwMDA4NjQ4
LzEvQUdRYmV3ZHlIV0lHWURuUmhmQmp0WjNSeFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8lCAA5r
RtCIf+Uze8MBBZwhdamii0rg+Aygb2m7ZgIsZ5ed5Q0OLUW3NSF00wf1sOLNogZT
DKYHC9dSbIYtHSVoG+DztFUm0uspx9conh39tuN8PeCORxTsvqxmwax9bMo+IAX/
YMPLpHre9f7gEqbPdZNpaFNcJVhS8L9XDCvMeeyQ240qtaoAsvpL81BgttORN4N2
W1ei1Js0D0CwTthMisvM+JW7VPwHajWfauIU9qfO/1uoQ0xVnDecc03N0ORg+rwP
Q80Uw3Fekr+9sdBM5WquUwIeih2C0GT2nX7jxw/7U1zAjq+35MAFET1keoKHSBKU
TQnz1xf8dHdYlg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:08 2026 by rpki-client