Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
File: AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft (raw, json)
Hash identifier: EvgOjSPW1Ufupu0pkS7HUQe1WN+r3wjGxVvQ+5lcjwg=
Subject key identifier: 69:7E:1A:F4:25:1F:49:77:4E:D2:FE:8B:29:F7:3B:2E:B0:68:5E:2A
Authority key identifier: 00:64:1B:7B:07:72:1D:62:06:60:39:D1:85:F0:63:B5:9D:D1:C5:38
Certificate issuer: /CN=00641b7b07721d62066039d185f063b59dd1c538
Certificate serial: 01A0D83B5975B1F6648DB7F48BF0B341B840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 11:02:43 +0000
Manifest this update: Fri 25 Sep 2026 11:02:43 +0000
Manifest next update: Sat 26 Sep 2026 11:02:43 +0000
Files and hashes: 1: 1LHEn3caqRdFx-FrVpJMaU0UBGw.roa (hash: JGFRK1aYZGR9nC1KAUCC1g5sne7T9Z9BLwNpceN88z4=)
2: AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl (hash: 4JiGmSIdNQDMtYeA8aI2tW9pq2d4VLIKjC+J4AutFas=)
3: TVB0_E2KqLreYZmGB-ctEX6GA-Y.asa (hash: jdcHKKQpPfeQbmp/MbhyPskNpABx3dwvkIeGRRHhdfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:59:75:b1:f6:64:8d:b7:f4:8b:f0:b3:41:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00641b7b07721d62066039d185f063b59dd1c538
Validity
Not Before: Sep 25 11:02:43 2026 GMT
Not After : Sep 26 11:02:43 2026 GMT
Subject: CN=697e1af4251f49774ed2fe8b29f73b2eb0685e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:64:32:1a:3e:63:fd:0b:a8:62:2b:e7:0f:
37:12:96:6d:6b:32:96:ad:c6:bd:b9:61:4c:e1:1b:
50:1c:32:97:c9:c2:4b:0f:11:20:bd:f4:b9:8d:3c:
1b:97:24:2c:1f:c3:b4:a6:be:2b:de:ab:de:39:c5:
d7:de:09:03:eb:87:3f:45:e8:aa:85:1a:75:0d:c3:
83:fc:23:7d:30:e0:a0:1d:b3:8e:18:03:84:50:62:
0b:21:70:ce:f7:8e:60:ab:18:68:b4:4c:93:55:c6:
b3:47:3a:f9:c0:26:57:5f:a7:e1:71:af:bd:e6:ac:
95:08:29:b9:bf:b7:7f:7a:97:01:20:68:ed:22:b3:
70:72:e8:a2:9b:ed:7b:af:28:79:5e:37:43:83:ee:
5b:6a:c7:cb:1a:6c:f6:da:e7:cc:db:8e:ee:10:c7:
89:af:a1:89:f6:bf:66:b2:33:4a:2a:6a:86:f2:47:
d6:b7:c9:c5:14:e3:b6:54:51:28:dd:b2:96:64:ee:
ee:9d:5b:9a:ec:fb:02:67:7c:81:61:3b:68:6a:d9:
5f:c6:6b:5f:a1:12:9c:47:11:c4:b1:50:f2:9a:b2:
92:e5:8d:38:7e:b9:77:72:b4:94:59:ce:b4:c7:2d:
87:91:e9:13:60:f9:f0:20:3d:1a:63:78:f1:a0:67:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7E:1A:F4:25:1F:49:77:4E:D2:FE:8B:29:F7:3B:2E:B0:68:5E:2A
X509v3 Authority Key Identifier:
keyid:00:64:1B:7B:07:72:1D:62:06:60:39:D1:85:F0:63:B5:9D:D1:C5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:94:1d:8e:95:1e:f0:e5:ae:d0:6b:ab:bd:3f:1a:3d:46:db:
c6:8f:e4:88:7f:9f:cb:c8:2a:dc:34:7c:67:0f:6f:45:5a:f5:
41:a6:28:97:f1:b8:b2:c2:a4:2f:59:b0:2d:b0:c3:47:84:26:
85:c2:0a:f9:ad:97:24:96:99:ec:42:d5:5a:f4:58:de:4b:86:
62:10:19:0d:46:61:87:03:2d:6f:ff:b0:83:14:4e:89:4a:ae:
28:c0:e7:58:fb:e8:f5:b3:8b:84:aa:31:2d:fe:30:d2:79:d9:
01:2b:3b:84:ee:42:ac:d1:12:fd:18:cb:99:97:60:85:10:ef:
db:40:94:72:7f:52:fe:89:3a:53:e3:74:03:50:fc:cc:ec:a9:
97:3c:7e:a9:a7:dc:e5:65:cf:e0:fa:b1:f6:42:6b:f4:4f:8c:
b9:94:1a:35:19:0e:c9:7c:12:4c:e0:19:f3:2b:81:de:e5:16:
da:ef:12:5a:7e:c7:bb:1e:30:5a:72:d8:98:bd:cf:dd:a5:08:
ee:91:b1:24:ed:f5:b6:9e:61:2e:ea:9d:1a:bc:bf:7f:ba:f8:
14:24:c3:ba:38:f0:7e:91:4f:09:ed:2c:c3:48:0e:cf:ee:66:
d6:1a:99:b7:3b:2b:d6:94:c9:55:20:b6:f6:a7:81:67:65:2d:
fe:81:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:42:42 2026 by rpki-client