Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: CMs+L7Hyn8cbKWDtE3BH+khwDpTE4NM6BmAF8arsYVM=
Subject key identifier: 39:91:47:BE:CF:3E:F9:B0:D0:25:2C:C8:02:77:9A:FA:31:E1:6E:B2
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 019F916C8F471CE5F2EB3ABBA798CCB8242C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0CBB
Signing time: Fri 24 Jul 2026 00:00:38 +0000
Manifest this update: Fri 24 Jul 2026 00:00:38 +0000
Manifest next update: Sat 25 Jul 2026 00:00:38 +0000
Files and hashes: 1: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: +w/fowPMG7ghG45tn2yLZsaf4xA8jxMtfT+cIFL3ygM=)
2: hTRi4HtTpCkolgUuQDDvPG_VyIs.roa (hash: 0FlUN5CzPW1X1y6ikdRfKAaNuwCJRvtbLFmH3Xzp8cI=)
3: wDgy_dfCRG9cDmytDHPeiO1ky38.roa (hash: zBbuMIpRBO8AxXuh3KIVCJ9BZ6863IbMys75IrzppoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:8f:47:1c:e5:f2:eb:3a:bb:a7:98:cc:b8:24:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Jul 24 00:00:38 2026 GMT
Not After : Jul 25 00:00:38 2026 GMT
Subject: CN=399147becf3ef9b0d0252cc802779afa31e16eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:22:ff:3c:98:26:fb:a3:14:22:f3:9b:0b:
12:4d:c5:6d:dd:04:39:a3:c5:a9:ba:06:35:f5:60:
41:4e:6e:3b:00:08:2b:0f:c2:ee:c4:ba:2e:f4:f4:
2d:b9:58:e3:6e:2f:21:fb:a8:f7:57:88:8e:29:9a:
21:9d:8f:0d:1b:3c:f3:a2:86:12:46:ee:c3:8a:fd:
94:fd:62:db:1d:d2:b4:2b:23:ca:ed:f7:7f:32:c9:
f6:39:c2:c1:fd:35:10:dd:f7:6b:67:0d:fb:12:cc:
2f:75:1d:fd:5c:e5:a6:e3:b9:8a:73:5a:83:e2:39:
f0:0f:e6:87:37:04:3a:fb:77:88:39:d4:c7:3f:ae:
41:a0:c2:01:4f:e4:35:56:05:93:5a:e4:7b:19:96:
03:6b:67:fc:dd:29:a4:20:43:8a:33:3e:30:42:18:
dd:d4:84:45:67:11:c0:2a:3e:a5:c9:99:8d:9a:b1:
6d:71:c3:ab:e6:e2:f7:a1:10:a5:70:82:46:38:8e:
40:10:79:9e:83:34:eb:6f:4a:0e:66:e2:89:15:4c:
0f:6a:cb:04:ba:42:70:b3:09:e0:d7:ad:54:e6:8a:
05:f6:ff:5c:dd:d1:ca:61:33:be:75:cd:2d:3e:1f:
b6:e8:3a:d1:4a:9e:6e:3a:82:7d:89:26:cd:57:00:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:91:47:BE:CF:3E:F9:B0:D0:25:2C:C8:02:77:9A:FA:31:E1:6E:B2
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:35:68:d5:91:ce:83:1b:69:df:63:94:a0:af:63:c4:ca:8e:
25:22:89:a1:2c:03:b9:4c:b2:3a:fd:66:3f:44:f3:fa:42:27:
99:fb:16:eb:9f:7b:44:53:49:d0:e6:4c:40:1c:c4:71:a5:7c:
40:37:58:d6:3a:69:b0:e9:81:d8:11:5a:3a:b8:db:8f:ce:0f:
6b:29:e5:c5:6e:02:2f:f7:3a:57:7b:02:04:dc:c8:ec:97:fa:
97:ff:72:cd:27:75:83:ce:f2:5d:ef:0a:9f:d7:b9:e3:3e:87:
f8:36:6c:96:67:4f:63:52:fb:69:51:9f:3f:0a:fb:f3:ee:c1:
16:ff:2f:27:85:56:71:47:96:54:17:f7:6a:5d:19:8b:f5:1f:
d0:2e:d8:9e:97:19:00:13:24:9b:6f:96:0f:9d:a0:2a:58:37:
c9:8b:cd:e7:23:8b:6a:16:c6:b6:bf:58:b8:8f:d4:e9:a0:11:
3a:35:a5:0d:b4:33:c7:81:6f:2e:03:df:b8:b8:fe:25:ed:de:
af:b6:da:22:72:6d:90:8d:45:5e:3d:b5:5d:2b:1e:00:34:32:
1a:1f:2c:bf:ad:c3:b4:8a:ab:45:ea:a4:ef:a7:9c:50:6f:38:
66:9a:b9:e6:d2:b8:91:ef:5f:db:5f:a4:36:62:2d:b3:60:1e:
1c:6d:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:25:47 2026 by rpki-client