Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
File: AguJY5thIAOqgSvktlIbVnhFao4.mft (raw, json)
Hash identifier: tlUeo9Ad7VglpREb9ZxHCbFyVR3Wg+rZbW8wg50Ju5M=
Subject key identifier: 04:EB:7E:0A:6F:15:75:BA:D4:EF:F6:46:08:28:86:A7:C5:C3:E4:4E
Authority key identifier: 02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
Certificate issuer: /CN=020b89639b612003aa812be4b6521b5678456a8e
Certificate serial: 019F909106AC152DB0AD1E4DF67D0A1A488D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
Manifest number: 0727
Signing time: Thu 23 Jul 2026 20:00:51 +0000
Manifest this update: Thu 23 Jul 2026 20:00:51 +0000
Manifest next update: Fri 24 Jul 2026 20:00:51 +0000
Files and hashes: 1: AguJY5thIAOqgSvktlIbVnhFao4.crl (hash: B0K/eh5Tq+p/sU3OX+DX7ZwmTWVHg1d2/Vfj3ekjbH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:06:ac:15:2d:b0:ad:1e:4d:f6:7d:0a:1a:48:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020b89639b612003aa812be4b6521b5678456a8e
Validity
Not Before: Jul 23 20:00:51 2026 GMT
Not After : Jul 24 20:00:51 2026 GMT
Subject: CN=04eb7e0a6f1575bad4eff646082886a7c5c3e44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:24:a9:f0:0b:22:1a:41:26:83:04:c7:ac:
55:c1:44:fa:0c:ad:ea:97:e7:55:75:36:d0:f0:43:
61:e4:46:81:cf:15:42:35:9c:ee:48:ae:fe:50:e2:
e9:cb:24:be:c6:11:b6:0e:25:69:f8:9c:6b:f6:ee:
be:81:ad:1a:d3:0f:a7:01:d3:0e:25:2a:af:ef:23:
58:c5:47:fd:0a:2f:73:b2:8e:aa:95:af:64:b5:8b:
48:86:c3:4e:f6:00:16:97:59:72:b0:78:51:c0:8e:
66:7c:26:86:2f:88:66:14:26:71:16:09:f0:e6:4f:
79:c5:f9:92:23:6e:a1:5a:2e:2f:2a:d3:48:79:69:
b4:81:f9:de:4a:e9:fc:38:0b:17:1d:8a:c7:b8:5d:
de:1d:12:ab:ef:25:81:8f:55:7b:44:52:4a:5c:2e:
42:e6:91:1f:49:6a:92:15:e2:a1:4f:1f:be:e9:be:
e8:da:68:f6:db:6d:40:5c:43:ea:de:1b:86:93:83:
e1:77:3e:b4:f9:e4:16:d4:14:05:db:81:a1:29:6f:
3e:84:1b:a8:69:7c:f2:4f:19:5d:79:43:18:35:31:
51:0d:76:ca:8d:b9:ea:5d:2a:bc:a7:66:60:7e:a9:
83:b9:9a:b7:f6:84:9f:7b:ca:28:db:9d:c8:72:29:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EB:7E:0A:6F:15:75:BA:D4:EF:F6:46:08:28:86:A7:C5:C3:E4:4E
X509v3 Authority Key Identifier:
keyid:02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:8d:59:b2:35:5b:a8:0d:ca:fa:9e:74:61:d8:5a:5a:eb:
a7:2a:a0:c7:da:b7:c8:26:da:79:f2:c1:0a:88:4c:ed:85:08:
27:8b:e2:d0:30:f2:61:e6:a2:cf:f1:b0:b4:b9:d3:f0:8c:f9:
9c:50:15:02:f5:51:6c:ac:05:0e:38:de:ef:59:42:33:29:5d:
6e:fe:c1:bd:72:2e:ef:bc:e2:a1:fd:0e:15:b6:e5:3b:71:c8:
d9:ff:b5:da:2b:e9:e5:8c:08:d7:68:c2:7c:d0:de:9a:8a:f6:
89:16:21:ef:2a:0b:b5:df:ab:c4:67:09:6b:e0:1b:d7:f3:5e:
da:db:cf:09:41:df:08:d1:d6:7f:a8:dc:63:e9:32:55:cd:78:
ea:c9:29:09:4b:17:7a:57:2c:7d:8f:bb:2c:63:ab:78:61:d6:
e1:01:43:62:e7:3a:16:38:ba:ed:d7:44:8e:1f:13:04:73:c6:
66:83:44:dd:0d:0c:dd:c4:3e:ca:c9:f0:a8:14:a3:7e:40:8f:
cb:02:b0:eb:c5:28:c3:5f:f4:e6:60:5c:60:15:d4:23:e8:2d:
02:e8:20:c4:0c:8a:8a:7d:5f:07:6d:fe:b2:cb:61:f5:11:88:
c6:a3:ba:25:ce:ad:dc:36:85:e2:e3:22:bc:d1:8d:75:57:9a:
26:8a:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:47:19 2026 by rpki-client