Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/07eebc-1668-43b9-895b-a2211e94d686/1/AGXWoqJlPFzAt4dm-6qC7lpFGT4.mft
File: AGXWoqJlPFzAt4dm-6qC7lpFGT4.mft (raw, json)
Hash identifier: dX4ILo1MNR6qZd8Snt4H4E831cSNoby4nuKBUvMeHVY=
Subject key identifier: 68:FB:C1:E4:EF:AE:6E:09:9D:00:98:5A:B3:4D:AE:49:F3:81:B9:AE
Authority key identifier: 00:65:D6:A2:A2:65:3C:5C:C0:B7:87:66:FB:AA:82:EE:5A:45:19:3E
Certificate issuer: /CN=0065d6a2a2653c5cc0b78766fbaa82ee5a45193e
Certificate serial: 01A0D727B6DD2C2829B9837EADE10048416E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGXWoqJlPFzAt4dm-6qC7lpFGT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/07eebc-1668-43b9-895b-a2211e94d686/1/AGXWoqJlPFzAt4dm-6qC7lpFGT4.mft
Manifest number: 015A
Signing time: Fri 25 Sep 2026 06:01:38 +0000
Manifest this update: Fri 25 Sep 2026 06:01:38 +0000
Manifest next update: Sat 26 Sep 2026 06:01:38 +0000
Files and hashes: 1: AGXWoqJlPFzAt4dm-6qC7lpFGT4.crl (hash: XrXOKgo9aY2VuE60GwrTFeOOZKh1LRVpDiBhDLexyoA=)
2: Hozfi_z7Nb5MwzGnu8vIYjTh9K4.roa (hash: x5ni+Eo0isGCh+JHljr1HxCpSQZxSV6SuAku+LmGpZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/07eebc-1668-43b9-895b-a2211e94d686/1/AGXWoqJlPFzAt4dm-6qC7lpFGT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/07eebc-1668-43b9-895b-a2211e94d686/1/AGXWoqJlPFzAt4dm-6qC7lpFGT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGXWoqJlPFzAt4dm-6qC7lpFGT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:b6:dd:2c:28:29:b9:83:7e:ad:e1:00:48:41:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0065d6a2a2653c5cc0b78766fbaa82ee5a45193e
Validity
Not Before: Sep 25 06:01:38 2026 GMT
Not After : Sep 26 06:01:38 2026 GMT
Subject: CN=68fbc1e4efae6e099d00985ab34dae49f381b9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:db:32:13:14:70:09:c6:b8:2d:fa:cd:59:
7e:a1:3f:96:c0:0c:f2:48:45:8c:4c:50:3b:a7:46:
97:cc:ca:cb:33:2a:13:78:3b:cb:eb:13:fa:36:79:
b5:59:cd:00:23:79:60:bf:38:64:97:4c:37:7d:c2:
3a:87:1c:bd:38:5d:b0:65:3e:6a:e2:32:09:08:12:
2c:38:fc:19:2f:18:72:ed:1d:f7:fa:93:7d:83:81:
38:b0:07:7e:1f:b5:ab:0d:50:2f:75:43:f3:03:ff:
c0:f2:b9:51:f1:64:3b:08:de:5c:df:5c:44:c0:c8:
16:ee:08:08:f0:f7:f1:6f:d1:f6:0a:82:64:8c:28:
8b:9c:27:f9:7c:82:58:bd:fd:c3:0d:65:86:89:68:
66:d7:ea:a1:41:95:96:f7:e2:47:18:b5:74:cf:6a:
06:b0:a5:b6:06:6c:96:6d:43:21:47:c4:58:a2:db:
4c:c9:1a:a8:6d:24:da:9d:06:fa:f3:14:88:f4:ad:
2f:9a:1a:b0:41:36:22:83:62:dd:f6:6e:00:6b:7b:
ef:7f:31:f1:39:bf:f1:84:79:8b:2f:14:9e:8b:e5:
3f:72:c7:0d:98:e7:0e:27:02:0b:a2:9b:b5:e2:e8:
96:cf:aa:d7:67:2d:20:f9:c7:7e:8e:cb:8b:7f:63:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FB:C1:E4:EF:AE:6E:09:9D:00:98:5A:B3:4D:AE:49:F3:81:B9:AE
X509v3 Authority Key Identifier:
keyid:00:65:D6:A2:A2:65:3C:5C:C0:B7:87:66:FB:AA:82:EE:5A:45:19:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGXWoqJlPFzAt4dm-6qC7lpFGT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/07eebc-1668-43b9-895b-a2211e94d686/1/AGXWoqJlPFzAt4dm-6qC7lpFGT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/07eebc-1668-43b9-895b-a2211e94d686/1/AGXWoqJlPFzAt4dm-6qC7lpFGT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:88:10:30:63:a9:c0:a9:4f:8d:33:39:f9:f7:6f:be:2e:bd:
ad:51:57:46:b9:09:26:c2:d2:1a:38:3f:0f:33:c2:ab:88:e0:
2e:74:ae:cb:47:09:d5:0c:d3:fc:11:b3:de:31:24:d7:ed:3d:
6a:fd:bb:19:c6:db:88:46:11:ab:24:4a:09:ec:49:b2:06:36:
f4:99:5b:d6:c1:a7:7b:16:14:2c:af:5d:ba:a9:25:10:f8:f8:
6f:88:b4:04:81:0e:97:9e:49:35:65:ff:a7:68:f0:43:9e:34:
ac:c5:2e:90:80:d6:22:2b:79:a8:14:bb:15:f6:56:be:d3:4c:
a2:f7:08:a1:6d:86:dc:b2:bf:f6:d3:ae:11:09:e9:46:cc:a2:
d8:0c:bd:a0:9c:af:62:20:f1:e3:83:21:3d:b1:d4:14:7d:f4:
8b:bd:66:74:66:7e:2a:23:29:90:a7:19:07:8c:48:5a:9e:c1:
77:9c:ec:28:0f:91:75:64:6e:5b:f9:90:38:8a:ba:02:b1:80:
57:09:eb:c1:50:27:dd:4b:19:0d:d7:56:35:f2:43:77:d8:f2:
1b:e7:c8:75:18:24:84:47:b5:9d:26:e8:1b:a1:e6:7f:44:80:
a3:2a:10:d1:59:45:ef:90:4c:4f:89:09:bc:69:b6:19:84:8e:
99:fd:58:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:40:06 2026 by rpki-client