Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: e4BxzjUBi6qJ4rFpC79LhQzVEchu4A/FhED1C9pq8FY=
Subject key identifier: 08:63:09:B6:45:37:EC:78:0A:AD:DC:AE:47:61:22:F6:B0:57:77:A8
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019F91359996F28ACAD54E24960CB019DA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0B91
Signing time: Thu 23 Jul 2026 23:00:36 +0000
Manifest this update: Thu 23 Jul 2026 23:00:36 +0000
Manifest next update: Fri 24 Jul 2026 23:00:36 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: alLE71swGdeBV4+Iq3NMobSnXc1aSyNS3P1NfrGyfMs=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:99:96:f2:8a:ca:d5:4e:24:96:0c:b0:19:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jul 23 23:00:36 2026 GMT
Not After : Jul 24 23:00:36 2026 GMT
Subject: CN=086309b64537ec780aaddcae476122f6b05777a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:57:02:23:06:0f:0e:f2:32:c1:18:63:cf:
5f:a2:f4:de:2f:f0:e6:14:ad:06:d7:d9:20:e9:fc:
c5:cd:04:ac:c9:53:06:75:10:a3:09:c5:c2:f3:a1:
1f:0f:3c:fe:e2:5b:83:5b:8d:96:c3:4a:d4:79:0d:
98:46:eb:66:96:48:ea:63:2b:96:4e:d5:0b:9b:56:
c9:5e:ef:15:9f:99:34:6d:07:28:03:31:99:fc:aa:
13:5f:72:3e:2d:6d:4c:e8:4b:9f:0e:20:d9:d5:28:
ea:e1:fe:0d:c5:6a:3d:29:f2:64:23:3e:36:fd:0a:
93:e0:c8:48:2d:29:b4:44:6d:35:18:d7:87:30:3f:
11:34:a0:49:2b:71:27:4e:e6:20:7c:3e:4a:d2:48:
d8:43:11:cb:63:d4:db:95:51:22:2e:05:23:57:2a:
c2:b3:6d:d0:45:90:9c:6e:cc:32:61:06:80:e2:9b:
e0:cb:c4:d9:de:69:0c:da:6d:1b:e8:f4:c5:8e:e9:
4b:69:3f:ca:6f:62:48:7b:d4:d8:60:85:58:44:c5:
97:0a:a9:db:a9:d9:92:59:6c:b5:7f:66:ab:1e:c9:
14:98:32:8d:3b:6f:2f:d6:1b:e7:6a:ec:2e:d1:05:
c6:61:32:88:3c:62:2b:f3:04:be:e7:34:a2:6d:07:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:63:09:B6:45:37:EC:78:0A:AD:DC:AE:47:61:22:F6:B0:57:77:A8
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:47:26:d0:9f:5a:b2:b4:3d:ba:1f:51:ee:ac:3e:3d:e7:cd:
a4:03:71:7c:e4:39:98:2e:4d:06:1a:6b:9f:52:e8:df:8d:73:
6a:8f:6b:17:c4:03:c5:3f:6a:04:47:cf:dc:c5:bf:06:ec:c4:
ed:43:8c:c7:28:dc:01:e5:a5:76:c3:e2:24:2e:60:52:68:b9:
86:8e:0f:cb:6d:db:c8:8e:4c:6c:12:8b:85:18:7e:11:5f:e1:
15:e8:db:cb:01:64:17:ef:bf:ac:20:49:c6:f4:33:4e:b7:3e:
df:0f:57:44:fc:e3:74:51:d3:ac:c0:c1:12:83:1c:14:06:8a:
f7:0e:32:f8:2f:1c:4a:55:dc:7f:44:19:61:57:8c:46:92:b8:
a4:86:e8:65:01:80:bf:b6:2d:23:eb:fe:c2:c1:54:92:8d:27:
2b:d4:60:22:56:68:be:ff:94:06:3b:f6:e2:3d:5b:d3:ba:e8:
9c:f7:45:0f:f2:d2:a3:43:ee:c3:b7:e0:f5:43:ed:8f:28:86:
50:96:f0:70:ad:e1:5e:bb:93:05:6f:d1:d3:f3:c5:f9:f6:da:
d6:ff:c3:f6:2d:82:bd:75:15:c1:e6:dd:3b:5d:d9:b0:00:36:
79:fb:25:13:d7:e1:ef:ce:4b:04:77:fc:c2:64:10:fc:5c:96:
f8:3e:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:13 2026 by rpki-client