Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: w1vcgpej/+HAc/oe6G4YyR26OBclhtJAxvogrLmVxmk=
Subject key identifier: B4:FD:35:18:47:FE:A0:5D:88:0A:77:BB:58:C2:0F:49:58:B0:4C:93
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019E1E6C28051880A34DF4F88E2C0F2CF296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0AD1
Signing time: Tue 12 May 2026 23:01:05 +0000
Manifest this update: Tue 12 May 2026 23:01:05 +0000
Manifest next update: Wed 13 May 2026 23:01:05 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: nLZ3t5BdTcxKBGQEDJp037V2YZqmG90urA5g1tSgqCg=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:28:05:18:80:a3:4d:f4:f8:8e:2c:0f:2c:f2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: May 12 23:01:05 2026 GMT
Not After : May 13 23:01:05 2026 GMT
Subject: CN=b4fd351847fea05d880a77bb58c20f4958b04c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:8e:65:be:23:30:3b:b4:a5:f1:a2:83:66:
52:ff:bf:b9:87:22:49:d2:54:00:d6:ba:a7:53:87:
0c:c6:d3:18:2e:1a:53:81:e4:4c:40:05:e0:19:7b:
0c:26:c1:f9:bf:bc:4f:90:c6:95:ca:9a:b7:77:62:
44:50:c0:4c:33:2c:45:24:ea:fa:12:65:86:6e:d7:
e2:1c:4c:16:6b:56:66:3d:50:58:7c:63:e1:66:c8:
69:b0:c1:24:af:8d:fc:1c:3c:7c:97:ee:f2:4e:ef:
2c:a1:28:dd:44:b5:2b:ae:0c:ad:48:f4:5d:fd:1f:
21:71:0c:d1:1e:eb:51:39:30:a4:0f:74:67:5b:c8:
a1:32:b5:64:9e:87:a3:25:65:74:6f:c3:2d:e2:31:
52:3d:db:61:11:68:21:35:b4:bb:6f:d5:52:64:3f:
60:74:12:bd:45:5f:01:f4:06:bd:29:e0:af:b0:72:
b9:88:25:99:ea:10:8e:cd:6d:27:b0:0b:98:a5:1b:
fa:55:7b:57:1f:df:f4:e4:7d:0f:37:5c:46:25:51:
51:90:fe:55:77:0e:a3:a6:3d:17:e2:ad:04:ae:f9:
b7:80:f3:16:92:3f:f6:13:43:0c:b0:e2:a0:43:f5:
f9:b5:5f:67:7a:5d:24:1b:f2:e9:9a:05:f6:6b:96:
ab:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FD:35:18:47:FE:A0:5D:88:0A:77:BB:58:C2:0F:49:58:B0:4C:93
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:35:7c:c6:e7:46:18:55:40:bf:cd:8d:be:4a:f4:3b:dc:8e:
ad:3a:0c:95:d0:7b:32:f0:eb:9e:d4:0f:9f:3d:fa:81:89:58:
cf:14:68:5d:f8:21:82:20:59:73:8b:80:12:2e:62:75:67:a6:
6f:bd:ee:0b:42:23:f7:60:0c:d7:ed:e0:74:c3:01:31:0e:36:
8c:d4:e7:ec:f4:91:13:dd:92:93:8f:f7:2b:ca:04:a6:52:53:
c1:2f:d7:df:fd:7e:1d:b6:fa:a9:00:e4:9a:f7:f9:b2:31:5a:
9b:82:73:95:5e:95:91:ca:0a:9b:67:f6:51:af:44:cb:2a:34:
07:cb:15:b2:c5:06:43:25:80:f2:45:06:25:e4:2a:0a:97:98:
da:93:7e:8b:25:ad:1b:d0:50:b6:5a:f4:e7:42:c9:65:a5:8a:
4f:d8:35:f3:17:e5:d8:b3:1c:d3:5d:2f:71:3d:01:7a:f8:bc:
a6:99:ad:8e:69:15:f5:8e:f3:b5:81:2c:ed:c7:55:4a:4d:da:
81:1c:ad:d5:9c:5f:d5:71:bd:c2:d8:e9:7e:31:e3:8e:28:7c:
62:b4:7d:3d:aa:00:56:00:1f:e0:2b:c6:22:00:48:4c:c0:82:
b2:8c:f9:0e:07:a3:df:40:83:6a:b9:a4:6a:50:32:5a:8a:ee:
60:46:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:22 2026 by rpki-client