Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: BzK8YXjAFWaatc06Bns/9fQbou/JpLT3ObpO2HHu48A=
Subject key identifier: 8E:5A:C1:3A:D9:E9:AD:E1:C3:55:14:68:DA:BF:3A:40:DF:62:F0:29
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019D273B1A165D9728622535AA07742AEFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0A51
Signing time: Wed 25 Mar 2026 23:01:17 +0000
Manifest this update: Wed 25 Mar 2026 23:01:17 +0000
Manifest next update: Thu 26 Mar 2026 23:01:17 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: kcZY7AVpBvRy+e5FGBFH7oJ99D5uupg32wKt8w+5l/g=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1a:16:5d:97:28:62:25:35:aa:07:74:2a:ef:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Mar 25 23:01:17 2026 GMT
Not After : Mar 26 23:01:17 2026 GMT
Subject: CN=8e5ac13ad9e9ade1c3551468dabf3a40df62f029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:af:0a:ef:ae:49:38:88:5c:61:b7:86:45:
13:e0:d5:95:42:da:4a:93:b2:4e:5c:05:54:34:cf:
f5:7b:0f:e6:f7:f8:4a:a9:7f:c0:36:2e:d6:f3:f2:
47:9d:f8:b0:60:ac:af:8c:99:e1:d0:6d:2d:55:12:
7b:ba:a8:ca:6d:27:31:ab:44:91:41:48:fe:0d:1f:
63:83:15:d7:94:e2:3d:9a:e1:c8:1d:16:0f:48:b6:
ce:fc:65:9c:ff:7e:85:8d:6b:00:b3:c6:4a:f6:60:
03:b5:3c:8d:ed:03:b9:e5:76:02:a1:af:fb:33:ee:
aa:40:a3:95:b3:2f:59:d4:6c:db:1f:1d:97:3f:a8:
43:fc:b0:1e:b4:52:c7:40:69:a6:59:4b:04:8c:2e:
fc:a9:5b:b0:53:f1:16:93:12:c7:e0:a2:46:1c:02:
0f:c0:64:99:69:23:99:5e:0c:b3:20:4a:77:8b:a7:
f8:da:fa:63:66:82:ef:d0:1f:98:e1:de:64:d1:39:
07:fa:d9:84:a0:21:b4:60:bc:69:74:62:77:87:03:
63:5c:d7:78:74:46:c1:31:74:59:74:b9:f6:fa:13:
81:4a:95:ec:89:b2:51:98:96:10:ec:8e:4c:a0:1f:
e6:41:01:d7:1d:12:4e:82:5d:22:63:da:8c:95:8b:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:C1:3A:D9:E9:AD:E1:C3:55:14:68:DA:BF:3A:40:DF:62:F0:29
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:96:2e:47:50:c5:23:e6:bc:05:37:c1:eb:64:51:07:ca:99:
05:6f:9a:7a:0d:16:a1:45:84:be:05:5d:e1:eb:9d:5d:b2:66:
e9:38:eb:f0:79:75:a4:ca:d0:51:96:34:84:e1:fe:13:8d:d1:
9a:51:d4:12:27:2d:8a:1c:63:2a:4b:0d:5d:2e:05:20:ad:78:
04:76:87:8d:16:33:a3:3e:42:c0:ff:9b:c4:8a:01:f3:3c:21:
c1:0e:0f:af:9d:01:38:f3:df:23:1a:0f:11:15:0b:d3:29:2f:
7c:0e:39:43:df:85:6b:f2:17:75:c3:21:37:d0:37:e5:83:82:
30:a3:87:8b:c6:1d:34:7b:7e:07:67:15:43:27:4f:1b:a6:65:
06:e9:0e:cf:7c:78:e9:3d:6f:22:bf:c7:1e:fe:ef:15:42:42:
d3:14:43:ec:bc:e1:52:94:45:69:f2:36:95:61:78:91:29:75:
34:f7:db:7f:03:24:34:a9:3b:25:6b:e8:f5:d0:75:87:39:a3:
4b:f8:a2:72:0c:d6:05:66:c9:ed:4a:e0:e2:b3:0e:c3:f6:12:
dc:5b:4d:b0:bb:26:c6:51:98:6c:34:9e:a0:eb:11:16:aa:99:
03:b3:8e:8b:52:98:2d:53:ad:a8:40:d6:c7:c4:99:91:9c:c8:
8e:fe:b4:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOxoWXZcoYiU1qgd0Ku+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm
NmExMTMwHhcNMjYwMzI1MjMwMTE3WhcNMjYwMzI2MjMwMTE3WjAzMTEwLwYDVQQD
Eyg4ZTVhYzEzYWQ5ZTlhZGUxYzM1NTE0NjhkYWJmM2E0MGRmNjJmMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkGvCu+uSTiIXGG3hkUT4NWVQtpK
k7JOXAVUNM/1ew/m9/hKqX/ANi7W8/JHnfiwYKyvjJnh0G0tVRJ7uqjKbScxq0SR
QUj+DR9jgxXXlOI9muHIHRYPSLbO/GWc/36FjWsAs8ZK9mADtTyN7QO55XYCoa/7
M+6qQKOVsy9Z1GzbHx2XP6hD/LAetFLHQGmmWUsEjC78qVuwU/EWkxLH4KJGHAIP
wGSZaSOZXgyzIEp3i6f42vpjZoLv0B+Y4d5k0TkH+tmEoCG0YLxpdGJ3hwNjXNd4
dEbBMXRZdLn2+hOBSpXsibJRmJYQ7I5MoB/mQQHXHRJOgl0iY9qMlYsDfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5awTrZ6a3hw1UUaNq/OkDfYvApMB8GA1UdIwQY
MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et
ZTY2NzllN2I3OTVhLzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh
LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZYuR1DF
I+a8BTfB62RRB8qZBW+aeg0WoUWEvgVd4eudXbJm6Tjr8Hl1pMrQUZY0hOH+E43R
mlHUEictihxjKksNXS4FIK14BHaHjRYzoz5CwP+bxIoB8zwhwQ4Pr50BOPPfIxoP
ERUL0ykvfA45Q9+Fa/IXdcMhN9A35YOCMKOHi8YdNHt+B2cVQydPG6ZlBukOz3x4
6T1vIr/HHv7vFUJC0xRD7LzhUpRFafI2lWF4kSl1NPfbfwMkNKk7JWvo9dB1hzmj
S/iicgzWBWbJ7Urg4rMOw/YS3FtNsLsmxlGYbDSeoOsRFqqZA7OOi1KYLVOtqEDW
x8SZkZzIjv606A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:06 2026 by rpki-client