Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: MFG8ISb5nYBa7RjcSRgIfZy13atkZuD05i4/6RbZh1I=
Subject key identifier: B4:EB:9A:D6:DC:0D:19:08:8D:F9:1D:67:1F:33:E4:0F:51:51:0F:F0
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01A0D5A72D81EEFDDB94FEB5503B6CC37E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0C39
Signing time: Thu 24 Sep 2026 23:01:38 +0000
Manifest this update: Thu 24 Sep 2026 23:01:38 +0000
Manifest next update: Fri 25 Sep 2026 23:01:38 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: Lm8ZYVF2Hx03Yx8tzc8EN7C4Yjxwinfta8YFrCc1sWk=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:2d:81:ee:fd:db:94:fe:b5:50:3b:6c:c3:7e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Sep 24 23:01:38 2026 GMT
Not After : Sep 25 23:01:38 2026 GMT
Subject: CN=b4eb9ad6dc0d19088df91d671f33e40f51510ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:17:94:94:88:50:93:4b:a0:f9:69:8e:68:
f4:47:1f:26:b7:53:84:f6:56:5d:a6:16:28:df:06:
8d:5b:ed:b6:2d:1a:4b:69:3a:6f:16:83:9d:03:27:
8c:15:97:a1:5d:de:87:9e:10:56:e7:9b:5e:d1:19:
ec:96:cb:c3:2e:f3:88:ae:e2:d2:dc:6a:b4:e2:a6:
90:8b:16:9e:4b:26:3f:78:8f:cd:a7:82:4e:d0:cf:
c1:6f:e7:ca:c9:d2:ab:2e:56:c6:d6:11:f3:e5:bc:
82:55:16:b2:0e:84:0a:ab:8e:c0:e8:fe:70:9e:8d:
cf:e9:9a:38:45:c8:a6:71:41:88:97:2b:41:42:71:
ee:40:63:28:de:d3:1d:16:1b:3e:f0:89:e3:37:47:
88:66:0d:78:b7:a5:75:be:42:87:ff:ae:12:61:7b:
e3:f7:e8:2a:a3:d0:70:4b:c0:cc:8e:4e:dc:da:d1:
ef:b9:77:ad:43:85:60:8a:e5:64:bb:77:db:d9:7f:
33:9c:b9:cb:3a:7b:55:92:a3:e6:11:80:a9:22:a3:
54:eb:7a:8d:6c:c9:21:74:24:58:dc:e0:ca:df:66:
4a:81:60:71:8c:7e:e0:f1:e0:c1:7d:44:95:f1:39:
f4:a6:d7:83:ea:5d:0d:82:68:2f:9d:9b:0e:21:2c:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EB:9A:D6:DC:0D:19:08:8D:F9:1D:67:1F:33:E4:0F:51:51:0F:F0
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9b:4a:22:70:4f:aa:7b:e2:3c:65:79:a0:87:6b:e5:d7:7d:
0e:3e:13:d4:94:64:ba:cb:61:f1:dc:c8:6c:fa:f8:c5:71:9c:
5a:45:6a:26:af:7c:6a:25:e3:a8:3f:6d:1d:d0:f0:67:b1:73:
5f:15:38:7b:9d:ac:3a:0d:d3:0d:69:47:90:46:a5:7f:61:c3:
5a:db:c8:6c:ef:ea:85:5f:2b:a7:a0:81:a4:78:83:2a:9a:25:
1d:c4:60:6a:a9:eb:6c:b8:63:25:74:40:46:a5:79:0c:28:4a:
29:84:13:90:16:68:c3:5f:48:e6:b0:15:0c:d4:ee:5c:fe:15:
ee:5b:81:ea:e0:8b:87:60:58:ae:c2:19:f6:da:7d:16:71:3a:
1c:dc:b6:e7:2e:69:c8:35:71:ec:99:f9:7f:8c:f3:f8:a6:35:
2a:e9:ba:93:a9:41:27:e4:6f:1d:2c:d8:e1:41:f2:44:2a:09:
78:61:73:ca:20:83:f2:07:f7:3d:42:bd:69:4e:a3:fa:d7:3a:
43:bc:05:fe:6d:7d:16:98:90:25:54:7d:45:98:49:59:9c:bd:
53:6e:8f:8b:bd:0b:d9:ce:1d:bf:a1:cb:c9:58:7f:83:51:8f:
70:c3:e5:6f:2b:57:c7:c5:96:53:b1:ed:12:1f:42:43:2e:c5:
d2:87:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:20:17 2026 by rpki-client