Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: lOFYt1wwKXGJTeerDuxtrLHTVTk3cPn1Jgkf+9dhpQQ=
Subject key identifier: 3C:F5:5E:C9:54:59:BC:D8:69:09:43:FD:8F:74:71:EC:4E:59:10:BA
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01A1DC4AF7A418EA37FFA432B15E7D9D83D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0CC1
Signing time: Sat 14 Nov 2026 23:01:02 +0000
Manifest this update: Sat 14 Nov 2026 23:01:02 +0000
Manifest next update: Sun 15 Nov 2026 23:01:02 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: kr5d9VNBaOvyiGstxL8G+J77+/DLvWWhVR9Qwl8pi8E=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4a:f7:a4:18:ea:37:ff:a4:32:b1:5e:7d:9d:83:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Nov 14 23:01:02 2026 GMT
Not After : Nov 15 23:01:02 2026 GMT
Subject: CN=3cf55ec95459bcd8690943fd8f7471ec4e5910ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:21:24:85:93:30:9f:08:eb:88:49:12:0c:
fb:c1:a1:08:18:84:f1:3a:2e:b8:35:e9:7d:e9:02:
ba:46:39:0a:e2:2b:b7:0b:d4:81:1e:6a:ba:1c:38:
90:cb:c4:68:48:68:7c:da:59:b7:8f:84:35:4d:a5:
23:9c:b8:d1:33:cb:a9:61:2c:83:61:49:86:dc:66:
b3:8f:15:20:f9:8f:7e:6e:97:bb:b6:e0:0c:41:a7:
41:20:72:fa:16:c5:0f:39:6e:e7:60:8b:bb:43:b2:
b7:19:81:01:f9:a0:c2:b9:b9:04:88:98:2b:85:74:
38:7d:eb:50:e0:73:2c:5a:33:6a:d4:3a:14:99:99:
c3:a0:c5:c6:b0:bd:53:25:3c:0a:94:1d:37:7c:95:
6e:68:52:4b:ee:ee:ec:0a:44:a5:34:1a:35:b8:2b:
f4:7d:4e:ec:c8:6e:c0:ba:2c:bb:64:65:21:89:f0:
b0:95:d5:4b:d7:7f:92:af:35:a2:23:fb:15:49:a6:
cb:ca:59:d9:56:b1:86:ad:ab:38:29:da:d1:8e:4f:
81:5a:3a:ec:1f:a9:1e:f9:58:97:03:2b:01:bb:1b:
6e:a8:f7:12:1e:51:0f:bb:61:8a:05:89:8e:2a:fb:
2d:6e:bc:0d:a6:ae:af:da:98:45:84:01:f8:b2:bb:
c3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F5:5E:C9:54:59:BC:D8:69:09:43:FD:8F:74:71:EC:4E:59:10:BA
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5f:78:a7:a3:28:90:11:32:80:2f:12:44:41:fb:20:b5:9d:
27:0b:9e:be:19:29:32:c3:38:0b:f5:66:58:e3:20:cc:26:cb:
66:9d:4a:bb:23:07:da:13:e1:20:81:b2:81:fe:ce:74:28:98:
9f:ad:8f:e3:c6:09:d5:fe:33:ac:28:7b:96:27:1a:29:2c:a4:
c1:81:6c:7f:82:11:7e:0e:98:03:22:b1:72:e6:6e:05:44:02:
52:3e:e6:be:3f:2e:e0:76:e7:ea:b6:55:09:91:ad:0f:24:2d:
80:7c:dc:f3:22:24:11:ff:87:53:8e:a3:64:e7:ec:a1:ee:ff:
8f:d5:8b:86:0a:c7:e2:78:a1:5b:5a:f4:d5:c8:24:0a:39:85:
66:84:73:03:18:3b:2f:77:bf:77:c5:75:ef:38:9e:6f:90:45:
29:32:73:38:d2:3c:f9:fb:1a:14:4e:b1:7d:c8:c3:0c:8a:46:
32:b1:51:a0:4a:9e:13:58:18:dd:83:ea:fd:b6:18:f1:27:44:
ff:66:f6:8d:11:0c:22:7a:52:9b:f0:8e:0c:53:da:57:a3:c3:
15:12:ee:ea:5f:23:d4:cf:f0:a5:6e:57:c7:ef:79:e2:82:a7:
07:bf:0b:bf:e6:35:3d:8a:5a:2a:ab:3e:75:1e:7e:f5:6e:9b:
19:1a:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 03:31:39 2026 by rpki-client