Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: rD1eRLFLuBCizVll9n/MBHjA0ClRHZVKRp6UowIgKL0=
Subject key identifier: E1:BC:3A:4F:6B:CE:30:48:FD:D2:53:42:69:66:93:28:E9:4F:BD:FC
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 019D98F4C88999B568F1D02FFAEEFFEBE8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:01:12 +0000
Manifest this update: Fri 17 Apr 2026 01:01:12 +0000
Manifest next update: Sat 18 Apr 2026 01:01:12 +0000
Files and hashes: 1: 58YF0ymtPf000UYsXQwLeX0ZufU.roa (hash: 40hd3BRBbvBiTvhYzazTmqFgM3O0ax5/aAw4bE5lLLg=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: PHbFYoK9V1m2u3zWjmBsrDIw2xPoRphFnuCw1g4ugNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c8:89:99:b5:68:f1:d0:2f:fa:ee:ff:eb:e8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Apr 17 01:01:12 2026 GMT
Not After : Apr 18 01:01:12 2026 GMT
Subject: CN=e1bc3a4f6bce3048fdd2534269669328e94fbdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:57:2d:6c:05:e6:34:95:ba:bd:72:15:08:
f7:10:53:0c:85:e1:68:90:dd:77:44:96:78:3b:dc:
09:31:e6:7c:ab:36:be:f5:63:ad:f1:5e:76:a5:3d:
fe:ab:bd:85:3e:c9:14:06:58:fe:70:d1:87:ca:2b:
34:a0:a2:8d:b1:79:1e:27:d5:3b:65:e8:0a:9c:40:
c6:30:76:cc:75:19:49:93:37:e4:8f:67:26:1a:11:
6b:de:71:76:1b:25:36:26:a0:15:dd:1d:fd:a4:86:
5d:ab:6b:45:7b:3c:24:1f:ae:35:5d:38:61:94:b0:
0c:ef:90:1b:cf:30:79:7a:46:e9:a5:c9:74:e3:14:
18:17:e3:fe:ab:79:53:62:f8:4a:1c:05:98:94:90:
de:70:ed:0c:cc:95:5a:2e:ee:c7:3a:ab:de:b8:dc:
60:32:e9:19:a4:17:57:b7:69:64:da:99:68:55:ce:
5c:b5:70:a2:4c:8f:c8:a8:a1:a7:35:2c:78:aa:e4:
21:73:22:fe:34:5c:99:b3:1c:86:a6:3d:27:4b:ef:
37:1b:95:d7:e4:4f:29:7f:c4:d8:a8:9d:14:a7:d1:
59:2b:23:7e:69:6d:60:bb:13:40:3a:29:d5:f0:e3:
26:a5:71:d5:d5:1b:09:a2:9b:04:ed:c6:65:9d:a6:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BC:3A:4F:6B:CE:30:48:FD:D2:53:42:69:66:93:28:E9:4F:BD:FC
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2a:34:07:df:24:7b:1c:80:11:4f:15:83:c0:93:0f:38:cf:
d4:d6:10:0d:11:98:f8:6a:42:1a:c8:ac:e6:42:48:6b:6a:3c:
84:cb:d3:c8:fa:3d:ae:d2:43:3a:b3:e4:33:d2:93:46:63:4a:
64:f4:e9:0e:41:05:67:d3:e9:2f:76:96:c2:17:95:1f:e1:51:
f2:eb:1a:ff:01:9c:af:52:85:9b:8d:c8:b2:0c:b4:27:67:0b:
cf:f1:37:fa:02:68:a3:a1:f8:c5:de:33:2b:ff:a8:8f:52:23:
b9:38:d6:14:a9:05:66:ef:5f:5f:23:c1:25:c4:8f:77:fe:6a:
9f:67:51:eb:90:6d:a5:3d:1f:9c:4c:a9:9f:b6:50:f9:3c:2c:
f2:0e:cd:04:84:1e:bd:14:7e:84:cb:b6:b8:87:f6:79:b1:38:
4f:9d:3b:a4:50:8f:f9:75:34:c6:ed:1f:d6:16:b9:a7:fb:dd:
70:74:e0:98:32:4f:8f:2e:16:e2:bf:47:79:a9:7e:64:19:db:
0b:c8:5f:8c:94:c5:9a:6e:1b:41:79:f4:d4:fa:c6:b1:ca:2a:
7e:b8:0a:05:91:fc:cb:4d:00:70:37:e3:e5:7a:00:f9:77:e1:
14:00:26:68:1e:9a:18:12:8c:60:fb:0f:d3:82:da:16:18:a2:
f0:aa:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:07 2026 by rpki-client