Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: MqkOf9XLk+inGrlbtLzSXOPxDSNp0D4xI6icdRQIveg=
Subject key identifier: 88:31:64:B1:BB:36:38:17:E5:22:D9:85:4B:56:A1:50:86:B7:F0:BC
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019CABA25490784BC36858603087286BA73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:01:08 +0000
Manifest this update: Sun 01 Mar 2026 23:01:08 +0000
Manifest next update: Mon 02 Mar 2026 23:01:08 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: 1/0cTXl5Yeu4TqPBCR8EJYlniYPWLEz+68hSXbCJgO0=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:54:90:78:4b:c3:68:58:60:30:87:28:6b:a7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Mar 1 23:01:08 2026 GMT
Not After : Mar 2 23:01:08 2026 GMT
Subject: CN=883164b1bb363817e522d9854b56a15086b7f0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:58:c0:9c:9d:fa:a1:aa:7b:b6:9b:4f:3e:
40:84:da:da:94:9b:85:43:da:0a:57:7c:93:c3:e9:
c6:37:7e:89:df:d6:d8:aa:ab:49:64:82:b0:9f:76:
00:61:29:96:cc:ae:32:bc:86:66:f5:7b:d2:c9:07:
75:6a:85:76:40:18:c9:01:d7:35:dc:d5:53:00:f2:
56:ac:33:b3:40:c3:64:54:e7:2f:5c:1b:ba:80:43:
6a:b2:b9:b8:a2:16:06:29:7d:ae:0b:1b:52:0b:be:
b7:59:9e:c9:61:b6:0f:7b:36:65:4b:49:38:ba:55:
03:db:5d:eb:f1:02:5e:71:a9:72:9e:1d:1a:b3:ea:
73:01:c8:c6:e5:82:03:93:3a:0d:d8:0d:6d:99:6c:
7e:92:23:b7:7b:71:4e:b2:c8:09:f3:8f:d8:43:ed:
50:79:fa:bd:31:e5:36:ce:df:23:c0:28:97:4c:c2:
24:39:63:51:78:1f:d3:82:68:b9:f1:d7:62:a6:fd:
7c:fc:8c:c1:ee:06:73:1d:b6:d8:b3:91:d5:fe:0d:
f2:e4:92:14:4f:80:c8:7e:24:af:de:a9:a5:0c:4c:
e9:e1:75:42:58:1f:38:e4:9b:50:12:1e:35:9e:da:
b0:e8:26:83:b6:c4:b1:e5:fc:bc:28:1d:9a:a5:00:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:31:64:B1:BB:36:38:17:E5:22:D9:85:4B:56:A1:50:86:B7:F0:BC
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4f:06:92:d0:db:37:b3:e9:64:23:10:2b:0d:c8:54:50:18:
b5:b7:a7:88:6a:79:07:d5:2b:ae:cf:f1:e9:67:05:ad:03:3f:
0f:61:b2:57:e8:32:21:ea:e6:f7:83:a0:9e:b7:39:30:db:0b:
66:9c:e1:82:90:90:2c:1f:11:aa:dd:11:9e:15:71:b4:13:24:
a9:ed:f2:7a:e4:b5:da:29:b9:bd:de:2e:a4:0d:87:90:a6:d1:
c4:d6:a7:02:9f:7a:36:87:be:ad:44:f9:21:c0:35:cc:c0:06:
f2:10:eb:5a:ed:56:25:1c:71:23:99:6f:b8:b2:9c:ca:82:4e:
e9:4c:8f:0d:01:71:c1:39:b9:15:7d:41:12:30:b5:d0:10:cb:
4c:19:39:7a:73:3d:1c:d1:cc:5b:e3:ce:a7:fa:1b:50:72:1f:
a0:ba:14:7c:16:aa:5d:09:6a:f3:a9:d2:82:94:a6:df:ae:d2:
bf:72:41:43:43:32:67:6f:98:87:52:af:f7:b0:53:61:40:32:
ac:40:0a:00:b0:0c:1a:cc:62:fa:ea:2d:a3:3a:5e:91:26:cd:
8a:48:05:af:c7:e3:c0:87:12:24:7b:f7:e8:a7:f9:b1:99:af:
d2:c7:82:db:28:54:b3:e2:e8:bf:78:75:40:99:08:11:49:f0:
1f:3d:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:42 2026 by rpki-client