Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: CrxEAkfgNkRXlThjcU4PH4az4rEdI0RZs4Cg5juRg8c=
Subject key identifier: 96:EC:ED:CA:1C:2E:29:AC:53:62:76:9B:AB:09:D0:3A:36:92:30:06
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 01A0CDECAFD3BD966CEB18701D2ADCDF0FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 11:00:35 +0000
Manifest this update: Wed 23 Sep 2026 11:00:35 +0000
Manifest next update: Thu 24 Sep 2026 11:00:35 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: gQ92GjIowWgIT8UiPtqEDDqrml7ixB1vjcaYQqNM02Q=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:af:d3:bd:96:6c:eb:18:70:1d:2a:dc:df:0f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Sep 23 11:00:35 2026 GMT
Not After : Sep 24 11:00:35 2026 GMT
Subject: CN=96ecedca1c2e29ac5362769bab09d03a36923006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:12:92:3a:97:52:99:7a:f9:62:9d:87:af:
06:48:87:27:d4:9e:f3:f1:8d:cc:fd:be:21:9b:d4:
34:b4:5e:88:a6:58:50:86:76:80:ba:5e:ad:d8:ca:
48:6f:dd:33:59:4b:99:3d:f0:fd:42:c7:ac:59:57:
8e:cd:e4:9e:29:3c:dd:b2:76:68:78:37:de:87:91:
54:40:01:fe:59:94:2d:dc:90:e3:63:62:cf:d5:ba:
0a:6c:e9:af:35:89:e9:99:e6:5c:ae:ee:1f:65:29:
00:b6:22:06:cf:9f:5f:46:78:5b:a3:ca:11:fb:79:
1e:e5:ab:40:83:df:a7:03:9b:e3:68:73:c6:f5:47:
8b:f1:bf:53:8a:87:68:00:45:0f:49:51:02:f9:a8:
12:c4:a7:f7:fa:10:1b:5c:11:d9:d3:da:5a:4d:4c:
2e:44:62:eb:66:cd:6e:c9:5a:5e:fe:4f:f6:1b:94:
e5:f2:04:2c:bf:cf:72:04:a7:71:7c:14:56:1d:8e:
90:24:07:36:ed:5e:ef:21:6d:90:58:ed:e5:82:e1:
2c:60:ad:c6:dd:f7:fe:dd:79:59:fd:e2:20:d3:57:
52:61:07:d3:a8:0c:ff:6c:4d:5a:41:95:f5:a9:51:
74:d4:b7:ac:43:2c:1c:ce:ee:1c:d1:29:1a:cb:9a:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:ED:CA:1C:2E:29:AC:53:62:76:9B:AB:09:D0:3A:36:92:30:06
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2a:ee:c1:5b:7b:9a:f8:b9:6e:c6:b3:8d:8e:40:b9:5e:ce:
95:31:88:cc:c2:6f:3e:19:56:07:98:c2:15:5e:d5:fb:11:e4:
91:78:7f:3e:44:9f:dc:49:6a:ef:5c:7f:e6:cd:90:05:5d:a0:
a9:96:4b:51:20:b7:72:5f:0e:97:c9:97:a0:42:0e:6c:9c:a8:
0c:ea:e1:6b:1c:7a:23:6c:b8:ed:5d:37:5c:d5:98:44:f6:53:
2f:fc:6e:b6:9c:7b:0c:11:14:ee:7b:e3:4b:31:f8:ef:4d:00:
10:7e:3a:7a:71:2b:cc:19:39:78:f2:9a:4c:a9:87:22:06:f9:
75:49:4d:ff:16:70:88:ce:40:b7:88:c2:5d:8c:14:64:ca:1c:
5e:11:cf:3c:68:02:e3:bb:40:e1:22:89:3e:15:fd:24:1d:fe:
14:6b:7a:e5:2c:2a:67:1c:e7:00:22:9d:8b:22:38:1c:61:85:
3b:16:4f:65:8c:58:ac:ab:cf:7a:87:a3:90:8d:2c:e1:11:6b:
6f:19:78:ae:ed:00:da:b4:ed:44:29:df:d7:80:b0:20:9f:5f:
b8:99:66:c3:f9:a8:8a:1b:0b:6f:64:2c:76:b5:4d:e2:2e:3d:
d5:fd:5c:b0:80:5c:93:e1:1f:6c:96:bc:f6:f4:47:b3:db:31:
43:e3:d0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:41:09 2026 by rpki-client