Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: /txZmIaS1pwLqDcnnklyZQTnejuYV79lutOjFCA6B5A=
Subject key identifier: 37:A1:85:B9:AC:AF:F2:E1:33:7C:C7:DF:70:29:54:55:16:3A:A8:5C
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019FAC3EB23D7180EF05B18DFF1A58AA0E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 05:00:17 +0000
Manifest this update: Wed 29 Jul 2026 05:00:17 +0000
Manifest next update: Thu 30 Jul 2026 05:00:17 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: 2Sm/M0dfZGYA82Ae6O7Pb7yBVl7YIDLIuNPefNYnAVg=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:b2:3d:71:80:ef:05:b1:8d:ff:1a:58:aa:0e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jul 29 05:00:17 2026 GMT
Not After : Jul 30 05:00:17 2026 GMT
Subject: CN=37a185b9acaff2e1337cc7df70295455163aa85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:89:29:77:bd:c4:b2:76:65:de:70:0f:1f:
fb:d1:6f:f6:a1:13:02:33:c5:31:b1:e2:76:d9:5b:
ac:44:89:bd:57:ed:b1:43:68:9b:6c:89:e5:ec:d3:
fc:56:13:4b:c4:49:91:73:55:15:c3:8d:e0:e7:b3:
f4:9f:ed:7c:db:e9:49:40:b9:82:e7:3d:8d:8a:07:
d2:c5:4e:47:be:b5:b6:f9:dd:70:8e:b3:36:0a:d6:
09:6a:27:19:ff:1f:d7:49:32:12:60:43:56:c1:88:
21:f2:f7:3d:c9:3f:07:06:2f:32:d3:cf:fa:6a:ff:
cd:88:4c:3c:63:3f:9c:d4:d0:8e:27:26:52:a7:9d:
47:5e:0e:62:2f:39:62:8f:ee:44:51:0b:26:f8:05:
e5:b6:1a:ba:02:0a:cb:58:99:f3:a1:12:99:57:cf:
9b:dc:9f:24:c5:9d:08:6d:cb:f1:87:69:8f:62:3c:
6b:01:0f:49:ce:b0:fd:44:d8:db:ce:fc:40:f5:ae:
82:6e:0e:7b:18:9f:0c:40:21:5f:bd:1c:01:86:60:
0f:44:93:05:4c:a5:79:61:06:a5:a8:96:43:78:13:
ee:c7:ab:66:58:2e:46:b6:14:5f:a2:2c:36:d7:d6:
d5:ac:de:21:7c:a8:e6:1d:9f:c5:7d:ec:c6:15:0d:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A1:85:B9:AC:AF:F2:E1:33:7C:C7:DF:70:29:54:55:16:3A:A8:5C
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:21:9f:ba:1e:e0:65:fc:36:96:db:25:a0:cb:10:3b:7e:df:
1a:94:15:c7:18:18:09:cb:43:72:5e:23:c8:14:a1:2d:05:27:
a3:3c:ae:ad:bb:ea:06:46:ec:cb:e3:92:2c:c6:85:59:e1:85:
e6:7d:30:cd:ae:95:59:a3:da:d1:25:8f:04:3e:46:40:88:76:
ed:3b:31:99:0b:1e:96:91:91:29:f0:85:83:0e:82:86:48:18:
91:f5:c8:df:ae:7b:3c:f7:06:cb:71:c5:79:53:9b:39:74:53:
0f:03:48:86:30:1f:6d:95:5f:23:c5:91:04:4a:bc:8f:22:30:
0d:6b:d7:f8:d0:76:47:10:aa:b9:4a:ec:5a:de:5e:f5:70:95:
14:fc:83:cf:4d:f4:23:bb:b5:d1:47:d6:e7:02:31:e4:37:3d:
55:56:d0:85:5c:06:36:d3:3b:36:15:32:d1:e6:91:d0:9c:50:
ea:23:5f:eb:5f:73:55:4c:d8:8d:1d:01:21:c1:19:dd:0a:61:
cb:2c:d0:d2:0b:1a:0b:17:ad:60:22:f1:f9:ee:fe:da:ab:ab:
8f:a5:27:69:c9:6b:85:f3:41:2e:d0:b9:0f:9d:e5:8f:7a:01:
a0:cb:6b:11:e3:20:b4:bf:ae:7b:ec:e3:8a:5d:51:e9:99:ab:
48:77:82:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:22 2026 by rpki-client