Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: NSEiPeVkJo66ocimsg9M0CURci4Xnh5Fexk5yG4+YEk=
Subject key identifier: F9:22:D0:E6:89:6B:95:18:97:35:90:3E:EC:78:F2:FD:1F:90:1A:07
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019D992B6E2B4A0B62C56C9907EBAB044B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:53 +0000
Manifest this update: Fri 17 Apr 2026 02:00:53 +0000
Manifest next update: Sat 18 Apr 2026 02:00:53 +0000
Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: oDuc7L4o4IcqUR/bo1W3ods/VSVWLv4QcG3OYPVQ+X4=)
2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6e:2b:4a:0b:62:c5:6c:99:07:eb:ab:04:4b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Apr 17 02:00:53 2026 GMT
Not After : Apr 18 02:00:53 2026 GMT
Subject: CN=f922d0e6896b95189735903eec78f2fd1f901a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:ba:46:f4:0c:97:32:4d:ef:a3:3a:a5:1c:
6f:72:65:b1:de:bc:b0:de:33:0e:71:7c:80:b2:e5:
f9:00:e0:74:7b:a8:c0:f5:fe:e5:a4:b6:bc:0b:33:
d5:7e:6f:ff:b8:96:fa:2d:b5:57:ad:13:8c:bb:b5:
35:b6:bf:89:6f:19:b8:40:0e:e8:12:e5:7f:33:0b:
45:59:29:9a:b8:41:f9:05:fb:f0:8e:56:bf:9f:25:
bf:d4:f1:f8:c2:1a:f7:41:26:7e:b0:d8:76:81:b8:
bf:b6:37:6c:8b:c4:d2:ce:d5:64:cf:79:ca:52:6a:
7f:dc:3e:3b:95:4b:7d:1e:b7:37:0c:0a:97:c3:5e:
76:5c:20:5c:b3:b5:a2:c5:82:63:1a:85:29:88:ee:
e6:f8:4b:02:05:9b:9c:6b:7b:4c:8e:86:85:54:61:
48:97:46:6c:33:e6:6a:2c:95:90:4c:d9:45:42:70:
1e:6f:de:c8:c2:53:22:1c:16:ae:10:a7:88:93:37:
ed:71:65:f7:64:48:fe:55:f1:6b:6e:f9:5e:f3:7e:
e4:1a:bc:f3:a0:14:97:f6:97:b9:72:de:f2:8a:5d:
44:98:10:2e:8f:7a:ab:b3:92:ec:26:6d:99:e0:f4:
35:a1:f6:8c:4e:2f:12:d6:4a:f5:93:a4:5d:30:33:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:22:D0:E6:89:6B:95:18:97:35:90:3E:EC:78:F2:FD:1F:90:1A:07
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9f:70:4d:c5:e6:1c:2c:e3:8f:0d:6d:74:dc:1e:16:a9:1d:
b4:b5:a2:21:de:01:00:92:51:fa:e1:11:82:65:2d:b7:f9:99:
dc:a5:9d:d6:50:01:c6:87:36:d5:03:5e:57:96:60:e5:2b:d2:
55:be:59:a7:91:7e:d1:3a:1c:3a:25:ff:20:82:04:09:11:a5:
43:02:98:6a:1b:71:a3:07:e8:c4:6e:6c:56:8b:0f:3a:b2:60:
59:fc:ad:af:3d:dd:24:6b:70:7c:6d:a6:a2:fb:dc:95:df:b1:
d9:52:9f:6d:3d:eb:c1:3c:cb:0f:cc:a6:25:6a:07:6f:fb:37:
b0:7a:0f:67:d2:0a:13:1e:d6:19:18:85:25:67:f0:6b:bd:12:
4e:5f:71:fb:51:44:93:48:5d:b5:bf:c0:b0:d9:22:e2:4e:21:
47:0f:07:ce:2e:e6:d3:4c:56:3a:bb:49:63:4e:88:28:61:0d:
e0:58:5d:7e:8e:f6:b8:a0:54:c2:34:88:2a:60:c4:67:61:28:
ca:b1:30:92:fb:e2:16:76:a0:a8:f8:09:3f:e4:5a:0c:48:be:
f5:4a:44:da:b3:13:cf:84:b7:84:b0:d6:e6:35:dd:09:76:4b:
3d:89:33:49:29:6a:9a:ba:33:6d:28:18:84:95:bb:c7:2a:f7:
ce:e8:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:12 2026 by rpki-client