Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: FPtCPdSl69kpozYaXIsXGs7+s4pbU2LGvODX3gFjzHA=
Subject key identifier: A3:24:64:2D:45:01:B3:5E:10:DD:2F:78:EA:C3:43:2B:A2:EC:FC:E4
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 019D9A3F07487A3EE15AE25E89967C473E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:55 +0000
Manifest this update: Fri 17 Apr 2026 07:01:55 +0000
Manifest next update: Sat 18 Apr 2026 07:01:55 +0000
Files and hashes: 1: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: W2j7pee/rr+VDgAxPjIG2LoVSTR2+srtT5Zv4lUN1FM=)
2: cYvxZjuDDPfYb4kbDcbg3IK4fP4.roa (hash: YupuMCLuStDQjV8tMBI6D+BTvg79pFQHOi7BQJOC5fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:07:48:7a:3e:e1:5a:e2:5e:89:96:7c:47:3e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Apr 17 07:01:55 2026 GMT
Not After : Apr 18 07:01:55 2026 GMT
Subject: CN=a324642d4501b35e10dd2f78eac3432ba2ecfce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5c:51:1d:77:9b:9f:0b:8c:b0:f6:2f:e2:21:
64:97:2d:63:15:d6:69:f1:e2:85:a8:0d:46:31:22:
46:44:12:6b:b7:5e:a4:ce:35:4a:e2:b0:4a:e7:8b:
6f:de:9d:14:b8:47:90:e6:af:b9:b9:ef:a6:1c:56:
56:77:da:1f:0c:f5:fb:0f:ba:6c:64:de:cf:63:91:
f9:b5:df:9f:b3:f7:ca:0b:35:a9:2e:68:a9:09:7e:
c1:99:54:91:39:97:ea:df:6e:34:5c:b2:54:b5:42:
0e:f3:0e:d1:b2:f3:ae:bf:60:a6:ea:63:1d:db:64:
39:58:f0:82:1f:af:f2:13:8b:0d:cc:c4:9c:12:9d:
98:be:d0:c8:47:bc:eb:cc:e0:44:d9:3c:cf:86:f8:
6d:4a:57:2a:3c:58:f8:ac:d7:38:6b:fc:58:6c:35:
c8:53:83:9e:c3:0e:17:7f:06:88:c8:d5:3d:15:18:
13:b8:b8:bb:77:b5:48:0a:bf:10:b3:29:41:1b:07:
c8:ef:2a:23:f6:4b:49:12:09:96:7d:eb:39:fa:fa:
75:c7:6c:11:31:03:0a:89:bc:3d:e6:13:45:76:46:
fe:67:43:b2:a3:21:a3:59:73:de:7a:1f:dc:d0:cb:
9b:8a:1f:a2:2a:78:56:29:e6:57:53:94:05:0d:5a:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:24:64:2D:45:01:B3:5E:10:DD:2F:78:EA:C3:43:2B:A2:EC:FC:E4
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0c:d2:2f:c5:39:7a:bf:64:9f:c3:b3:80:4b:43:f0:07:b2:
3b:1d:a7:0f:56:cc:bc:3c:51:66:a3:c9:79:73:db:18:cd:54:
e7:ec:7c:60:80:da:c1:95:bc:d7:e3:89:12:89:66:ea:71:47:
71:2f:7e:a9:08:d2:5c:94:74:c9:7c:73:a7:3c:e6:1b:ba:8e:
64:57:e2:da:b4:2d:96:6a:4d:be:4b:94:d8:4e:07:7f:b5:02:
8e:ca:af:a7:0a:53:9a:44:1e:76:3b:94:e1:c1:0b:92:ac:52:
94:7b:35:bd:bc:b6:37:6a:f7:8d:17:40:2c:d5:57:9d:94:a9:
10:3f:3a:7a:b7:84:b2:ee:6a:de:4f:32:c1:d3:00:3f:75:9d:
2c:24:ea:7b:0a:a0:84:70:37:ed:d6:02:b1:2c:a7:a1:8a:fa:
79:0d:9e:8d:9c:91:95:e9:f6:85:6b:da:06:89:44:2a:24:d4:
83:6b:8b:82:7a:c2:41:ed:14:35:aa:64:3e:1b:5e:de:91:bd:
31:2b:d4:48:72:42:d3:78:1c:56:15:68:5b:03:91:d5:16:5a:
36:17:8d:db:cf:85:51:df:0f:e6:d6:93:d4:dd:f6:31:50:a7:
73:f2:5d:03:cf:df:3c:e7:5c:31:fe:73:6b:9b:c2:f1:ce:78:
69:7f:4c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPwdIej7hWuJeiZZ8Rz44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDg0NmJkYmIwODA1NWFjYmQ2YWI1OWQ5NTYwOTgxZTA0
NmVlNmYwHhcNMjYwNDE3MDcwMTU1WhcNMjYwNDE4MDcwMTU1WjAzMTEwLwYDVQQD
EyhhMzI0NjQyZDQ1MDFiMzVlMTBkZDJmNzhlYWMzNDMyYmEyZWNmY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lxRHXebnwuMsPYv4iFkly1jFdZp
8eKFqA1GMSJGRBJrt16kzjVK4rBK54tv3p0UuEeQ5q+5ue+mHFZWd9ofDPX7D7ps
ZN7PY5H5td+fs/fKCzWpLmipCX7BmVSROZfq3240XLJUtUIO8w7RsvOuv2Cm6mMd
22Q5WPCCH6/yE4sNzMScEp2YvtDIR7zrzOBE2TzPhvhtSlcqPFj4rNc4a/xYbDXI
U4Oeww4XfwaIyNU9FRgTuLi7d7VICr8QsylBGwfI7yoj9ktJEgmWfes5+vp1x2wR
MQMKibw95hNFdkb+Z0OyoyGjWXPeeh/c0Mubih+iKnhWKeZXU5QFDVrOmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMkZC1FAbNeEN0veOrDQyui7PzkMB8GA1UdIwQY
MBaAFGoIRr27CAVay9arWdlWCYHgRu5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDct
Nzc5MTc1MmE5YzZlLzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDctNzc5MTc1MmE5YzZl
LzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwzSL8U5
er9kn8OzgEtD8AeyOx2nD1bMvDxRZqPJeXPbGM1U5+x8YIDawZW81+OJEolm6nFH
cS9+qQjSXJR0yXxzpzzmG7qOZFfi2rQtlmpNvkuU2E4Hf7UCjsqvpwpTmkQedjuU
4cELkqxSlHs1vby2N2r3jRdALNVXnZSpED86ereEsu5q3k8ywdMAP3WdLCTqewqg
hHA37dYCsSynoYr6eQ2ejZyRlen2hWvaBolEKiTUg2uLgnrCQe0UNapkPhte3pG9
MSvUSHJC03gcVhVoWwOR1RZaNheN28+FUd8P5taT1N32MVCnc/JdA8/fPOdcMf5z
a5vC8c54aX9MFA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:08 2026 by rpki-client