
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier: kgAemFtQGc2rKheoF/5G6vLeNhb/Qo/ayBce1aZUXvQ=
Subject key identifier: 78:93:B4:C4:99:13:7F:3A:72:D0:04:8B:CB:3B:90:A8:86:EA:C6:FA
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 019FA974E3A2EB8270DC4EE794642FFD2EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 16:00:37 +0000
Manifest this update: Tue 28 Jul 2026 16:00:37 +0000
Manifest next update: Wed 29 Jul 2026 16:00:37 +0000
Files and hashes: 1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: wbDMpbYlaDrtUur51AoCecgIpDEm0iH6tqg4rQ1Unjo=)
3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:e3:a2:eb:82:70:dc:4e:e7:94:64:2f:fd:2e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Jul 28 16:00:37 2026 GMT
Not After : Jul 29 16:00:37 2026 GMT
Subject: CN=7893b4c499137f3a72d0048bcb3b90a886eac6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:4c:7d:61:ea:af:26:16:18:76:72:79:30:
20:3a:0a:bc:9e:f7:36:42:d8:b2:f6:7a:5f:1d:5b:
c3:c0:1b:ab:d8:aa:a0:8d:6a:6b:39:d3:54:f4:34:
b8:1d:af:e2:6d:39:b6:44:5f:33:ed:27:14:fe:8d:
c5:8a:6c:7c:88:7b:3e:69:45:46:78:12:d1:37:ac:
05:f4:a4:36:ca:36:a2:9e:5a:96:c7:84:63:96:37:
8d:51:43:2b:b0:d1:01:f9:44:d4:a4:a6:5e:b7:73:
8c:1a:1c:94:e2:97:ec:5b:c7:1b:14:2a:13:f6:17:
2d:35:b2:23:ee:c3:f9:91:7f:db:49:e8:04:40:f7:
b3:c2:84:f9:cc:5a:51:aa:4c:ba:70:42:19:ef:76:
15:c2:2d:ca:70:e7:18:40:14:9f:e9:2a:82:9c:8d:
cc:a0:48:fe:66:5e:a3:18:02:3b:51:52:12:f5:d9:
87:38:19:56:a3:dc:02:94:d6:ed:b0:72:52:0f:3f:
25:f2:a7:d6:25:4f:fb:60:63:bf:5b:07:48:51:02:
96:32:e1:36:e7:bc:ba:e2:84:30:2b:51:b5:6f:9d:
06:18:03:06:eb:7d:40:06:cc:bc:2e:3e:39:52:d2:
af:70:b6:64:66:f8:54:8d:9f:d8:85:6f:19:24:8c:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:93:B4:C4:99:13:7F:3A:72:D0:04:8B:CB:3B:90:A8:86:EA:C6:FA
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:00:de:ec:da:43:17:ab:24:5b:8c:2f:7d:92:1a:78:e0:f7:
e6:2f:d5:8d:2f:1b:e0:df:f6:26:5a:dc:40:bb:22:a3:9a:ea:
b2:de:ed:a7:55:eb:e6:0d:44:df:b4:18:76:83:ad:3f:c7:72:
90:9e:c4:1f:25:cf:f1:7d:68:e1:74:ff:2f:3a:42:35:a6:e6:
0e:35:34:f8:a9:74:d7:64:4e:db:11:3e:93:0d:1a:7b:09:65:
4b:36:fa:7e:e3:44:3d:3d:27:d1:d3:3e:98:b9:d9:c8:13:b5:
ac:50:60:33:76:ce:22:d6:66:cd:43:15:d6:22:e9:8c:d0:2f:
54:6c:b1:80:9b:60:e7:87:a2:02:fa:93:b5:b4:f1:ce:71:23:
c1:5b:84:10:09:4a:80:39:2c:a6:ac:b1:49:53:1f:c0:74:11:
29:5b:e3:d9:73:8c:91:07:4a:3d:da:75:c8:7b:39:99:57:f7:
5b:de:62:d0:9a:af:50:08:7e:28:21:b6:56:63:ea:04:83:32:
45:23:1c:ae:ec:38:4d:a2:5b:ab:a1:ee:39:ef:1d:9e:1b:3d:
d4:e4:eb:b6:92:8d:57:ac:f0:cb:02:6d:b0:f4:ec:cb:02:99:
98:a7:ba:bb:07:83:b8:fa:83:d8:a4:a0:53:dd:31:b2:f0:0c:
2c:c7:a5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:58 2026 by rpki-client