Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier: r1f2j9++BKgWDLGCaOzL5ronFCP/Ha0T6jbWB23pg5o=
Subject key identifier: D1:B9:51:9E:0B:8F:04:BA:15:EE:D2:65:25:4A:B7:12:53:42:89:0A
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 019DA3E6888CA99C2BBA41B0988A0A995711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 04:01:27 +0000
Manifest this update: Sun 19 Apr 2026 04:01:27 +0000
Manifest next update: Mon 20 Apr 2026 04:01:27 +0000
Files and hashes: 1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: DgkaGqH8HFjV/6wwi2eP8AKzbmOcBei6tyKEcnQ8NRE=)
3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:88:8c:a9:9c:2b:ba:41:b0:98:8a:0a:99:57:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Apr 19 04:01:27 2026 GMT
Not After : Apr 20 04:01:27 2026 GMT
Subject: CN=d1b9519e0b8f04ba15eed265254ab7125342890a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:88:76:fe:84:06:a9:56:40:b5:d4:c5:37:
cc:6e:3f:9d:d3:ff:48:a5:77:da:a2:ce:ee:0b:c2:
5c:ab:f4:fb:ac:ca:ad:63:fa:46:9f:90:44:70:10:
50:11:31:68:93:11:eb:b7:2d:53:c3:9b:c1:25:62:
4d:5e:f1:c3:be:69:26:10:c8:7b:fa:c8:57:7a:26:
58:15:94:59:d2:11:c1:11:93:87:7f:41:de:ca:26:
f2:c8:2a:ad:2a:ae:60:81:9d:1f:73:99:59:17:cd:
db:d6:ed:d5:04:66:d0:db:82:58:9b:5d:d9:cf:f4:
90:01:ba:5d:bd:2f:54:76:ac:d7:b7:c7:86:4c:f8:
cf:c3:ca:0b:cb:f9:8d:fa:84:5a:31:0c:ce:73:49:
5a:e1:de:15:42:4d:9e:ce:fd:34:fe:68:c3:7b:55:
ab:55:93:a8:ec:e6:c3:ee:06:ff:e9:89:61:53:b1:
6e:1e:41:1b:a8:bd:19:6a:eb:ac:e7:ec:06:03:d2:
a1:d1:0a:3e:3e:59:f5:d8:ce:c7:1b:7e:80:a8:c4:
3a:b8:84:b4:53:d0:2a:8b:e4:57:4a:03:8a:43:00:
14:fa:96:c2:03:0b:df:e1:91:ec:08:63:9c:88:95:
4e:ad:c6:01:c6:f0:65:16:8a:87:7b:7b:39:86:67:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B9:51:9E:0B:8F:04:BA:15:EE:D2:65:25:4A:B7:12:53:42:89:0A
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:78:8d:a2:39:81:90:06:e2:37:ab:79:33:1f:a1:08:42:12:
cd:69:72:40:a5:6c:5e:14:0d:00:b7:a5:ec:33:04:18:aa:e8:
39:cc:c9:fb:1b:c8:4b:4d:32:ff:41:4b:e5:27:f8:9b:a0:42:
6b:db:8b:10:d8:90:63:dc:9e:c7:23:d8:25:71:17:cf:37:aa:
4b:c9:44:ec:d4:13:4b:c8:28:88:a1:13:62:89:c1:86:10:95:
19:7d:0a:13:68:d5:66:61:06:48:3d:84:f2:b6:fd:60:0b:50:
10:6a:43:52:dd:c4:54:f4:b3:ed:37:cc:0d:06:fd:25:99:1f:
e2:80:86:05:d3:51:99:fa:6e:32:3b:15:2e:72:37:c1:79:ab:
43:f9:02:93:14:c2:f8:82:8a:16:db:e1:ac:a6:7e:4c:0d:e1:
4c:78:55:a7:f6:92:9b:c9:44:3b:1d:a7:8d:75:de:c1:b9:05:
46:c3:75:82:27:92:27:c1:59:e2:82:c7:43:ae:81:1e:10:23:
2c:f4:c9:5b:fd:93:0b:57:7b:64:8b:b5:ad:4a:5b:32:ab:9d:
ca:53:bf:4f:3d:35:9f:28:73:d0:55:76:8f:95:a6:4b:65:82:
8b:e1:47:d9:9f:48:23:bc:63:19:b6:45:34:6a:2b:e6:55:72:
f5:d3:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:10 2026 by rpki-client