Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
File: AguJY5thIAOqgSvktlIbVnhFao4.mft (raw, json)
Hash identifier: nxtslvqPjgNRfz1hnAkooA94+jXeU7o5oP9131VuZtc=
Subject key identifier: 54:40:12:1F:A5:C1:52:3F:7B:D2:1C:9E:F7:0D:C6:FE:8B:B0:78:94
Authority key identifier: 02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
Certificate issuer: /CN=020b89639b612003aa812be4b6521b5678456a8e
Certificate serial: 019D988635CAEC5632ED75C339833F0C1266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
Manifest number: 0622
Signing time: Thu 16 Apr 2026 23:00:25 +0000
Manifest this update: Thu 16 Apr 2026 23:00:25 +0000
Manifest next update: Fri 17 Apr 2026 23:00:25 +0000
Files and hashes: 1: AguJY5thIAOqgSvktlIbVnhFao4.crl (hash: rJAptgN3uix4bN1//gK92qhT8/v6TvdHmcGWJjN1+HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:35:ca:ec:56:32:ed:75:c3:39:83:3f:0c:12:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020b89639b612003aa812be4b6521b5678456a8e
Validity
Not Before: Apr 16 23:00:25 2026 GMT
Not After : Apr 17 23:00:25 2026 GMT
Subject: CN=5440121fa5c1523f7bd21c9ef70dc6fe8bb07894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:ac:7c:10:fc:56:33:0e:78:d0:9b:c7:59:
04:e5:1d:e5:f8:a5:85:3f:9e:6f:2e:4c:29:02:1a:
0f:b9:eb:5d:75:f1:67:7c:aa:9a:60:8d:35:ca:04:
7e:a0:b7:e5:88:1a:15:1a:79:48:b5:a1:29:95:d0:
00:73:95:ab:b2:15:7b:b7:a4:2b:51:df:2d:d8:74:
79:64:d4:ae:91:86:0e:74:31:7d:16:5b:a6:01:c4:
6e:42:6b:46:7d:52:e8:b9:cd:64:2d:11:5a:a9:90:
7c:0d:98:12:58:25:fc:0f:49:e5:75:21:e7:0a:97:
b4:66:fa:69:e1:9e:72:64:12:b2:aa:b5:30:c8:64:
4b:24:a2:a1:d7:0a:0e:78:fc:79:53:d8:c3:f8:fb:
18:4d:28:37:c2:97:56:4f:45:26:5a:45:9f:26:f1:
af:62:37:a9:c5:3f:c5:32:3d:4b:d5:4e:8a:1f:11:
27:77:2c:46:bd:98:16:5a:ac:2f:e7:98:82:36:d6:
e2:47:44:0a:5d:eb:24:69:19:07:d6:5a:7e:18:1b:
0f:e4:0e:5d:8d:2e:e3:ab:c8:d7:97:17:36:76:11:
ad:ee:02:9c:bb:41:8e:68:0e:e9:22:0f:44:75:fa:
5c:98:ca:83:51:78:2c:7a:93:25:db:fc:35:ce:4f:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:40:12:1F:A5:C1:52:3F:7B:D2:1C:9E:F7:0D:C6:FE:8B:B0:78:94
X509v3 Authority Key Identifier:
keyid:02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9c:5a:53:e2:7d:02:f9:fe:6a:1b:06:bb:ab:34:84:65:2e:
b6:62:f8:1f:c0:c3:f6:d7:46:12:fd:ca:82:91:ec:9f:63:bb:
28:04:f5:81:09:25:34:a9:7d:db:d1:26:b9:75:f6:02:0c:0b:
de:86:ad:11:71:6b:45:b1:42:08:17:ec:21:4b:56:04:50:62:
ae:73:07:da:80:60:78:42:a6:b8:7f:1c:8a:87:68:72:47:87:
2d:c2:38:69:e8:a1:f2:95:ba:34:ff:62:70:b7:52:53:65:9b:
aa:21:8e:be:5a:83:7d:01:19:e1:5d:50:2a:41:ca:15:63:ff:
a7:a7:db:f4:a1:ed:1e:fd:84:86:32:a4:2f:5e:ce:b9:68:38:
49:c1:28:c0:d9:c4:a2:08:b4:0d:cc:40:fa:21:ea:3c:a7:f9:
8b:26:a8:64:7c:44:db:4b:54:2f:77:ee:cb:8f:eb:a8:28:63:
1d:c2:5c:fa:2d:f0:63:f5:a5:3d:46:89:f2:84:7f:4f:33:a1:
54:0d:35:c4:25:89:e5:ec:ca:f0:ee:02:80:8b:13:31:9d:e2:
f3:41:3f:78:59:49:72:c9:ea:47:a7:54:9f:5e:86:3c:ab:38:
95:f9:d4:99:d6:0e:24:00:b7:52:ff:1d:5f:d8:19:20:6b:3d:
0f:16:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:10 2026 by rpki-client