Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
File: AguJY5thIAOqgSvktlIbVnhFao4.mft (raw, json)
Hash identifier: hVNWuYj8N4fsfy9mKWOLfS4kn086xnzVVLSNmVMm8KM=
Subject key identifier: 8C:19:8F:CA:B4:35:1C:AD:ED:CA:0C:C8:C2:C0:41:FA:9B:13:48:FA
Authority key identifier: 02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
Certificate issuer: /CN=020b89639b612003aa812be4b6521b5678456a8e
Certificate serial: 019CAAFD7A910E58360F5CB16781F79B4A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
Manifest number: 05A7
Signing time: Sun 01 Mar 2026 20:01:04 +0000
Manifest this update: Sun 01 Mar 2026 20:01:04 +0000
Manifest next update: Mon 02 Mar 2026 20:01:04 +0000
Files and hashes: 1: AguJY5thIAOqgSvktlIbVnhFao4.crl (hash: mXIMtvWKyFAllhQzFK9uXLS98n3pDACqsNI8UBImfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7a:91:0e:58:36:0f:5c:b1:67:81:f7:9b:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020b89639b612003aa812be4b6521b5678456a8e
Validity
Not Before: Mar 1 20:01:04 2026 GMT
Not After : Mar 2 20:01:04 2026 GMT
Subject: CN=8c198fcab4351cadedca0cc8c2c041fa9b1348fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:89:ee:7d:a2:2c:17:2f:aa:1d:92:38:f7:
05:e1:8d:6b:2a:4e:bc:c0:f1:e6:26:c9:2c:56:a0:
37:d7:1b:64:24:f9:cb:c1:49:81:a3:7e:61:17:15:
5c:c6:17:bd:44:b8:5a:19:6a:c0:29:29:79:92:85:
d9:cd:cf:1d:aa:ee:f9:f2:89:7b:b6:08:79:68:27:
7d:4d:9e:3b:05:a2:c8:b4:f1:19:c5:8b:67:03:85:
76:17:19:90:ab:01:8a:e0:be:19:54:e2:89:eb:7d:
36:bc:2f:d1:4c:36:a0:ea:ab:a0:5a:67:21:1b:42:
aa:f5:93:c4:b9:3d:e6:9e:22:15:58:ac:16:cd:f4:
60:b7:c3:91:ac:60:25:9f:2c:6f:7e:3f:a0:35:3b:
50:fd:9b:23:5e:0a:b9:b4:99:67:d4:45:07:77:c0:
4e:35:56:3e:e9:4c:08:d2:b3:c6:4a:b1:57:5f:b4:
28:3b:94:2b:b4:43:03:c6:34:97:5e:01:c2:04:24:
1d:fd:24:c2:7e:46:9d:77:72:68:30:7b:23:b1:0f:
d0:b1:6a:0f:9c:df:b7:69:79:46:47:c0:f0:ee:fa:
3e:fd:96:3c:04:ab:71:67:db:72:cc:ff:e3:67:9b:
14:fc:45:80:16:de:0a:ba:bb:7b:aa:67:af:a3:ec:
f4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:19:8F:CA:B4:35:1C:AD:ED:CA:0C:C8:C2:C0:41:FA:9B:13:48:FA
X509v3 Authority Key Identifier:
keyid:02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:36:ec:66:52:76:94:60:2e:70:01:61:b3:b5:b8:f6:22:75:
ae:20:c9:5b:04:ac:29:a0:d8:60:3e:4b:29:aa:6f:44:7e:1b:
2a:31:74:5b:f5:2a:50:48:7a:15:11:28:5b:c7:b7:82:c1:73:
ce:be:bf:8a:fe:31:e0:4e:e8:aa:71:4a:f1:e9:0f:0f:a7:9c:
f0:92:6d:62:91:de:75:8b:8b:3c:65:79:4b:e3:4b:3a:1e:77:
56:ef:37:ca:92:6b:3a:c5:97:ab:fd:8b:7e:2c:17:0b:5d:a0:
66:b9:24:9f:b4:75:d5:d3:32:19:07:1c:72:5a:66:f2:65:bc:
38:5d:b8:08:6c:01:8c:3f:a6:22:1a:3d:2f:c8:41:59:f6:22:
79:fb:97:3e:ef:1f:77:9a:ef:04:e4:27:0e:f7:c7:23:2d:dc:
25:c4:96:7a:06:dd:98:ac:3f:90:19:45:94:77:56:a6:0e:c3:
be:a9:95:d4:8a:5d:d7:d0:4a:3a:ca:35:c1:1f:24:05:89:70:
12:6f:3f:69:25:4d:0c:bd:ad:b5:7a:b8:87:f3:3f:69:a7:4f:
ee:2e:35:cc:12:bc:5b:99:0c:fb:fa:21:f6:d8:81:da:ce:9e:
8b:fc:20:5e:b9:8d:9f:9e:55:f7:a4:3b:a7:ca:fa:b0:4b:ef:
a6:19:24:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:29 2026 by rpki-client