Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
File: AguJY5thIAOqgSvktlIbVnhFao4.mft (raw, json)
Hash identifier: +fM5865IkHcJhJlT+Y9vGuUu2IG0Uzu23bYP91Zb8L0=
Subject key identifier: 23:DA:CD:DE:CF:18:BC:56:8A:C3:68:9D:70:1B:84:59:65:71:F0:CF
Authority key identifier: 02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
Certificate issuer: /CN=020b89639b612003aa812be4b6521b5678456a8e
Certificate serial: 01A0D5027255DD7BAFF63D0BB46BBEBE1ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
Manifest number: 07CF
Signing time: Thu 24 Sep 2026 20:01:42 +0000
Manifest this update: Thu 24 Sep 2026 20:01:42 +0000
Manifest next update: Fri 25 Sep 2026 20:01:42 +0000
Files and hashes: 1: AguJY5thIAOqgSvktlIbVnhFao4.crl (hash: SVwmvthzoka0lrNySepIBuHb7Npqymv2eW5mGawGHBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:72:55:dd:7b:af:f6:3d:0b:b4:6b:be:be:1e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020b89639b612003aa812be4b6521b5678456a8e
Validity
Not Before: Sep 24 20:01:42 2026 GMT
Not After : Sep 25 20:01:42 2026 GMT
Subject: CN=23dacddecf18bc568ac3689d701b84596571f0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:57:1e:5a:32:8b:da:dd:6b:d1:46:88:36:
7d:0e:0f:52:5c:3b:75:73:9b:4f:91:4b:e0:89:fc:
7b:63:e2:59:28:ac:1d:b2:82:7d:e8:7a:aa:ea:54:
6b:d3:9d:47:79:51:87:c0:a7:d5:1b:7e:ea:a5:d2:
c1:da:99:27:b8:d6:04:59:2d:42:94:de:8a:70:db:
c7:90:a3:ab:20:bd:4a:67:e7:c1:1b:1f:c0:5c:38:
d5:75:8e:87:b5:fb:1b:83:16:b4:76:4f:7f:5f:37:
d7:2d:35:53:56:31:78:2c:3c:a3:f6:ca:ae:08:d2:
e5:8a:4d:f5:a9:f7:1e:1b:8c:eb:08:7a:e9:e5:d8:
69:00:37:04:7a:0c:2e:73:e6:da:44:60:bf:29:18:
17:8b:e5:94:bc:9c:71:53:a9:ea:7c:73:93:38:77:
ec:5b:45:39:4b:cf:27:f4:a4:8e:82:82:4c:b5:cb:
a2:01:47:74:22:16:1c:c3:a6:23:4c:46:5b:fb:fe:
f2:4f:2f:51:8a:75:90:9d:1a:a4:79:b0:2c:16:1a:
99:8c:15:62:a1:4c:71:7a:d8:62:a5:0d:cd:66:db:
ff:2b:5d:39:db:bc:a3:ad:9f:ce:14:21:04:1a:ad:
8b:8b:23:c8:fb:86:10:7f:95:fa:2a:3d:49:14:70:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:CD:DE:CF:18:BC:56:8A:C3:68:9D:70:1B:84:59:65:71:F0:CF
X509v3 Authority Key Identifier:
keyid:02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bb:4b:c9:db:88:df:6e:7a:58:6b:53:2e:7d:22:8a:3b:30:
0d:8d:7d:19:f0:1a:1a:6f:07:3b:26:de:a6:21:8c:e0:39:a9:
b2:9b:0e:59:43:39:3d:c7:e7:5b:48:63:b7:cf:8f:f0:8a:cb:
cc:8d:42:e7:ca:f8:4b:61:c7:ca:05:68:48:11:19:0e:c4:f4:
56:09:92:b5:5d:33:de:8a:c9:16:f7:2b:c5:53:d7:85:9d:44:
e2:24:05:d2:a7:0c:e3:2a:89:74:fd:f8:09:19:83:9e:cc:72:
b1:d2:27:d7:13:e5:67:d9:b1:0f:50:24:6f:57:86:b4:46:36:
d4:0e:e8:1e:f2:a5:46:6a:a4:82:7a:09:12:9d:2f:88:e8:e8:
97:b4:f8:34:61:d8:d5:62:9e:bd:e9:df:d1:b0:9d:cf:01:35:
5f:bb:a2:9d:c8:ef:8e:75:07:49:1a:0d:c2:6e:e9:6c:09:e0:
3a:aa:b2:e8:7c:ef:7b:73:a9:66:31:09:ce:5b:e0:6c:dd:7f:
3f:56:81:c4:5c:30:44:40:73:12:92:ac:ca:7e:c3:9e:82:e9:
e8:a0:e1:47:d7:bd:f8:4e:f7:f4:76:7e:69:6f:1e:de:eb:b6:
01:24:91:2e:05:9b:fa:f4:0e:bd:4d:23:2e:9d:46:5e:a1:3d:
78:6e:d3:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAnJV3Xuv9j0LtGu+vh7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMGI4OTYzOWI2MTIwMDNhYTgxMmJlNGI2NTIxYjU2Nzg0
NTZhOGUwHhcNMjYwOTI0MjAwMTQyWhcNMjYwOTI1MjAwMTQyWjAzMTEwLwYDVQQD
EygyM2RhY2RkZWNmMThiYzU2OGFjMzY4OWQ3MDFiODQ1OTY1NzFmMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqopXHloyi9rda9FGiDZ9Dg9SXDt1
c5tPkUvgifx7Y+JZKKwdsoJ96Hqq6lRr051HeVGHwKfVG37qpdLB2pknuNYEWS1C
lN6KcNvHkKOrIL1KZ+fBGx/AXDjVdY6Htfsbgxa0dk9/XzfXLTVTVjF4LDyj9squ
CNLlik31qfceG4zrCHrp5dhpADcEegwuc+baRGC/KRgXi+WUvJxxU6nqfHOTOHfs
W0U5S88n9KSOgoJMtcuiAUd0IhYcw6YjTEZb+/7yTy9RinWQnRqkebAsFhqZjBVi
oUxxethipQ3NZtv/K10527yjrZ/OFCEEGq2LiyPI+4YQf5X6Kj1JFHDGuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPazd7PGLxWisNonXAbhFllcfDPMB8GA1UdIwQY
MBaAFAILiWObYSADqoEr5LZSG1Z4RWqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWd1Slk1dGhJQU9xZ1N2a3RsSWJWbmhGYW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2U5YzUtYWJjMi00YzM5LWI1MDIt
ZWJmMzI5ZTk2ODQ2LzEvQWd1Slk1dGhJQU9xZ1N2a3RsSWJWbmhGYW80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi83N2U5YzUtYWJjMi00YzM5LWI1MDItZWJmMzI5ZTk2ODQ2
LzEvQWd1Slk1dGhJQU9xZ1N2a3RsSWJWbmhGYW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLtLyduI
3256WGtTLn0iijswDY19GfAaGm8HOybepiGM4DmpspsOWUM5PcfnW0hjt8+P8IrL
zI1C58r4S2HHygVoSBEZDsT0VgmStV0z3orJFvcrxVPXhZ1E4iQF0qcM4yqJdP34
CRmDnsxysdIn1xPlZ9mxD1Akb1eGtEY21A7oHvKlRmqkgnoJEp0viOjol7T4NGHY
1WKevenf0bCdzwE1X7uincjvjnUHSRoNwm7pbAngOqqy6Hzve3OpZjEJzlvgbN1/
P1aBxFwwREBzEpKsyn7DnoLp6KDhR9e9+E739HZ+aW8e3uu2ASSRLgWb+vQOvU0j
Lp1GXqE9eG7T1Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:02:17 2026 by rpki-client