Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: eWuhrou1minANIcJTk9hG+sLmG907lb4kyfF3Sb9IwU=
Subject key identifier: AA:FB:2A:5F:46:7E:49:53:6F:07:BB:7D:E2:21:23:1A:46:70:07:57
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019D992B4D0463625056507734D80C30EFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0A8C
Signing time: Fri 17 Apr 2026 02:00:44 +0000
Manifest this update: Fri 17 Apr 2026 02:00:44 +0000
Manifest next update: Sat 18 Apr 2026 02:00:44 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: XMvhjP30hLm7QK+zKjf05cQQn2hIYm1xrQlk5UFdhZs=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4d:04:63:62:50:56:50:77:34:d8:0c:30:ef:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Apr 17 02:00:44 2026 GMT
Not After : Apr 18 02:00:44 2026 GMT
Subject: CN=aafb2a5f467e49536f07bb7de221231a46700757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:5c:28:72:11:92:9b:ab:63:a2:74:7f:7e:
b6:50:5c:6f:da:88:34:27:6f:4d:a0:bf:9d:4e:7a:
ce:d5:ef:9e:0a:1e:5b:42:f2:6a:4c:1c:2d:65:fd:
6c:10:50:70:5e:3e:d1:5f:2c:b6:0c:d6:b9:2d:02:
72:0c:e8:33:ee:a7:4f:24:0e:4d:e4:28:75:4e:62:
6c:b1:fb:85:d8:d7:37:aa:7e:6c:d7:b6:90:11:42:
a2:f7:9a:9a:87:27:7c:d0:91:32:70:16:c4:ca:38:
ac:6e:bf:2e:29:82:fd:e5:57:1d:55:e7:5e:ca:58:
2a:b2:f1:87:e5:a5:53:d6:f6:8e:7d:17:d3:27:47:
48:dd:98:0a:b6:9c:95:94:c2:06:b9:59:4b:8c:12:
5f:73:eb:63:93:ab:ca:c7:98:98:92:25:09:69:e9:
22:7a:8f:88:52:d6:e2:72:72:e5:9b:97:bd:b4:22:
14:e8:be:7d:d5:47:37:30:dc:20:11:a7:02:57:68:
b5:fb:6d:09:d5:d9:62:ee:52:15:f4:1c:98:95:c6:
9a:05:fa:33:10:8c:2a:e5:9e:4d:a8:22:84:67:0d:
a5:6e:15:39:31:23:8e:68:4e:bd:96:8b:aa:75:0e:
1d:ce:50:dd:b7:7c:65:c5:36:50:6e:fc:4c:6e:11:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FB:2A:5F:46:7E:49:53:6F:07:BB:7D:E2:21:23:1A:46:70:07:57
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e7:76:a9:dd:2b:bc:f2:ab:6d:b9:a8:a4:a2:df:02:e9:61:
b9:9b:2a:f1:c2:bf:9f:6a:c8:52:71:d1:49:d1:93:c3:27:a5:
07:90:17:72:8a:86:8e:54:29:d7:45:61:09:99:83:90:b1:27:
2a:10:41:b2:6d:c3:1d:ab:03:9d:f8:40:7f:95:85:6a:de:6f:
f2:63:64:81:d6:ec:eb:76:19:5c:c8:14:17:63:5c:65:73:b2:
60:08:59:d7:1e:a1:5f:a9:47:4e:ab:8b:61:ef:61:1d:5e:20:
d0:df:c6:e2:9d:23:fd:49:cd:0f:88:9c:0f:1a:c2:cf:93:88:
df:4e:3d:40:f5:32:97:26:59:23:b6:33:6c:fa:7d:45:fb:ee:
da:4a:5e:ed:2c:1b:31:f9:a1:a5:61:ee:c4:2a:b0:0a:cc:20:
51:f9:6a:52:b8:33:c1:23:cb:37:3d:68:e0:23:f4:81:e0:62:
02:8e:8a:99:6d:77:f4:72:ab:7e:a5:7f:60:2a:92:10:cf:2c:
9a:d4:6e:89:6f:df:15:54:eb:89:76:73:7e:8b:22:47:aa:06:
fa:8e:ef:1e:c1:f9:10:3d:3d:04:c3:b2:b4:19:a9:31:75:f3:
a4:3e:cc:7f:09:09:39:db:f7:d6:54:a0:24:a0:94:10:ac:b5:
76:d4:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:05 2026 by rpki-client