Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: oGYzCTZ+Ei73RwaBexBAGk0PUU/XoXBwJfhN+/s6a9k=
Subject key identifier: 62:5F:FA:AC:3B:3A:D5:61:76:EE:39:10:3C:FD:54:94:66:3F:E7:59
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01A0CA0FA1B46A81E74777075887849BBFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0C33
Signing time: Tue 22 Sep 2026 17:00:17 +0000
Manifest this update: Tue 22 Sep 2026 17:00:17 +0000
Manifest next update: Wed 23 Sep 2026 17:00:17 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: 4x7Mj87RGk5wvf/bH9QHY4maquBqdmYRu1y9g79wDYU=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:a1:b4:6a:81:e7:47:77:07:58:87:84:9b:bf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Sep 22 17:00:17 2026 GMT
Not After : Sep 23 17:00:17 2026 GMT
Subject: CN=625ffaac3b3ad56176ee39103cfd5494663fe759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:74:94:54:46:bc:a0:ca:28:90:75:85:34:
21:5b:89:4a:9b:cf:9c:7b:d3:53:36:ab:15:f3:53:
e0:86:1c:76:60:2f:e8:21:6b:e6:86:16:b2:76:6f:
90:00:f4:be:4c:0a:24:df:5b:8f:78:0b:b2:be:ef:
8c:3b:97:5e:64:7b:41:78:f3:b3:e7:50:1b:af:6e:
2c:69:56:71:e8:1f:01:20:da:81:ea:01:4b:fa:42:
f9:e1:94:cb:5b:95:e9:9d:a5:f4:a7:45:09:e9:f8:
21:7c:64:95:f8:67:9d:c6:0a:b3:2c:c7:91:bb:8e:
e9:d2:9f:b1:ef:c2:c2:8d:58:01:4a:6d:c2:4a:ca:
bd:79:c8:fc:44:f7:b5:8b:84:79:c8:f6:64:dd:28:
c5:6d:db:98:7e:0e:a8:a1:32:d9:47:f8:85:ad:e4:
17:f4:47:64:ff:68:f7:3e:39:20:9b:08:0d:8f:c9:
56:96:54:ee:93:f1:23:85:ad:8e:4b:1e:5e:0c:a6:
df:a2:d9:76:07:60:a9:e0:47:13:43:6f:dd:fa:c3:
2a:c3:68:5b:22:72:69:8c:ac:f0:b1:01:86:73:7f:
c7:35:c9:97:8f:29:bb:50:87:2d:c2:16:50:fd:8d:
0c:0c:2b:97:7c:70:86:8b:fd:c2:05:d1:f8:e5:c2:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5F:FA:AC:3B:3A:D5:61:76:EE:39:10:3C:FD:54:94:66:3F:E7:59
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fb:b2:10:82:72:ed:8d:98:67:2f:24:de:85:15:a8:83:08:
4d:60:6a:91:f8:5e:12:62:99:70:73:62:37:b4:a0:bf:ce:c6:
6b:08:48:69:de:e4:fa:42:68:7f:b9:4c:58:83:b3:3c:47:b3:
84:8e:7a:6c:c9:54:1a:dc:9b:05:e0:79:bd:12:a7:22:d4:b3:
ad:2d:26:2d:20:d6:76:c8:84:21:d8:32:e4:6a:1a:b1:0d:d9:
79:42:1e:81:4b:95:aa:00:98:06:73:16:b2:3d:42:ea:e8:b8:
f4:63:61:f7:a2:65:c5:a6:cb:ee:73:ba:6f:10:cc:69:a6:4f:
bb:01:42:4f:44:69:43:99:81:47:3a:65:ba:1f:74:7f:45:b3:
30:6d:9e:44:02:0c:ee:e1:55:9e:87:9e:db:96:54:fc:35:79:
e4:98:17:4c:23:e2:07:84:7d:5c:aa:fe:75:54:08:cb:6d:73:
04:18:2a:b1:7c:8b:ed:fe:41:7d:ce:c2:e5:98:53:fe:7b:e0:
c7:88:4d:b2:5f:35:21:a3:64:3e:ff:98:24:7f:4e:f2:e2:19:
de:30:8f:1b:2f:f0:77:be:5d:d5:fa:a0:fa:3f:08:e2:54:0f:
50:7a:92:5a:b8:36:38:9f:d2:59:10:1a:9f:cc:80:8d:38:9b:
e6:d3:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:09:00 2026 by rpki-client