Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: KnSEaMVqUUt2Np5QC+5zEATO0W/OoKEzFzf5pXJYFBg=
Subject key identifier: 7F:92:C3:F0:D2:0D:1D:7B:EB:49:11:05:23:B8:75:AE:09:1B:24:4C
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019CA9B3FDBA5608898EE45DD91A7EF8867D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0A10
Signing time: Sun 01 Mar 2026 14:01:11 +0000
Manifest this update: Sun 01 Mar 2026 14:01:11 +0000
Manifest next update: Mon 02 Mar 2026 14:01:11 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: vnb2skp/9UtuQ+0s/G3SIqmdtryUnMEetvPqkD6iYVo=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:fd:ba:56:08:89:8e:e4:5d:d9:1a:7e:f8:86:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Mar 1 14:01:11 2026 GMT
Not After : Mar 2 14:01:11 2026 GMT
Subject: CN=7f92c3f0d20d1d7beb49110523b875ae091b244c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:0b:16:1b:d7:a2:43:9c:85:5a:8b:7d:aa:
43:82:57:41:02:7d:60:b2:c0:ba:31:9c:1f:f5:37:
82:11:36:9e:65:fa:c3:49:f7:be:19:78:39:b1:aa:
d1:7c:24:dc:63:45:78:f6:7c:d9:ab:2b:ed:58:b0:
24:76:e3:67:85:57:b2:00:2c:f6:3d:fe:69:11:ee:
b7:c3:5b:b0:c5:27:2d:9a:09:c0:f1:4e:a4:1f:06:
a4:d8:ac:1a:8a:11:a9:cc:f7:1c:7b:48:0c:ff:77:
f2:7b:17:0f:ad:6a:80:40:12:e9:94:27:dd:5b:95:
b9:b4:f2:e7:7e:53:cc:85:de:9e:09:fd:10:02:26:
f2:be:a6:0b:0b:46:e5:e3:bd:80:bc:1f:9e:98:37:
c7:ef:87:01:00:de:99:35:c4:39:6e:b9:d1:c9:e5:
c2:f8:ee:ed:39:e0:3e:54:d9:d0:51:22:ce:f6:9f:
b8:c8:58:25:80:6d:0a:66:5e:a5:ce:5c:48:13:8b:
9a:b6:b8:e5:5a:45:20:a2:90:6a:45:9c:44:d5:0a:
42:cf:9b:de:1f:44:c2:73:7e:15:d1:64:f3:81:b1:
5e:7f:7e:91:61:2f:f0:74:0e:55:06:6e:dd:f2:9b:
d5:c1:1e:d1:38:0d:95:49:26:0e:c9:d3:4d:be:ea:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:C3:F0:D2:0D:1D:7B:EB:49:11:05:23:B8:75:AE:09:1B:24:4C
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:46:ee:33:2e:99:c2:37:96:f0:05:37:03:2d:88:75:fd:b1:
dc:0e:4d:01:bb:31:09:a0:5e:c0:b3:97:80:b9:61:c3:c6:61:
87:4a:f5:24:e1:f2:ae:a5:66:b1:0f:05:48:96:48:a6:21:4d:
cd:f4:77:a6:21:f4:7e:03:4f:d8:8c:28:f7:89:cc:09:dc:f0:
53:ab:a6:a0:36:c0:2b:dd:98:4b:b1:cf:df:4b:d7:62:44:02:
6c:4e:ff:5b:a4:1b:6d:b8:c1:0a:3a:41:91:b7:0d:35:ca:a1:
93:93:0c:c3:dc:c8:cd:a6:f0:46:e2:07:89:23:78:fc:1f:3e:
10:4b:06:9a:23:4a:69:89:07:cc:25:96:68:a2:a4:35:2f:b3:
f8:d4:5b:3f:12:60:69:cc:12:87:1a:62:e9:93:a0:45:8f:10:
6e:0c:21:c8:6f:a1:67:1c:1c:b3:14:19:4f:70:02:48:03:99:
14:a4:be:25:0c:3f:1c:42:9f:d8:22:5a:d2:15:37:36:7d:c8:
90:72:32:52:22:8f:4f:69:6d:76:22:d7:78:af:91:00:9d:ef:
f2:ce:9d:aa:07:e6:2c:01:c9:0a:62:1a:6f:f8:32:dc:00:8f:
51:1a:cd:7c:c1:f2:1b:80:25:88:50:05:d6:71:7f:80:f3:9e:
7e:49:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:49 2026 by rpki-client