Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: ZOvu6yUF1Z2BZhDp1XYbeknXWS1DGYKpMfFIaeI/eaY=
Subject key identifier: 15:B4:F8:EC:5E:A0:DD:F1:DF:F4:95:BF:63:1E:F5:2C:C7:D6:B3:C4
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019FAA50BBED7F86FD79FFE52DB1C355688F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0B9E
Signing time: Tue 28 Jul 2026 20:00:45 +0000
Manifest this update: Tue 28 Jul 2026 20:00:45 +0000
Manifest next update: Wed 29 Jul 2026 20:00:45 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: 13OQyDhDkDSOuLjpGY6OHa3kPDdEMASKvelEXdEpbrY=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:bb:ed:7f:86:fd:79:ff:e5:2d:b1:c3:55:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jul 28 20:00:45 2026 GMT
Not After : Jul 29 20:00:45 2026 GMT
Subject: CN=15b4f8ec5ea0ddf1dff495bf631ef52cc7d6b3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:57:f4:fc:71:93:e4:ac:b5:b2:9a:11:f1:
88:07:d8:b2:5a:3b:fa:11:b3:19:35:a1:e7:31:90:
f9:39:c3:1f:be:92:e7:57:26:98:7a:ef:b3:5e:b9:
bc:e9:2a:23:7c:1c:36:a3:6f:f5:5d:3a:f9:1b:a4:
39:b8:48:29:70:5b:67:bb:38:21:ca:35:b2:52:0b:
de:c6:3b:a7:2c:48:1c:3f:d1:d5:d9:ce:37:4f:7d:
d4:7b:ee:11:97:e1:1c:40:f2:ed:41:30:7a:8a:da:
15:4f:55:8b:ea:d9:85:f4:22:5d:5d:39:2d:07:47:
99:8f:ee:b0:4f:b0:83:06:df:94:d5:d8:d6:bd:1c:
27:30:78:9e:a8:d5:09:f5:5a:5b:12:88:3a:8e:0a:
cd:0d:cf:01:4a:3b:de:83:2a:c9:d0:1a:48:f0:0a:
b0:53:28:3e:95:90:6a:83:74:f4:94:53:e8:a6:9b:
6a:fd:48:be:c6:f1:f5:58:bd:43:a4:9a:f3:59:7d:
cd:d2:8c:80:d0:b6:48:66:56:c3:5b:14:4a:2a:bf:
72:9c:a1:dd:74:d3:c1:88:45:46:16:af:52:f5:cd:
50:b8:44:4e:a2:a8:2f:db:6d:2a:61:b5:cc:00:65:
ff:ed:f4:2f:56:2f:be:5d:a8:16:b0:d4:93:be:4b:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B4:F8:EC:5E:A0:DD:F1:DF:F4:95:BF:63:1E:F5:2C:C7:D6:B3:C4
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4b:1b:b5:fc:f3:55:59:a1:40:50:ca:65:05:0b:14:3c:9a:
7b:62:df:9c:b1:04:e7:ca:58:7d:80:9e:c1:38:19:91:4b:8e:
f0:38:e6:28:0d:e4:d2:ce:84:69:54:4d:ed:31:8c:36:d6:7d:
a2:b8:6c:fa:88:1f:bf:c2:02:db:09:36:71:a2:56:57:71:bb:
ec:f4:b3:0c:9f:ef:0e:b6:fb:16:bf:5d:33:51:97:ca:2e:9f:
14:93:6c:fa:5f:36:20:24:e5:8f:d3:b0:dc:3c:1f:46:40:14:
1d:e9:81:47:17:1f:49:6c:9c:1b:12:8a:a3:07:83:bb:2e:c2:
4c:9f:7d:fc:72:3d:7c:0f:3a:d6:07:c4:2b:f0:e6:15:4e:34:
b1:d4:8f:05:7a:cb:d9:bc:95:61:42:b1:f2:7b:7c:6f:70:a0:
b9:2e:c6:c9:55:e1:20:c1:4f:d7:f6:60:d2:d4:70:e4:03:bc:
4b:fb:71:54:cf:f5:5f:4a:bc:df:e4:12:8c:9b:4e:ec:ff:f5:
75:3d:e5:80:d7:92:db:67:3a:cf:80:cc:c4:2a:fe:55:1f:39:
43:c9:44:9a:0e:5e:cd:56:e0:d2:1d:b2:47:89:49:a9:c0:f9:
ba:99:79:ee:f9:f0:df:f9:6f:4f:49:d5:6c:4d:aa:10:90:c2:
71:f4:9a:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qULvtf4b9ef/lLbHDVWiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm
NmExMTMwHhcNMjYwNzI4MjAwMDQ1WhcNMjYwNzI5MjAwMDQ1WjAzMTEwLwYDVQQD
EygxNWI0ZjhlYzVlYTBkZGYxZGZmNDk1YmY2MzFlZjUyY2M3ZDZiM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpFX9Pxxk+SstbKaEfGIB9iyWjv6
EbMZNaHnMZD5OcMfvpLnVyaYeu+zXrm86SojfBw2o2/1XTr5G6Q5uEgpcFtnuzgh
yjWyUgvexjunLEgcP9HV2c43T33Ue+4Rl+EcQPLtQTB6itoVT1WL6tmF9CJdXTkt
B0eZj+6wT7CDBt+U1djWvRwnMHieqNUJ9VpbEog6jgrNDc8BSjvegyrJ0BpI8Aqw
Uyg+lZBqg3T0lFPopptq/Ui+xvH1WL1DpJrzWX3N0oyA0LZIZlbDWxRKKr9ynKHd
dNPBiEVGFq9S9c1QuEROoqgv220qYbXMAGX/7fQvVi++XagWsNSTvktvTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW0+OxeoN3x3/SVv2Me9SzH1rPEMB8GA1UdIwQY
MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et
ZTY2NzllN2I3OTVhLzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh
LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEsbtfzz
VVmhQFDKZQULFDyae2LfnLEE58pYfYCewTgZkUuO8DjmKA3k0s6EaVRN7TGMNtZ9
orhs+ogfv8IC2wk2caJWV3G77PSzDJ/vDrb7Fr9dM1GXyi6fFJNs+l82ICTlj9Ow
3DwfRkAUHemBRxcfSWycGxKKoweDuy7CTJ99/HI9fA861gfEK/DmFU40sdSPBXrL
2byVYUKx8nt8b3CguS7GyVXhIMFP1/Zg0tRw5AO8S/txVM/1X0q83+QSjJtO7P/1
dT3lgNeS22c6z4DMxCr+VR85Q8lEmg5ezVbg0h2yR4lJqcD5upl57vnw3/lvT0nV
bE2qEJDCcfSacg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:19 2026 by rpki-client