Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: /rtY7M0Y3Z7Z8zSBjQhhsBym/Ec+gVW27o2qRa1vMsQ=
Subject key identifier: C2:09:92:39:AF:1C:51:77:9B:27:33:3E:80:AE:91:F0:F9:60:41:3E
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019EC0A42F88660803C17A3661CACD7A361D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0B25
Signing time: Sat 13 Jun 2026 11:00:46 +0000
Manifest this update: Sat 13 Jun 2026 11:00:46 +0000
Manifest next update: Sun 14 Jun 2026 11:00:46 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: hmrkz6vuyt3pZtd52UvwffpjBcPHK1ibE4eovtysTp8=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:2f:88:66:08:03:c1:7a:36:61:ca:cd:7a:36:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jun 13 11:00:46 2026 GMT
Not After : Jun 14 11:00:46 2026 GMT
Subject: CN=c2099239af1c51779b27333e80ae91f0f960413e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:85:66:26:64:0a:02:41:44:3c:78:5b:88:
dc:ec:63:d6:f6:9e:db:bc:36:70:76:25:73:c5:df:
00:8b:2e:db:2b:2b:dc:06:95:bd:49:72:4e:3f:75:
cd:9a:c0:bc:99:11:6f:03:01:46:9c:3c:ed:46:73:
6d:3b:81:f3:71:1e:33:d8:ca:7a:8a:cc:cd:d6:eb:
01:75:12:45:f7:3a:41:c8:4d:f3:92:3f:2b:5c:7b:
1e:2a:ee:c3:71:89:5d:19:3a:31:27:71:16:c9:24:
44:6a:b3:0d:43:93:c7:2a:49:9c:67:1a:b7:2e:b1:
72:ee:f2:c0:9a:05:5c:c1:d7:be:3c:da:98:2d:5a:
70:3c:19:67:98:9c:e5:17:5e:6b:96:ae:13:45:e8:
3f:7a:f5:d7:ad:52:80:61:56:ac:66:a7:fc:58:53:
b9:8d:0f:4a:e6:78:08:82:1c:46:bb:a3:6c:46:39:
b1:de:37:7e:89:5d:7b:97:1b:03:c6:a4:c7:45:c9:
cf:ce:01:5e:57:98:20:63:d9:94:59:a9:6e:ae:99:
af:a2:b3:c9:78:9c:9b:b6:d6:74:11:48:d3:ee:ae:
34:c9:46:24:f3:ae:98:cb:22:99:d8:d9:46:e0:f7:
1c:09:cf:8a:bf:87:66:ea:1f:88:19:31:78:81:b8:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:92:39:AF:1C:51:77:9B:27:33:3E:80:AE:91:F0:F9:60:41:3E
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1a:b7:99:af:46:3e:13:cd:0b:63:e6:c1:d2:9b:a4:91:89:
f2:03:22:d4:1e:40:5c:9d:6a:75:7c:4c:56:60:94:34:44:89:
4a:bd:de:00:54:f4:f0:30:47:35:ab:f0:bc:c8:e0:2e:6f:4f:
f2:bb:a2:b4:18:aa:3f:48:3a:b9:31:6a:88:c6:8c:ae:69:16:
85:fe:36:20:c4:81:5d:9c:ab:08:12:7a:47:e6:b9:f3:ce:28:
aa:c0:dd:d1:30:76:56:da:77:3d:af:e0:4b:22:40:f3:1f:e5:
d0:77:8d:83:52:24:27:69:82:a3:52:6f:3e:80:a0:ab:87:e0:
6b:96:80:d3:9a:cc:0e:fc:14:20:32:b9:8d:e3:76:aa:ce:36:
6e:d9:db:4d:26:50:8d:17:02:53:b7:e2:86:65:d1:4f:5d:92:
8c:ef:96:7e:09:27:c8:4b:61:c7:40:f1:bf:a5:c0:6a:ad:58:
a9:55:32:41:cf:c1:f2:4e:2e:42:f3:ef:d1:d6:2d:c2:71:aa:
78:c0:7c:f2:03:e4:18:c3:ed:06:50:83:50:6f:08:5d:18:0a:
7d:aa:b0:7d:dc:51:8a:24:67:a7:88:13:90:f2:0b:43:df:42:
87:df:64:56:05:7a:ea:bd:09:d9:d5:d1:74:aa:0e:53:47:01:
65:2e:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:53:38 2026 by rpki-client