Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: MbPFGIGcQV3Pm6oG2mMRwAQeudjqJ96eo1iQtyiikX4=
Subject key identifier: 76:24:38:5C:85:03:C8:A6:0D:FB:4C:51:5C:12:43:18:26:71:EA:66
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01A1DE397B396F31DADE4E005574CBBA0905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0CC2
Signing time: Sun 15 Nov 2026 08:01:11 +0000
Manifest this update: Sun 15 Nov 2026 08:01:11 +0000
Manifest next update: Mon 16 Nov 2026 08:01:11 +0000
Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=)
2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: uArAZv8qmajOCmKsGGXNA2AATqmNjlofB+oWkARP9eM=)
4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:7b:39:6f:31:da:de:4e:00:55:74:cb:ba:09:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Nov 15 08:01:11 2026 GMT
Not After : Nov 16 08:01:11 2026 GMT
Subject: CN=7624385c8503c8a60dfb4c515c1243182671ea66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:f2:b6:ee:26:ff:5d:e7:71:03:de:1d:c6:
f9:f3:04:19:87:39:3b:6a:c3:69:3d:06:7a:e8:95:
b0:c0:3b:89:3a:c2:44:0b:fc:d1:a4:ed:04:07:69:
18:74:0d:da:7e:2b:8d:17:8d:76:dc:fb:28:3f:15:
f0:80:20:75:f2:99:6b:dd:e3:e6:81:9d:0a:d7:af:
f2:8a:3c:7a:5d:61:5c:53:78:35:9b:7e:af:28:b1:
ef:1e:24:a6:b6:e1:40:8e:bf:92:5c:2a:63:7d:70:
d0:45:61:89:45:ba:01:e3:3f:fb:7f:40:f9:d3:ab:
ab:45:1c:04:b1:ae:9c:d3:b0:83:6f:a0:dc:6a:7c:
60:58:91:dd:51:cd:78:eb:02:82:23:23:9f:49:3a:
0b:13:00:fa:ac:20:dd:87:97:8d:93:60:76:d2:63:
5c:20:4b:fa:0a:d7:e9:a6:57:50:84:19:2c:76:43:
a2:d2:74:20:2b:bf:c7:d5:a2:89:5d:11:eb:e9:ea:
b6:c5:9a:7f:a6:83:91:79:48:ab:71:78:29:20:76:
e1:c5:04:da:4b:b6:42:0f:d2:fc:2c:d7:8d:32:ef:
98:56:f7:c7:f8:89:21:ff:8c:72:bf:5d:cf:54:5f:
ae:a6:45:3b:8c:bb:3e:b9:78:36:96:7c:d3:a9:ff:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:38:5C:85:03:C8:A6:0D:FB:4C:51:5C:12:43:18:26:71:EA:66
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fc:2e:5e:1e:f8:31:c2:ba:d9:f6:af:37:20:80:60:3d:ab:
17:6d:cc:18:ca:ce:1e:70:83:40:a8:ed:57:f3:64:46:71:d4:
4f:6d:23:0c:fb:6b:0c:27:c1:9e:19:e7:2e:4e:eb:68:2e:c0:
39:c8:07:73:20:b9:dd:08:f7:37:a0:a7:8e:97:8d:da:92:9e:
bb:8d:36:a0:ee:08:b2:74:2a:64:c4:0f:21:ab:10:04:09:d9:
82:89:aa:76:a4:0f:72:94:1f:79:0e:7d:37:d4:bd:0c:c3:36:
17:81:ea:5a:0a:5f:f9:17:61:1e:14:0a:cd:a0:50:d4:22:fb:
b8:3f:c6:06:37:87:b9:c4:16:2b:d5:7d:53:a3:e1:1b:45:f3:
82:fd:4f:ed:48:43:fb:a6:9a:3e:09:af:44:73:5d:77:85:fc:
a2:c0:91:35:cc:ba:71:46:74:aa:27:3e:f0:27:26:53:5a:31:
47:f9:31:4c:39:c7:93:17:47:ce:b1:70:14:d8:4d:25:a5:37:
3a:39:a6:56:14:93:b8:b0:ab:5b:45:07:c1:af:a8:1a:43:de:
38:46:f4:b9:26:fb:e8:0e:b8:cc:d7:b4:32:5a:e6:e5:7a:17:
8b:57:67:75:bd:fc:19:ac:f0:ec:4e:b4:ad:1b:78:d3:3e:c0:
37:86:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:33:07 2026 by rpki-client