
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
File: ag4WzCqLkctIP0UegTtniul1grA.mft (raw, json)
Hash identifier: zd5NiTPHZYoqhcIocGXrnAFdupHzUh2MpnXT+3Rix08=
Subject key identifier: 94:B2:4F:98:92:37:61:CE:44:35:B3:F8:AF:2B:8E:E9:FF:67:F6:DA
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F2B13C7DFBD1AA1B8796A06D675327E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
Manifest number: 0B
Signing time: Sat 04 Jul 2026 03:02:24 +0000
Manifest this update: Sat 04 Jul 2026 03:02:24 +0000
Manifest next update: Sun 05 Jul 2026 03:02:24 +0000
Files and hashes: 1: 1-L9_xn5XwFHg99yogQ5P-JRQJno.roa (hash: saknG4EeimO2uKEX00r/busJjcraxx17Sa52KQHrOss=)
2: 1IO7D2ixQ-lvyHRtaxSutQuJrdk.roa (hash: w8VZiMHzBrWoJWSQi1dFm3cARenc5HNcqj8t4FMaUvc=)
3: 82--YWEKcMvIJETSOTv0fBdL6CM.roa (hash: txaVMOY8ninC/G6RFe/UwHhOENX0T290iWUIMYkdnmk=)
4: CZ_Zb2Aq89SafghWM0E4713VX70.roa (hash: HeGm7Ab0oXBCA+8D5xtUkFSt/G3Ij7tbRDAtEbpDGr0=)
5: D5_G8DCmM_3b5irrbtVaGAGf_cc.roa (hash: BVXdof9XgxwNSFTMs9cYrt8qNsJcVYYSZufUMkC5DG4=)
6: MHRGHVH_9ryY5YWmrqyOo25Yw-w.roa (hash: p0ZTTiOVdQ6jigzVZJJBkL+3fqMDD1xA2wHogGA9TUQ=)
7: P9YT4wpleippbcH7ySs9yJhewoc.roa (hash: cSxqBMShQEu5xdePejl0TQuouUbtuQWYRC9Of5i3nxw=)
8: PehZN3iXx53NNUUfpGjKtEgbtG0.roa (hash: ZF5FCAasCGxv9d43oiaKd2A5u46kRGpM48JeEUZzsOY=)
9: QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa (hash: oLE/UmjEKWdlluphq/E4JLOUzru3Xt/qp1y2xi32ZuM=)
10: RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa (hash: 1mJogWLp+9JQPWumTmYBS2/tf+nhYhyUXRjcoUUswLw=)
11: RvNLAe_RSP56uzDHYQxY7j2RYDA.roa (hash: 138Cifhmc2WWQk/qLf2plQLxN1qV8R840l4XB+Ds6Qg=)
12: SOdgrNHWpRExOJRc-f9cfWJ4cms.roa (hash: k5GQQCFGnAJdQAMjkz3mMLNhKN0O4TfU790kcOAiuaM=)
13: UqImUVHBq3p8NTSpUZrZaZqeIO0.roa (hash: b0cbtwxFDLQWZmYSn/tfFyO/bdt5kbBtbbVLEmIteZY=)
14: V4QNov5aUVl0kjPoDbGXWUTFf3c.roa (hash: RWwYnwshC1K5yWsQ6bl0FWPq+jSiHD0KLQ+6u/grLQo=)
15: ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa (hash: CES/AfhEQn2U94y88HLeLxHi0QZ8IQSspRKZIOPxVHU=)
16: ag4WzCqLkctIP0UegTtniul1grA.crl (hash: vg7z8uCTNk4H5JqL2ukou6roZdw4X7aBl/F/uqVmIeM=)
17: hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa (hash: AW1B3GU+CHp2dLnlTMaUnh9So+6olkFuGvAvVFpBybo=)
18: nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa (hash: kUW/q0E+5ap6XJqy3o0pzyvq0pN9N7639FqeoHqln7w=)
19: vTCE3_WjlZWEHiUifn-Z3rZn-3g.roa (hash: k0eIUOFWrIqLB7Ha+lzX5IKld1csxUVRrPdDqLcQHmQ=)
20: yde-3lSgZiRr0HU1KS1x7njAoeA.roa (hash: eSGD7O7kwdqNPAeSE2PmhfFGu0OTxONTMV1cXFqWo/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2b:13:c7:df:bd:1a:a1:b8:79:6a:06:d6:75:32:7e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 4 03:02:24 2026 GMT
Not After : Jul 5 03:02:24 2026 GMT
Subject: CN=94b24f98923761ce4435b3f8af2b8ee9ff67f6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:16:bf:fc:81:be:ee:0d:90:87:77:d2:90:
81:df:2e:fd:14:b3:96:4a:55:b6:88:ed:45:bd:51:
21:4a:47:c1:25:85:19:14:c2:bb:88:3a:04:00:20:
00:b5:42:6a:d5:58:8b:52:01:dc:3b:25:81:38:64:
d8:3d:94:ae:ac:7f:a0:08:4d:4d:4f:de:4b:c7:e5:
2c:6c:48:1f:e6:40:3a:e6:aa:9d:85:ae:31:4f:d1:
09:a7:ce:ee:23:ee:b6:76:82:24:08:1b:71:b8:a6:
50:b1:bd:6e:2a:e7:37:f4:38:9e:44:1d:b3:7b:fc:
15:a6:b4:6a:0e:ff:3a:cb:ac:19:76:90:62:89:af:
db:ea:87:8c:b3:d7:21:8d:dc:49:b4:f6:79:a5:03:
94:c9:c7:9b:93:31:8d:00:fe:27:58:3a:21:da:f4:
de:9b:3e:59:c8:de:36:6b:a5:64:50:4a:49:b5:fa:
59:f0:50:b1:87:fe:4e:34:74:68:26:40:b0:8b:c6:
6f:0d:81:6e:70:42:c0:f4:31:d0:94:c0:c7:06:3b:
16:86:d9:9b:cd:89:d2:1c:df:2b:f6:16:68:7b:5c:
a9:0e:6a:d7:db:47:89:31:63:6c:4c:19:bf:dc:99:
ab:21:0f:b2:30:e8:33:c5:65:35:2c:66:95:6e:2c:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B2:4F:98:92:37:61:CE:44:35:B3:F8:AF:2B:8E:E9:FF:67:F6:DA
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ce:72:1e:ad:29:fe:9b:ef:79:b6:db:5c:a7:93:3b:84:92:
ff:d2:ea:c1:74:86:c3:5e:ec:88:db:86:89:eb:67:a5:5f:54:
94:e3:eb:04:9c:01:73:62:f6:19:4d:87:c8:0a:bd:dc:ca:1d:
49:61:41:3e:5e:6d:8f:58:1b:ad:0a:1d:dd:54:5d:96:05:85:
33:b9:dc:b0:de:6b:70:8d:3b:f6:31:73:13:5f:ce:7e:2a:f1:
1d:e6:d9:56:97:4c:c4:1d:dc:8e:34:8a:eb:2f:38:5a:80:7e:
6a:46:ec:0e:de:2e:55:1d:41:02:45:7e:30:cd:2c:4f:b5:b9:
b9:ac:0b:1b:af:0e:a9:c0:b6:5d:f1:9c:43:8c:e2:b1:fe:c9:
44:35:c5:c1:2c:95:29:03:d4:cf:d0:cb:e4:e1:80:b6:a2:d8:
44:16:fc:6a:01:ad:9e:d0:fc:f9:02:eb:6e:90:75:42:0d:11:
27:74:c2:50:25:07:47:16:87:31:2b:cf:3b:38:d3:36:36:d6:
ee:37:5c:04:4d:0f:d5:4e:de:81:e5:d1:8f:31:78:68:90:d3:
e8:e2:24:26:40:b7:b1:35:eb:c4:b9:83:3d:da:cf:b5:cd:4a:
5d:2c:00:d3:8a:d2:03:61:60:da:66:38:e4:ea:04:b7:e9:15:
b8:2c:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 08:18:51 2026 by rpki-client