Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier: RI/tHZ4WQbhDMQ2A+vWzXdF/nGMzu748xUVJitlDnVg=
Subject key identifier: D3:71:F2:40:8E:4A:17:2B:F2:CA:B2:64:59:9D:05:2A:FA:87:27:C1
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial: 019D3940C87801065E6F6C47FCBE287920E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number: 0BC2
Signing time: Sun 29 Mar 2026 11:00:39 +0000
Manifest this update: Sun 29 Mar 2026 11:00:39 +0000
Manifest next update: Mon 30 Mar 2026 11:00:39 +0000
Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: u/hA+MNsKKYPMPaZQR1SK31Q+fS/ca8cvlrl5R/wdnM=)
2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c8:78:01:06:5e:6f:6c:47:fc:be:28:79:20:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Validity
Not Before: Mar 29 11:00:39 2026 GMT
Not After : Mar 30 11:00:39 2026 GMT
Subject: CN=d371f2408e4a172bf2cab264599d052afa8727c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:4e:fb:8b:c3:95:c9:7d:1b:6f:9c:44:32:
d4:bf:52:be:91:91:20:eb:6b:f6:5c:be:ae:af:5d:
69:60:7f:97:48:81:7d:dd:a5:c6:61:66:63:84:99:
8d:75:23:f8:bd:5f:02:13:fd:33:17:4b:32:6c:66:
f7:0f:3f:9a:bf:94:39:aa:75:21:da:8b:bd:2c:e2:
e1:db:b7:c2:89:57:c3:7f:e7:09:d0:df:c1:1f:07:
2f:e1:1f:4f:98:b4:50:ec:69:03:df:6e:bd:a6:b4:
d3:2f:79:ff:8c:0f:c8:c7:81:a3:fb:44:ea:2d:c5:
a2:77:eb:63:9b:9e:f4:c9:5e:a7:85:ae:07:06:f8:
82:52:19:61:8c:4b:d7:a8:5c:19:65:f1:e3:90:c9:
4f:16:73:63:f1:7a:66:1d:0d:35:5a:a8:42:1f:cb:
c9:68:40:9e:de:e1:1d:6e:b6:da:8b:2e:9c:34:61:
32:f9:18:2a:49:61:f5:74:15:60:6a:47:8a:05:f8:
e9:42:36:ad:7c:57:87:9e:ce:c9:0e:30:5a:92:38:
0f:08:cd:f0:8f:ec:73:b3:92:24:0d:76:fe:cb:69:
74:e1:dd:2b:3d:3c:11:fc:88:dd:e2:d4:80:9c:cb:
72:37:85:b2:b4:30:b9:0d:1a:ce:7d:78:36:75:c9:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:71:F2:40:8E:4A:17:2B:F2:CA:B2:64:59:9D:05:2A:FA:87:27:C1
X509v3 Authority Key Identifier:
keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ed:3b:1b:2f:bd:ba:0a:dd:15:98:41:9f:86:e2:4e:a3:23:
11:19:e7:f0:a0:65:8a:55:7f:a7:e8:23:ae:2b:08:21:fb:45:
b2:7c:b4:af:ad:5a:47:9f:00:b4:53:a6:d2:70:22:bf:98:d3:
57:60:18:f9:30:93:aa:6b:d0:00:ca:6a:04:3d:4d:50:33:4b:
0b:b8:ef:cf:c1:86:d1:df:20:bc:2b:85:99:dc:7c:90:b0:08:
a1:c0:98:4d:4f:bd:0d:3a:b4:fe:9b:17:96:6c:1f:0e:9e:96:
e6:9c:37:ff:dd:10:ef:38:bd:03:53:56:fb:f4:a9:34:7e:1b:
12:f2:67:55:60:42:ab:c5:84:6d:fe:51:4f:e2:bb:fe:fa:39:
7a:55:de:77:1a:a7:69:20:82:1c:4d:e5:80:ec:7c:32:33:63:
a9:4c:e8:5b:88:7f:a1:0f:7a:c2:c3:88:4b:6d:82:2d:2d:f8:
2f:b6:90:34:a7:66:8a:da:75:6b:b0:48:f3:43:24:aa:2f:cb:
a0:82:af:9b:7c:d2:23:43:b1:cc:ad:4e:87:c0:ce:89:f0:81:
81:e0:50:b1:0a:b1:b1:cf:2b:a7:f4:2b:3b:c9:f0:b9:b3:65:
69:fc:7b:5d:78:49:10:7c:f8:ad:93:3d:d0:59:4a:8b:c4:0b:
dc:c2:62:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QMh4AQZeb2xH/L4oeSDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw
OWQ3YTIwHhcNMjYwMzI5MTEwMDM5WhcNMjYwMzMwMTEwMDM5WjAzMTEwLwYDVQQD
EyhkMzcxZjI0MDhlNGExNzJiZjJjYWIyNjQ1OTlkMDUyYWZhODcyN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIlO+4vDlcl9G2+cRDLUv1K+kZEg
62v2XL6ur11pYH+XSIF93aXGYWZjhJmNdSP4vV8CE/0zF0sybGb3Dz+av5Q5qnUh
2ou9LOLh27fCiVfDf+cJ0N/BHwcv4R9PmLRQ7GkD3269prTTL3n/jA/Ix4Gj+0Tq
LcWid+tjm570yV6nha4HBviCUhlhjEvXqFwZZfHjkMlPFnNj8XpmHQ01WqhCH8vJ
aECe3uEdbrbaiy6cNGEy+RgqSWH1dBVgakeKBfjpQjatfFeHns7JDjBakjgPCM3w
j+xzs5IkDXb+y2l04d0rPTwR/Ijd4tSAnMtyN4WytDC5DRrOfXg2dckIgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNx8kCOShcr8sqyZFmdBSr6hyfBMB8GA1UdIwQY
MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt
NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk
LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqu07Gy+9
ugrdFZhBn4biTqMjERnn8KBlilV/p+gjrisIIftFsny0r61aR58AtFOm0nAiv5jT
V2AY+TCTqmvQAMpqBD1NUDNLC7jvz8GG0d8gvCuFmdx8kLAIocCYTU+9DTq0/psX
lmwfDp6W5pw3/90Q7zi9A1NW+/SpNH4bEvJnVWBCq8WEbf5RT+K7/vo5elXedxqn
aSCCHE3lgOx8MjNjqUzoW4h/oQ96wsOIS22CLS34L7aQNKdmitp1a7BI80Mkqi/L
oIKvm3zSI0OxzK1Oh8DOifCBgeBQsQqxsc8rp/QrO8nwubNlafx7XXhJEHz4rZM9
0FlKi8QL3MJihQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:22 2026 by rpki-client