Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: 8ioVtTSFfBGCiyd9YC1RxE0J/pJz9tDfk83gp3dJkxQ=
Subject key identifier: DE:B3:10:A7:6B:A6:27:17:7E:83:DF:FE:E9:AA:3C:1C:06:3E:34:E7
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 01A020565451211C092856C1F1DCC7168015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0D05
Signing time: Thu 20 Aug 2026 18:02:03 +0000
Manifest this update: Thu 20 Aug 2026 18:02:03 +0000
Manifest next update: Fri 21 Aug 2026 18:02:03 +0000
Files and hashes: 1: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: el+ILuKeN6gCjzTe+AhNfoelqEktxL7Aj63a9q1sYqI=)
2: hTRi4HtTpCkolgUuQDDvPG_VyIs.roa (hash: 0FlUN5CzPW1X1y6ikdRfKAaNuwCJRvtbLFmH3Xzp8cI=)
3: wDgy_dfCRG9cDmytDHPeiO1ky38.roa (hash: zBbuMIpRBO8AxXuh3KIVCJ9BZ6863IbMys75IrzppoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:54:51:21:1c:09:28:56:c1:f1:dc:c7:16:80:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Aug 20 18:02:03 2026 GMT
Not After : Aug 21 18:02:03 2026 GMT
Subject: CN=deb310a76ba627177e83dffee9aa3c1c063e34e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:1e:90:f8:a1:41:bc:7d:b4:78:e9:2e:e9:
2c:ac:b4:51:a2:11:ab:92:95:a4:31:f8:56:51:ff:
83:f7:91:53:e3:3c:99:c1:07:07:b0:64:ab:dc:31:
d3:a9:35:79:83:e6:09:ac:45:51:26:2e:05:45:8f:
73:60:a5:b0:73:63:2d:18:6d:d7:88:03:ca:81:b3:
64:53:e4:fc:39:0a:19:2c:09:d9:3a:4b:5b:a1:ca:
79:a7:94:35:28:4f:c6:da:43:14:bd:c9:a2:e8:8e:
a2:d9:77:11:18:1e:46:c7:65:d5:dc:ed:bc:41:20:
b7:1e:19:87:62:b1:d9:e8:27:fb:ac:20:b6:90:66:
ee:2f:d6:ca:3e:22:fd:5f:6e:80:42:e7:cb:ea:e2:
d7:4d:fc:27:a3:f3:6f:0a:63:95:84:ac:eb:ec:1e:
64:47:ae:50:09:18:62:f7:c3:23:b3:e9:83:2f:d5:
28:50:24:f2:3a:e8:17:f2:c1:2a:91:5a:f9:c6:f3:
24:3a:eb:2f:d8:cf:0c:4e:34:2a:bf:4f:78:70:7d:
0b:54:ba:93:81:c4:92:0a:bc:f2:e2:a4:b2:5c:c7:
cb:52:d9:9a:b4:a0:52:23:df:8e:1c:ae:0b:3e:9b:
68:21:76:a4:14:a1:ec:7d:2f:b3:11:fb:7a:b6:45:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B3:10:A7:6B:A6:27:17:7E:83:DF:FE:E9:AA:3C:1C:06:3E:34:E7
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a5:83:b0:16:b9:f3:a5:71:02:31:e2:5e:05:1c:dd:74:a1:
66:fc:1c:eb:98:6a:61:06:d7:6f:ac:09:5d:9c:36:39:ce:ed:
f3:e1:a2:e6:ca:4a:bf:ec:ea:5e:34:77:dd:bf:ff:a9:1e:19:
b5:c9:15:bd:9e:47:66:99:eb:1a:c8:2c:70:b5:b7:d2:2c:70:
d8:9b:64:e8:62:59:9e:1d:f6:f0:8b:5b:01:36:d8:a5:78:a9:
6f:a2:18:23:64:0d:7f:fb:6f:f8:8d:fd:d1:9d:18:cc:90:de:
94:c5:46:ae:73:d4:d3:04:58:c8:7a:08:c1:78:ab:98:cb:85:
b3:73:e1:cf:5a:71:37:73:51:dd:77:73:e8:5b:03:62:7a:9b:
4b:0d:c2:cb:63:84:cf:fd:3b:1b:b6:cb:f7:06:e5:61:3e:80:
01:2e:9f:fe:8e:2f:43:33:b6:11:fb:a8:ba:59:06:c9:2b:4c:
b6:5e:72:17:14:52:7b:77:75:ac:42:a3:7b:61:33:38:58:00:
fd:64:8f:08:91:e3:16:fd:e9:cd:ad:ac:61:9a:8f:17:d5:04:
94:d2:7f:0f:4f:c2:1b:ec:7f:15:63:d3:76:ab:9c:ca:c4:79:
c3:5e:b9:03:e7:cb:b8:69:59:99:c2:5f:22:e6:de:e6:85:54:
60:f6:d9:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgVlRRIRwJKFbB8dzHFoAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDE2ZGFkMjczMDQ3YjE4ODg2NjkxNDg1ZGVkZDk3MTcx
YzRkNjgwHhcNMjYwODIwMTgwMjAzWhcNMjYwODIxMTgwMjAzWjAzMTEwLwYDVQQD
EyhkZWIzMTBhNzZiYTYyNzE3N2U4M2RmZmVlOWFhM2MxYzA2M2UzNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSsekPihQbx9tHjpLuksrLRRohGr
kpWkMfhWUf+D95FT4zyZwQcHsGSr3DHTqTV5g+YJrEVRJi4FRY9zYKWwc2MtGG3X
iAPKgbNkU+T8OQoZLAnZOktbocp5p5Q1KE/G2kMUvcmi6I6i2XcRGB5Gx2XV3O28
QSC3HhmHYrHZ6Cf7rCC2kGbuL9bKPiL9X26AQufL6uLXTfwno/NvCmOVhKzr7B5k
R65QCRhi98Mjs+mDL9UoUCTyOugX8sEqkVr5xvMkOusv2M8MTjQqv094cH0LVLqT
gcSSCrzy4qSyXMfLUtmatKBSI9+OHK4LPptoIXakFKHsfS+zEft6tkXWHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6zEKdrpicXfoPf/umqPBwGPjTnMB8GA1UdIwQY
MBaAFGoBba0nMEexiIZpFIXe3ZcXHE1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMt
Yzk1MjgwNDkzMmMyLzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMtYzk1MjgwNDkzMmMy
LzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6WDsBa5
86VxAjHiXgUc3XShZvwc65hqYQbXb6wJXZw2Oc7t8+Gi5spKv+zqXjR33b//qR4Z
tckVvZ5HZpnrGsgscLW30ixw2Jtk6GJZnh328ItbATbYpXipb6IYI2QNf/tv+I39
0Z0YzJDelMVGrnPU0wRYyHoIwXirmMuFs3Phz1pxN3NR3Xdz6FsDYnqbSw3Cy2OE
z/07G7bL9wblYT6AAS6f/o4vQzO2EfuoulkGyStMtl5yFxRSe3d1rEKje2EzOFgA
/WSPCJHjFv3pza2sYZqPF9UElNJ/D0/CG+x/FWPTdqucysR5w165A+fLuGlZmcJf
Iube5oVUYPbZUg==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:14 2026 by rpki-client