Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: /16ICsmunRspYFRATUg8nkUjQXFkMQmjsOthWd55Ifw=
Subject key identifier: 44:DA:7B:C0:2D:E5:8D:B7:62:F6:CD:73:6B:5E:0D:79:D2:DE:9E:33
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 019D3AC176D3D2E0E63FE1074946078AC77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0B85
Signing time: Sun 29 Mar 2026 18:00:50 +0000
Manifest this update: Sun 29 Mar 2026 18:00:50 +0000
Manifest next update: Mon 30 Mar 2026 18:00:50 +0000
Files and hashes: 1: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: /tWqT0CyTjwTDcDr86drnBQGBLVIJ+nJ69CVmXLgsFo=)
2: hTRi4HtTpCkolgUuQDDvPG_VyIs.roa (hash: 0FlUN5CzPW1X1y6ikdRfKAaNuwCJRvtbLFmH3Xzp8cI=)
3: wDgy_dfCRG9cDmytDHPeiO1ky38.roa (hash: zBbuMIpRBO8AxXuh3KIVCJ9BZ6863IbMys75IrzppoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:76:d3:d2:e0:e6:3f:e1:07:49:46:07:8a:c7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Mar 29 18:00:50 2026 GMT
Not After : Mar 30 18:00:50 2026 GMT
Subject: CN=44da7bc02de58db762f6cd736b5e0d79d2de9e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:7b:b8:c8:c6:44:dd:69:01:41:f8:a3:ab:
b2:9b:42:de:1c:b6:69:c2:83:d4:58:10:6c:4d:f6:
66:5f:22:b3:e2:43:1d:3e:95:39:af:46:b0:b2:ec:
62:8e:d6:d7:85:3c:fb:3d:f7:65:3a:eb:23:f2:4b:
da:07:99:71:a0:57:2c:1b:81:9e:11:bc:0f:07:b4:
61:9f:fd:26:93:00:79:80:85:72:37:f4:d7:db:25:
69:d0:ae:e0:db:3f:c9:b7:30:33:22:26:fe:35:68:
e2:b3:8e:e6:ae:f2:6d:43:42:9e:d6:e1:3d:8c:96:
0d:db:ec:e2:ef:f7:06:2a:7d:c1:86:ad:cc:68:46:
22:fd:cb:52:5c:c9:d1:73:cc:86:2f:70:c3:d6:b0:
c4:9d:f6:e0:29:04:4b:66:87:b1:04:36:31:f7:e9:
3e:73:5f:9d:ae:c4:cf:bb:76:30:75:5f:32:28:09:
6e:ed:56:8a:33:2f:c4:dd:f3:01:e0:e9:9e:c5:77:
34:ba:d3:aa:ae:02:9f:36:5d:14:4a:22:8e:0c:5c:
89:8e:a8:b5:ff:27:e9:1a:50:7d:2b:9c:bf:3a:74:
bd:eb:25:24:ab:44:cd:79:43:c7:57:34:73:30:ef:
fa:58:e9:47:86:9c:85:5b:da:82:c2:c8:35:47:d1:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:7B:C0:2D:E5:8D:B7:62:F6:CD:73:6B:5E:0D:79:D2:DE:9E:33
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:21:d1:8b:4b:8c:d7:51:3c:57:dd:a7:08:2f:82:3a:8b:7b:
99:a9:97:0a:dc:b3:e9:53:da:74:a1:17:90:0b:ad:4d:cf:b6:
fb:7f:35:05:4c:54:43:63:24:21:20:fe:ac:ee:36:11:42:56:
13:8c:80:87:48:ec:9f:52:d4:00:c1:85:f7:4e:d9:ce:cf:4a:
02:f4:6b:5e:64:fa:d4:87:26:e6:83:82:cd:09:91:2a:aa:cb:
69:41:47:c3:c2:58:04:81:86:96:e4:77:37:70:5b:6e:6e:66:
a3:e0:a3:10:57:81:56:53:ce:ca:b6:79:d7:fd:00:f8:be:88:
7f:1d:cf:1b:2d:3f:de:10:d7:04:91:7a:65:cd:8a:6c:57:3c:
23:67:5e:7e:d0:70:ca:ca:2f:e3:6d:4c:43:ae:1a:db:22:2e:
99:85:c9:18:b6:44:4d:8d:b9:1f:7c:0c:01:2a:8b:7a:69:9b:
4f:5b:86:84:0c:d1:ba:d0:11:a2:02:f4:2f:ba:a5:af:72:52:
e2:ea:bf:03:f1:0d:bb:b8:c6:27:c9:b4:a6:7c:95:b7:31:0d:
96:47:56:45:30:c4:16:78:1c:f9:23:bc:47:5b:3a:fa:25:92:
b1:8f:82:5d:cf:0e:0f:45:6a:a0:c7:e9:c4:b2:9b:b4:7e:ed:
cf:15:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:32 2026 by rpki-client