Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: Xft+Sry6r/O+KvvoQiXx9Iwv12+Xj80uyIzqBv/i8UQ=
Subject key identifier: 82:77:59:82:B5:90:F2:55:96:FC:9B:D4:44:E9:42:E8:CA:9E:CC:81
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 019F36A92FA7C1E74FF28BD983FFD98547AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0C8C
Signing time: Mon 06 Jul 2026 09:01:25 +0000
Manifest this update: Mon 06 Jul 2026 09:01:25 +0000
Manifest next update: Tue 07 Jul 2026 09:01:25 +0000
Files and hashes: 1: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: p37KDyzrkPjAVTaD7vOhvNZXtYoOA41d+QIHI+UzgLU=)
2: hTRi4HtTpCkolgUuQDDvPG_VyIs.roa (hash: 0FlUN5CzPW1X1y6ikdRfKAaNuwCJRvtbLFmH3Xzp8cI=)
3: wDgy_dfCRG9cDmytDHPeiO1ky38.roa (hash: zBbuMIpRBO8AxXuh3KIVCJ9BZ6863IbMys75IrzppoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a9:2f:a7:c1:e7:4f:f2:8b:d9:83:ff:d9:85:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Jul 6 09:01:25 2026 GMT
Not After : Jul 7 09:01:25 2026 GMT
Subject: CN=82775982b590f25596fc9bd444e942e8ca9ecc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:bd:15:2f:8e:5d:e3:99:7f:c5:af:26:e9:
b0:ce:6d:42:99:53:bb:6c:b1:90:63:03:0c:96:f4:
44:fd:fb:7f:0b:85:0d:64:d4:2c:ba:c1:4c:1b:c5:
5d:7c:a0:28:5d:75:7a:16:96:25:72:a1:57:75:2d:
99:99:58:cb:48:3e:a6:ca:20:e5:0b:fd:5c:83:ce:
30:2d:3f:a7:19:c5:80:6b:ac:8f:aa:33:8f:00:be:
f1:e3:2e:c6:89:a3:43:f2:89:c1:4f:06:f8:c7:b5:
7e:d7:ab:8c:59:c8:bf:f5:91:56:6b:8b:88:f3:77:
29:00:f3:52:90:70:08:30:13:f7:0d:36:99:f4:ac:
fd:c9:b0:ee:e4:4c:c5:cf:ee:73:42:2a:4d:9d:d1:
be:b3:f3:b8:fe:2f:d3:de:42:4d:0c:aa:71:0e:01:
f5:c1:3e:ea:dc:f5:7e:46:07:24:8b:a7:57:d1:e9:
79:65:bb:45:81:b4:58:1c:b0:15:ef:19:b2:63:51:
6d:17:ca:95:30:84:e0:c0:9c:75:55:31:43:66:a2:
a7:84:73:94:bb:b6:23:95:9e:00:99:60:48:35:3e:
b2:f3:e4:1c:91:59:5e:05:2c:47:ed:18:b3:7e:7b:
15:32:e6:5a:7e:22:be:c7:84:58:46:5f:11:cd:e6:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:77:59:82:B5:90:F2:55:96:FC:9B:D4:44:E9:42:E8:CA:9E:CC:81
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e3:b0:24:c0:40:32:1e:c0:90:f4:04:36:1b:02:07:90:51:
a9:50:e9:ae:c3:9e:6f:de:6f:da:d5:46:55:b1:52:b0:fd:af:
b2:b3:c1:8a:26:54:0b:bf:8d:08:a6:79:c1:d4:a2:57:31:f8:
7d:7d:65:2d:49:50:45:df:a3:a2:a4:ab:7d:38:14:1d:c7:96:
8a:af:74:49:d4:75:08:1c:32:4e:a4:54:3a:cf:f1:66:84:32:
8b:96:24:80:0f:3e:22:41:3c:45:49:d5:5a:4d:13:37:4b:32:
28:74:c1:60:51:18:9b:6b:13:ac:19:9e:a0:8a:41:59:6e:7f:
c5:35:7d:d3:e3:4b:36:6b:93:0a:81:4b:3b:81:f9:e4:9f:a4:
1b:94:f1:37:2a:02:53:1c:c8:4a:35:f1:e6:8c:4e:6e:86:ee:
c2:3f:19:aa:ca:43:58:97:14:0b:6f:25:4c:5f:5f:78:51:d3:
c3:30:bc:27:ea:79:d8:0b:e1:16:2a:69:98:6b:f3:12:b1:17:
c3:83:5f:10:9e:11:d6:30:76:29:f0:6d:34:40:85:3d:1e:6e:
e9:13:1e:e4:2f:7a:d6:bc:45:29:ce:b4:c4:2a:13:17:00:35:
77:93:0b:ef:00:2a:ff:62:bc:a8:a9:17:01:87:9d:96:0d:4c:
00:1b:fa:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ82qS+nwedP8ovZg//ZhUesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDE2ZGFkMjczMDQ3YjE4ODg2NjkxNDg1ZGVkZDk3MTcx
YzRkNjgwHhcNMjYwNzA2MDkwMTI1WhcNMjYwNzA3MDkwMTI1WjAzMTEwLwYDVQQD
Eyg4Mjc3NTk4MmI1OTBmMjU1OTZmYzliZDQ0NGU5NDJlOGNhOWVjYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+i9FS+OXeOZf8WvJumwzm1CmVO7
bLGQYwMMlvRE/ft/C4UNZNQsusFMG8VdfKAoXXV6FpYlcqFXdS2ZmVjLSD6myiDl
C/1cg84wLT+nGcWAa6yPqjOPAL7x4y7GiaND8onBTwb4x7V+16uMWci/9ZFWa4uI
83cpAPNSkHAIMBP3DTaZ9Kz9ybDu5EzFz+5zQipNndG+s/O4/i/T3kJNDKpxDgH1
wT7q3PV+Rgcki6dX0el5ZbtFgbRYHLAV7xmyY1FtF8qVMITgwJx1VTFDZqKnhHOU
u7YjlZ4AmWBINT6y8+QckVleBSxH7RizfnsVMuZafiK+x4RYRl8RzebEBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJ3WYK1kPJVlvyb1ETpQujKnsyBMB8GA1UdIwQY
MBaAFGoBba0nMEexiIZpFIXe3ZcXHE1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMt
Yzk1MjgwNDkzMmMyLzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMtYzk1MjgwNDkzMmMy
LzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+OwJMBA
Mh7AkPQENhsCB5BRqVDprsOeb95v2tVGVbFSsP2vsrPBiiZUC7+NCKZ5wdSiVzH4
fX1lLUlQRd+joqSrfTgUHceWiq90SdR1CBwyTqRUOs/xZoQyi5YkgA8+IkE8RUnV
Wk0TN0syKHTBYFEYm2sTrBmeoIpBWW5/xTV90+NLNmuTCoFLO4H55J+kG5TxNyoC
UxzISjXx5oxObobuwj8ZqspDWJcUC28lTF9feFHTwzC8J+p52AvhFippmGvzErEX
w4NfEJ4R1jB2KfBtNECFPR5u6RMe5C961rxFKc60xCoTFwA1d5ML7wAq/2K8qKkX
AYedlg1MABv6nw==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:19:34 2026 by rpki-client