Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
File: AG5fNfGSihR_HaQbXXtbDWGy1vg.mft (raw, json)
Hash identifier: LSJKeUm3Wck1RfPOpYQ8rV6ajImPqv4Pwx26HMsbgnc=
Subject key identifier: 81:B3:57:F0:D6:FF:17:F0:D0:AC:25:FB:14:FB:34:E3:6C:BD:1D:EF
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 019D38658AD47B6B4C01CA25375A290B63A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
Manifest number: 02BB
Signing time: Sun 29 Mar 2026 07:01:11 +0000
Manifest this update: Sun 29 Mar 2026 07:01:11 +0000
Manifest next update: Mon 30 Mar 2026 07:01:11 +0000
Files and hashes: 1: 5VPFnx7Snq1s0xjLflc4cpAtHHc.roa (hash: 31yOTf+y5hoAFje/WnwVpgH2/J9KZ8DZIZVyKF4ts1w=)
2: AG5fNfGSihR_HaQbXXtbDWGy1vg.crl (hash: TscyGz3w+1U5gBrsD0uGAJ6ePKbtkQmpvYsSADgXlGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8a:d4:7b:6b:4c:01:ca:25:37:5a:29:0b:63:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: Mar 29 07:01:11 2026 GMT
Not After : Mar 30 07:01:11 2026 GMT
Subject: CN=81b357f0d6ff17f0d0ac25fb14fb34e36cbd1def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ee:34:08:de:c9:fb:b0:20:27:e0:29:85:e1:
f6:00:ef:23:e1:c5:47:8c:22:3f:bd:c5:2a:dd:6c:
05:40:a0:eb:fc:c6:ac:4c:15:a9:ed:55:db:9f:55:
cb:f9:61:13:2a:ca:50:57:21:a5:86:78:bd:99:e0:
11:8a:0c:35:16:ec:16:b5:60:55:ba:7c:0c:c9:df:
a7:44:29:a4:55:dd:a9:b1:71:0d:b9:66:66:af:34:
a8:77:f7:bc:ae:a2:da:8c:68:67:77:4e:c8:49:f1:
90:3f:e6:1c:b3:9e:e0:4e:3e:63:c4:5a:24:09:c7:
a2:29:e4:ae:46:ad:1b:03:e0:f9:ee:6f:f1:6c:78:
9a:f6:ea:5b:1f:be:98:35:84:f3:40:9b:87:b7:35:
91:31:da:f7:bf:61:a9:19:9b:a2:59:b0:76:58:fe:
8a:ca:0d:11:7e:c4:c1:d3:3b:1f:61:3a:ea:e4:dc:
85:74:32:68:74:76:ad:64:32:d9:f8:87:58:16:40:
1b:6d:3c:e9:20:be:4f:7d:61:73:be:5c:f0:b5:ae:
80:79:e3:ea:90:e5:51:0e:e3:24:37:6e:72:bf:88:
6b:71:18:d2:c1:83:85:f8:9c:f5:81:0c:3e:45:17:
8c:a2:29:fc:65:49:2d:39:3f:6f:de:68:70:f1:63:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:57:F0:D6:FF:17:F0:D0:AC:25:FB:14:FB:34:E3:6C:BD:1D:EF
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:22:be:13:bc:32:f0:27:8e:ce:34:11:9b:0c:c6:c9:7a:bc:
08:68:08:0d:8d:8f:39:29:2a:10:50:ed:0d:b1:f0:3c:f7:93:
3f:25:d3:8c:57:89:3e:34:ca:5c:de:a0:24:62:61:e3:52:05:
76:29:1e:bf:1d:c2:cb:b3:26:6d:9f:1d:ef:c3:00:93:6e:55:
aa:46:a8:3b:f9:ce:9c:49:5d:ad:1b:bc:15:e8:fa:cf:a5:69:
72:01:d7:64:e2:ae:e5:ac:d9:b4:88:6e:5d:5d:5c:28:b3:83:
dd:22:e7:51:c0:f8:1a:9e:af:e5:79:5d:36:2b:72:2c:1d:96:
c3:57:36:60:96:e3:e2:ca:4c:2e:29:84:bf:3c:11:d0:13:4a:
d3:1c:58:05:7d:93:1c:f2:a1:48:8d:5e:dc:0a:7a:52:60:99:
c4:19:72:9c:92:5e:91:79:5e:8b:4f:a0:95:96:90:bf:27:72:
87:31:d5:fa:c6:0a:f1:60:05:d8:41:11:f9:bc:7f:5b:91:a4:
29:fd:3a:15:26:0b:52:68:56:b9:ba:73:fd:0b:34:4e:9c:d8:
a6:a0:f7:65:a9:97:bd:59:a9:21:2c:21:ca:48:07:3d:3f:69:
86:97:ce:06:f7:09:62:26:1a:04:33:23:d1:55:c8:57:65:32:
3f:a3:42:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:55 2026 by rpki-client