Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
File: AG5fNfGSihR_HaQbXXtbDWGy1vg.mft (raw, json)
Hash identifier: SgWu8Jk2JgyFd5uWv4CaeItwXZ5IuVeVIh4YtmWJ9j4=
Subject key identifier: 45:81:87:5B:EC:7A:7C:55:D2:CC:8B:B0:14:0C:60:52:6E:59:1D:4E
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 01A040BC7A5FE6B301331AA83189B79EC59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
Manifest number: 044D
Signing time: Thu 27 Aug 2026 01:01:28 +0000
Manifest this update: Thu 27 Aug 2026 01:01:28 +0000
Manifest next update: Fri 28 Aug 2026 01:01:28 +0000
Files and hashes: 1: 5VPFnx7Snq1s0xjLflc4cpAtHHc.roa (hash: 31yOTf+y5hoAFje/WnwVpgH2/J9KZ8DZIZVyKF4ts1w=)
2: AG5fNfGSihR_HaQbXXtbDWGy1vg.crl (hash: kzEY5nhIHAJzUd8eniPpHOTlbjOWrbedNLDpURemY4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:7a:5f:e6:b3:01:33:1a:a8:31:89:b7:9e:c5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: Aug 27 01:01:28 2026 GMT
Not After : Aug 28 01:01:28 2026 GMT
Subject: CN=4581875bec7a7c55d2cc8bb0140c60526e591d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:50:7d:5e:94:b1:11:45:a5:ad:f3:0e:63:a0:
60:a6:be:09:a6:ec:9f:56:c0:5b:cd:8d:6a:c6:f0:
c1:89:05:08:7e:e1:93:4a:bc:dc:f8:55:d1:c7:49:
e4:e7:b0:ae:da:85:98:7f:0e:36:fe:b5:a6:e2:89:
f5:0c:07:6a:96:0b:30:ac:97:b1:a2:dc:9e:fa:2c:
b9:33:c6:23:d0:61:e2:30:16:10:f1:76:de:9f:7e:
55:ea:83:1b:10:0c:df:7e:55:00:1f:af:75:48:f5:
04:8c:a8:b6:50:84:89:6a:c8:1a:ec:75:b1:22:65:
1f:ec:74:f5:86:0b:94:c4:3a:fd:69:bf:67:80:db:
61:0f:64:60:88:c1:eb:e5:31:1b:17:65:10:9c:77:
b1:12:65:d4:6c:4b:84:9e:d6:34:4b:1b:9c:ec:70:
99:f5:a0:9f:03:55:c2:80:e0:58:3d:bf:3c:83:1f:
d8:48:8e:32:98:0f:13:da:f2:7d:0a:4b:cf:e5:77:
63:5c:51:d9:51:ed:11:6e:8b:92:81:b2:82:5a:2b:
c5:f5:77:b4:23:72:ad:0a:66:65:fb:f0:14:b4:dc:
61:ae:bb:c2:ea:be:c6:8b:ca:6f:f1:f4:e1:88:d5:
1c:59:3b:7b:3f:14:6d:ef:03:89:c9:f8:25:92:01:
35:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:81:87:5B:EC:7A:7C:55:D2:CC:8B:B0:14:0C:60:52:6E:59:1D:4E
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:38:d2:85:36:ee:45:bb:c8:ff:53:8d:c3:fb:bc:ee:96:26:
b0:43:a5:1a:06:d6:6e:d4:4d:5e:ed:0f:0e:37:c4:15:05:df:
d0:5e:d5:5b:53:8f:85:0b:64:8c:1c:f7:04:a3:2f:de:3d:19:
b1:31:95:e8:aa:7a:8c:8e:a9:49:e7:cf:93:8f:14:7a:f9:bb:
f8:fc:c1:24:59:2d:10:73:86:83:58:1a:33:80:2d:64:60:4b:
fb:7b:05:6c:5a:49:dc:a7:c5:72:8a:e9:98:32:d2:cb:0e:52:
dc:d4:b4:2f:41:c1:c0:76:e5:55:b7:fc:19:70:8f:dd:94:6b:
e7:0f:83:8d:c6:d4:5f:6d:38:92:01:26:c3:9f:09:b3:ec:cb:
3d:44:81:ae:ea:79:98:91:2a:ce:d1:76:c5:12:9b:06:5d:30:
1b:98:fc:af:34:09:4f:33:5e:f1:57:18:6c:04:e1:b0:f4:41:
00:38:38:2c:0b:43:f4:fa:96:74:3b:91:f0:5f:d1:39:d7:cc:
75:65:fe:c8:a0:e3:15:70:cb:22:7c:ef:7e:0d:13:4e:5a:b4:
7e:cf:85:33:47:b1:42:d2:de:4e:6d:4c:1b:be:cb:2a:e0:c1:
f1:2e:6e:c5:74:b7:7f:36:51:c1:cd:42:8e:e1:c8:ca:73:4f:
61:70:ed:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAvHpf5rMBMxqoMYm3nsWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNmU1ZjM1ZjE5MjhhMTQ3ZjFkYTQxYjVkN2I1YjBkNjFi
MmQ2ZjgwHhcNMjYwODI3MDEwMTI4WhcNMjYwODI4MDEwMTI4WjAzMTEwLwYDVQQD
Eyg0NTgxODc1YmVjN2E3YzU1ZDJjYzhiYjAxNDBjNjA1MjZlNTkxZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVB9XpSxEUWlrfMOY6Bgpr4Jpuyf
VsBbzY1qxvDBiQUIfuGTSrzc+FXRx0nk57Cu2oWYfw42/rWm4on1DAdqlgswrJex
otye+iy5M8Yj0GHiMBYQ8Xben35V6oMbEAzfflUAH691SPUEjKi2UISJasga7HWx
ImUf7HT1hguUxDr9ab9ngNthD2RgiMHr5TEbF2UQnHexEmXUbEuEntY0Sxuc7HCZ
9aCfA1XCgOBYPb88gx/YSI4ymA8T2vJ9CkvP5XdjXFHZUe0RbouSgbKCWivF9Xe0
I3KtCmZl+/AUtNxhrrvC6r7Gi8pv8fThiNUcWTt7PxRt7wOJyfglkgE1RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWBh1vsenxV0syLsBQMYFJuWR1OMB8GA1UdIwQY
MBaAFABuXzXxkooUfx2kG117Ww1hstb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUc1Zk5mR1NpaFJfSGFRYlhYdGJEV0d5MXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iODVlNTEtZjhhOS00Zjk3LWI4NGUt
YTA1OWI0M2VkYTAzLzEvQUc1Zk5mR1NpaFJfSGFRYlhYdGJEV0d5MXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9iODVlNTEtZjhhOS00Zjk3LWI4NGUtYTA1OWI0M2VkYTAz
LzEvQUc1Zk5mR1NpaFJfSGFRYlhYdGJEV0d5MXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjjShTbu
RbvI/1ONw/u87pYmsEOlGgbWbtRNXu0PDjfEFQXf0F7VW1OPhQtkjBz3BKMv3j0Z
sTGV6Kp6jI6pSefPk48Uevm7+PzBJFktEHOGg1gaM4AtZGBL+3sFbFpJ3KfFcorp
mDLSyw5S3NS0L0HBwHblVbf8GXCP3ZRr5w+DjcbUX204kgEmw58Js+zLPUSBrup5
mJEqztF2xRKbBl0wG5j8rzQJTzNe8VcYbAThsPRBADg4LAtD9PqWdDuR8F/ROdfM
dWX+yKDjFXDLInzvfg0TTlq0fs+FM0exQtLeTm1MG77LKuDB8S5uxXS3fzZRwc1C
juHIynNPYXDtJQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:47 2026 by rpki-client