Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier: N9EPYwAsRE2Xvfs51tfgffwwHL48Qrw9ifIJEMyC1yA=
Subject key identifier: BA:5F:74:B9:C2:C3:65:03:92:63:6C:41:66:0B:D3:B2:AD:58:03:8B
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 019D3866203FAB19EA53778243B6012B8421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number: 12FF
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: HWmmpJKozp1vxRIf836tgCkIydvrtRyU94T5OZLVCjQ=)
2: ePG6DY0S1g_n3-izjvFmaMzFYtA.roa (hash: 4EtCOL5WPsRvbWzQ4J4E2mOMMK8/QB99r0YCzdv5MzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:20:3f:ab:19:ea:53:77:82:43:b6:01:2b:84:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=ba5f74b9c2c3650392636c41660bd3b2ad58038b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:d5:ee:cc:3b:bc:0f:d9:43:9f:9d:ff:25:
06:6d:63:19:93:1e:83:1c:5a:df:80:69:4d:02:b0:
69:ea:7a:1e:34:d6:9e:2e:32:b1:bc:21:4a:8c:73:
58:f1:6b:f9:3d:f1:82:05:9b:b2:49:97:1a:d3:bf:
2a:76:e6:e8:0c:96:b0:31:02:91:27:b1:06:97:9d:
f8:ab:16:9f:c4:ba:f6:68:27:df:34:19:ae:ec:dd:
60:d9:7d:8e:25:8b:c9:5f:8f:51:7c:d0:0e:4e:83:
29:69:f2:a2:f2:88:c7:2f:49:e8:c5:08:41:74:79:
fa:ef:5d:ff:30:c3:d7:dd:97:0c:90:83:b7:ad:9f:
b5:40:35:73:87:08:0d:e1:ad:93:8f:6d:1b:41:f1:
6a:41:d1:85:c4:93:3f:e5:f1:6e:81:21:55:16:e5:
df:de:9e:07:bf:1d:6f:9e:0c:ca:61:c5:11:93:f3:
89:55:ea:db:81:e9:e8:26:81:95:89:1d:97:f5:6d:
d7:b7:0a:69:71:1e:77:d5:a0:c7:81:37:3b:b5:4d:
39:f8:f6:07:4a:a0:79:5b:9d:64:59:19:f6:74:5c:
7d:99:bb:47:55:04:16:03:8e:af:1e:e7:e5:e6:33:
77:e7:d6:44:c3:4c:0f:92:73:1d:e5:dc:15:93:05:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:74:B9:C2:C3:65:03:92:63:6C:41:66:0B:D3:B2:AD:58:03:8B
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2e:7a:df:ac:64:0d:00:e2:cf:ac:95:b2:85:57:e8:5f:4b:
ba:3f:c9:71:aa:85:a0:bb:3e:b9:80:ac:79:8a:21:4f:44:26:
c4:13:8e:40:f1:af:4d:1c:13:3e:62:0a:20:bd:bd:b6:3a:61:
97:18:c8:cd:29:62:cd:db:63:46:ed:5a:09:51:1f:1a:15:37:
b0:27:97:7d:56:e0:7a:5f:ad:14:83:82:78:24:b3:94:31:ad:
03:0e:fb:c2:88:04:6e:b6:1d:4c:b0:98:13:f8:7f:ef:69:cb:
72:13:b1:a0:40:93:cd:bb:80:1f:65:18:05:29:bb:97:66:49:
ae:84:d9:68:c8:f5:d5:8c:ed:e7:03:be:35:1f:9f:90:f2:b3:
09:cf:f6:62:23:30:87:c3:1a:d2:d0:1a:3f:b2:cc:dd:54:21:
be:05:f4:70:2b:81:cf:1c:2a:07:32:8d:be:f9:1a:57:80:c5:
30:cf:84:fc:13:65:9b:1c:48:eb:6a:6f:b6:aa:a3:a2:c2:45:
8c:ab:b9:9a:bb:47:50:54:5f:2c:08:63:92:03:47:6d:e2:bd:
6e:34:35:e4:b0:70:ca:65:ae:b5:7b:10:7f:ee:27:45:7d:0f:
0c:d2:3c:d7:ac:69:09:9e:fc:de:58:2e:b6:9a:d9:88:78:b7:
99:9d:3a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:52 2026 by rpki-client