
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier: 9iGHoIm7Y5uBl3A3AzCszaTmTNBLSQoyCw4AzL65thg=
Subject key identifier: C1:E0:EB:05:1A:C3:75:A1:73:63:A1:9E:0D:85:14:C1:BE:8C:43:FD
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019CBF96C5DAA3BC02263BF35F2FFDEF8558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number: 13F2
Signing time: Thu 05 Mar 2026 20:00:55 +0000
Manifest this update: Thu 05 Mar 2026 20:00:55 +0000
Manifest next update: Fri 06 Mar 2026 20:00:55 +0000
Files and hashes: 1: 1VAUKQYyRyqVufQZ6mQkYGsYsiE.roa (hash: 1UxCwpeiuCaB4NtOHBTH7GLcym81PgfYyIzfwzAklFY=)
2: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=)
3: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: XSKZRHhjJsIsnPmqfJbtVUGXPM4rs6AR7c9lv9cGgsw=)
4: IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa (hash: EqnLgWYSsbEEljSlnCDlnIwQvLw5hISyxs/7YKEWdm4=)
5: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=)
6: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=)
7: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=)
8: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=)
9: QomjpQx9_CU1bmLVLsZtPoZDq78.roa (hash: HNmZtCav5oDUjr+7p6DMbvp4B1wr1fA/JAYD/NDabk4=)
10: SOgaP1DH2swEptFsywDuWJ897xw.roa (hash: LYHLoXM2uerJ8kW5uG4y1NPyevrNKVqu8gNCKOXwcIo=)
11: T7oxV4Rmv2aGG5h-sq_bbfp7cXk.roa (hash: 56UkEBVR91odUYAEuW3iMxqImg8YTpwGiDV/Dlr2y/A=)
12: T86y2lb6VM9SYijib5Gx6TXU_P8.roa (hash: ExJprcrpe0RGYOZUNA24jfKZT7aUwu9YCrRRkzYlGpo=)
13: TSAciExIDDLBEcTIBLpyxR8oUe8.roa (hash: xuR6T02zCPYtUbw7NwiqXuHRlL2/+geA0rMQimehzsE=)
14: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=)
15: YKYYd-HmDONZzhNy7AZPruAczLQ.roa (hash: vW22etpUmfQZNAgNwW3NzuTrwiYhU9D/ujqkIZK/8ZM=)
16: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=)
17: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=)
18: _oMS8vQNhi6R4XyJHn3Kgm85oW8.roa (hash: G/zJxy7ZK39KBuYYRk7Yf3yrVTAyUCZvIxiOw4FGcYk=)
19: fKtoyxRVW8bUMI_rB5p-nLcW5mU.roa (hash: ps8RU8VkZlyeWoj9Je22w0i7MXOLJvXdQve7pnVShE0=)
20: o82wJADBHFkJX5vOdfLDcdz7SfI.roa (hash: u+qyev6ZaFOmLJt2UGgP85ay/0TbQc+SxI2fnx4Zyc4=)
21: qO2ZYDlru8D0qKA_PlIfPHuJ87Y.roa (hash: yAQHrlDWiEN3OIpMgVB3JbW0VXL3siiz0W9Zs2LsAnQ=)
22: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=)
23: rTo0UEeW4WSn2MjXsG-3uABsPfY.roa (hash: Imb7IO3Q8rHzQrWinxJegVt8mzKf4/246lxnQ0sa3no=)
24: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (hash: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg=)
25: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=)
26: xM-FcmqLH2Fk4MxXGNAUdHPs5WA.roa (hash: zAQ/rpcpYL8nwkL4BP7Yry3eVEA7iIIHw5MMjWEuGzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:96:c5:da:a3:bc:02:26:3b:f3:5f:2f:fd:ef:85:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 5 20:00:55 2026 GMT
Not After : Mar 6 20:00:55 2026 GMT
Subject: CN=c1e0eb051ac375a17363a19e0d8514c1be8c43fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:26:b2:1c:80:15:e4:6a:9f:b2:56:e0:ad:
50:12:a7:b8:f4:17:f5:98:f0:8f:a4:9c:dc:bf:e2:
45:79:94:a8:85:70:60:a3:1b:79:78:64:4a:c2:47:
e2:de:c3:23:85:4d:a3:4d:63:43:f9:91:a7:0e:01:
08:db:75:c1:82:07:34:61:1e:12:bf:00:03:ff:92:
43:0a:c9:cb:4b:fb:e5:9e:53:5b:7f:6a:72:bf:30:
8a:7b:cd:98:2f:90:f6:7b:88:06:9a:44:17:65:2d:
df:f5:fb:73:51:95:78:85:a3:54:92:b8:3f:ca:5d:
69:a0:e9:db:89:4d:79:ca:fa:2b:e7:9b:3d:0a:15:
1c:66:8d:49:ba:97:f6:80:fc:0b:37:d8:9d:dc:5e:
38:47:27:83:4d:7e:22:66:a2:f5:6d:2c:cf:e3:32:
4f:c7:1f:49:3c:a5:dd:f4:10:31:b9:b5:f3:65:11:
1f:80:10:d1:2f:87:40:a6:c8:c0:c1:8e:72:90:f5:
91:ea:b9:a4:bb:d7:6d:d9:cc:66:01:5b:28:46:41:
7e:f5:b5:ec:0a:87:a3:58:7e:13:d0:40:11:3d:b7:
0c:c0:b6:cf:65:03:c8:19:12:e2:ac:37:29:3e:ac:
51:6e:9c:b3:21:e1:1c:b1:7a:b3:ea:25:71:4b:a5:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E0:EB:05:1A:C3:75:A1:73:63:A1:9E:0D:85:14:C1:BE:8C:43:FD
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:55:57:4a:1d:57:e0:ce:31:1a:0e:ec:ca:f5:84:3a:be:08:
eb:b5:1b:3e:6f:d3:96:04:2b:44:da:a2:b8:d9:c7:c1:3c:27:
e9:dc:d7:04:ad:73:32:46:f0:ab:e8:81:c9:23:de:08:54:a8:
c8:c6:42:1f:8a:73:72:94:4e:02:07:0e:9e:d2:2d:66:fe:b7:
d6:63:63:72:04:91:e4:f9:2d:01:72:9a:a0:cd:45:47:d7:60:
a0:1b:75:64:c7:6a:f2:4b:04:55:85:65:88:d0:e5:34:dc:d3:
08:13:fd:b9:35:93:df:04:a5:01:c0:ac:20:0a:13:b4:3c:0f:
55:d9:d3:50:fc:dc:2b:97:da:de:ee:8b:5b:21:46:90:3c:de:
2e:83:9f:24:69:48:5c:8b:1c:3c:a8:f0:12:63:6e:4e:10:3d:
99:7f:b9:8d:29:a7:66:10:1b:24:f2:fa:de:a1:cc:e7:37:66:
4a:23:74:5f:7e:79:cd:f5:76:de:42:a3:c8:01:82:11:92:c6:
7d:b3:e6:bb:e5:95:2b:6b:25:9a:73:37:1c:c6:34:d1:08:60:
e5:19:84:42:3a:d1:2b:fb:c5:65:7f:78:4b:01:7c:7c:12:61:
a8:bf:8b:2f:a0:c1:de:11:4a:b2:39:fb:c6:31:4b:ec:43:9f:
fd:a8:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:47:52 2026 by rpki-client