
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
File: ag4WzCqLkctIP0UegTtniul1grA.mft (raw, json)
Hash identifier: g+N2D3PKvc3OUiqkmB5h39WXE9YNMWHRNQsvUKyO0q8=
Subject key identifier: 3D:4E:F9:DA:0D:27:AC:C9:21:FB:41:88:6A:EC:DE:0B:F1:DF:E7:B6
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 01A0C745D94CEB1491B0C7226A73BFA53946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 04:00:38 +0000
Manifest this update: Tue 22 Sep 2026 04:00:38 +0000
Manifest next update: Wed 23 Sep 2026 04:00:38 +0000
Files and hashes: 1: 1-L9_xn5XwFHg99yogQ5P-JRQJno.roa (hash: saknG4EeimO2uKEX00r/busJjcraxx17Sa52KQHrOss=)
2: 1IO7D2ixQ-lvyHRtaxSutQuJrdk.roa (hash: w8VZiMHzBrWoJWSQi1dFm3cARenc5HNcqj8t4FMaUvc=)
3: 1PQllvXnPg1Cq46Iy4Rpg_2dzeE.roa (hash: KYF3xosyzq4vGix6BtHELmM/f2AEyPg2NuKi997fdec=)
4: 82--YWEKcMvIJETSOTv0fBdL6CM.roa (hash: txaVMOY8ninC/G6RFe/UwHhOENX0T290iWUIMYkdnmk=)
5: MHRGHVH_9ryY5YWmrqyOo25Yw-w.roa (hash: p0ZTTiOVdQ6jigzVZJJBkL+3fqMDD1xA2wHogGA9TUQ=)
6: P9YT4wpleippbcH7ySs9yJhewoc.roa (hash: cSxqBMShQEu5xdePejl0TQuouUbtuQWYRC9Of5i3nxw=)
7: PehZN3iXx53NNUUfpGjKtEgbtG0.roa (hash: ZF5FCAasCGxv9d43oiaKd2A5u46kRGpM48JeEUZzsOY=)
8: QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa (hash: oLE/UmjEKWdlluphq/E4JLOUzru3Xt/qp1y2xi32ZuM=)
9: RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa (hash: 1mJogWLp+9JQPWumTmYBS2/tf+nhYhyUXRjcoUUswLw=)
10: RvNLAe_RSP56uzDHYQxY7j2RYDA.roa (hash: 138Cifhmc2WWQk/qLf2plQLxN1qV8R840l4XB+Ds6Qg=)
11: SOdgrNHWpRExOJRc-f9cfWJ4cms.roa (hash: k5GQQCFGnAJdQAMjkz3mMLNhKN0O4TfU790kcOAiuaM=)
12: UqImUVHBq3p8NTSpUZrZaZqeIO0.roa (hash: b0cbtwxFDLQWZmYSn/tfFyO/bdt5kbBtbbVLEmIteZY=)
13: V4QNov5aUVl0kjPoDbGXWUTFf3c.roa (hash: RWwYnwshC1K5yWsQ6bl0FWPq+jSiHD0KLQ+6u/grLQo=)
14: ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa (hash: CES/AfhEQn2U94y88HLeLxHi0QZ8IQSspRKZIOPxVHU=)
15: ag4WzCqLkctIP0UegTtniul1grA.crl (hash: kClbVdIhGpgw7vqDXSbrbPC4f9AyAgye54s4bGXhfsg=)
16: hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa (hash: AW1B3GU+CHp2dLnlTMaUnh9So+6olkFuGvAvVFpBybo=)
17: nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa (hash: kUW/q0E+5ap6XJqy3o0pzyvq0pN9N7639FqeoHqln7w=)
18: vTCE3_WjlZWEHiUifn-Z3rZn-3g.roa (hash: k0eIUOFWrIqLB7Ha+lzX5IKld1csxUVRrPdDqLcQHmQ=)
19: yde-3lSgZiRr0HU1KS1x7njAoeA.roa (hash: eSGD7O7kwdqNPAeSE2PmhfFGu0OTxONTMV1cXFqWo/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:45:d9:4c:eb:14:91:b0:c7:22:6a:73:bf:a5:39:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Sep 22 04:00:38 2026 GMT
Not After : Sep 23 04:00:38 2026 GMT
Subject: CN=3d4ef9da0d27acc921fb41886aecde0bf1dfe7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:98:cb:e5:61:cd:8e:12:98:70:15:2c:08:
d4:db:21:43:cd:5d:a2:8e:91:31:3e:44:2b:19:ba:
2c:f5:29:ad:5f:f8:2d:96:e8:bd:d9:d1:56:e0:bf:
30:22:5c:c6:b1:60:2d:f0:b2:85:d3:1a:8a:b1:b4:
cc:d6:1c:32:ed:10:b2:bc:67:b6:ce:01:19:72:4e:
3f:a3:e1:8d:82:bb:6f:ed:fb:e5:b8:ca:de:35:3d:
0e:c1:53:c0:24:78:08:75:7b:f8:a8:05:55:ef:21:
b1:52:89:84:61:84:a4:e0:be:09:d8:56:f2:e1:53:
d7:4c:b1:6d:95:e6:c7:ba:89:75:ff:f7:db:73:f3:
fb:7c:97:52:21:97:c2:37:8d:31:f4:39:05:a5:0d:
ca:7e:b5:de:fc:0e:3d:21:5c:d7:b2:a4:af:9e:97:
ca:3d:c4:61:d3:e6:bf:30:08:05:f8:b2:d7:f1:72:
92:2e:ab:09:20:9d:6e:7b:b7:b6:41:26:40:c1:02:
c0:0d:42:61:bf:46:b6:8d:5c:b0:37:d9:d7:86:86:
c9:8c:60:cb:4e:0d:7e:50:ca:04:48:e1:ed:b3:cc:
9e:dc:fa:c8:bc:4b:91:39:df:ec:cf:30:26:b7:0a:
ce:91:0d:28:13:3e:a7:09:1a:fe:6c:f2:15:5d:09:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:F9:DA:0D:27:AC:C9:21:FB:41:88:6A:EC:DE:0B:F1:DF:E7:B6
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cd:fd:62:43:f5:45:96:0d:14:e5:fd:58:c6:f0:57:93:3a:
e2:55:47:6d:69:49:88:f0:16:fd:f9:2a:65:1c:83:7f:d1:2f:
c6:d0:c3:65:32:a0:85:dd:7e:aa:80:42:75:1a:71:21:49:6f:
1b:a5:05:6a:19:b9:1d:56:5e:19:76:d7:34:13:56:fd:b7:b6:
d7:69:a5:4b:c6:5f:34:fd:d6:d7:88:9e:35:21:84:34:11:68:
c0:b6:05:72:b9:21:0b:e6:06:16:d7:7a:3d:06:54:2d:a0:d1:
27:1f:96:b4:8d:a2:57:43:27:21:3d:72:74:19:d2:94:51:ae:
63:11:99:c4:72:68:ca:d1:63:86:6a:2f:e3:0a:76:90:02:e7:
ed:7a:44:db:a3:78:03:28:3d:e3:c5:da:19:2f:88:d2:af:95:
89:59:d5:55:d7:83:9a:41:d8:00:f8:49:4c:95:41:2c:b2:fb:
e8:40:2b:bf:b8:80:c6:97:19:71:ec:dd:a7:3f:36:ac:cb:24:
69:d5:84:08:db:43:a1:62:f0:34:c2:5a:a0:9a:c9:d4:08:b3:
88:f5:05:09:ef:55:a4:5a:5b:fc:37:3e:d7:97:b3:3d:37:6b:
1d:da:59:51:f6:22:b9:ed:77:f2:2b:95:49:e9:6a:c1:8f:3f:
a0:d0:da:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:13:02 2026 by rpki-client