Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: stUuw0ys9Z07zRcRYzMdgoAiF0rRZhNHcCNKthi9MP4=
Subject key identifier: BA:0B:57:AA:1E:CB:26:99:04:BD:47:77:67:7A:BD:67:27:F3:59:E8
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 019ED42AE2B445DBF29A56C3B7EF88ED73AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0C59
Signing time: Wed 17 Jun 2026 06:00:40 +0000
Manifest this update: Wed 17 Jun 2026 06:00:40 +0000
Manifest next update: Thu 18 Jun 2026 06:00:40 +0000
Files and hashes: 1: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: R5UVTGcCY4dqNL2QsiTFNQOTyquCVkjCLF9mf/OWHcM=)
2: hTRi4HtTpCkolgUuQDDvPG_VyIs.roa (hash: 0FlUN5CzPW1X1y6ikdRfKAaNuwCJRvtbLFmH3Xzp8cI=)
3: wDgy_dfCRG9cDmytDHPeiO1ky38.roa (hash: zBbuMIpRBO8AxXuh3KIVCJ9BZ6863IbMys75IrzppoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2a:e2:b4:45:db:f2:9a:56:c3:b7:ef:88:ed:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Jun 17 06:00:40 2026 GMT
Not After : Jun 18 06:00:40 2026 GMT
Subject: CN=ba0b57aa1ecb269904bd4777677abd6727f359e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:78:95:b9:22:c0:dd:7d:71:28:a5:06:98:
94:de:1c:c2:98:9c:1f:9c:f7:66:0a:6f:18:8d:0f:
0e:c4:89:76:84:e7:4b:83:11:31:76:3f:a6:d4:ac:
7c:d9:4f:77:cb:59:61:66:24:09:62:eb:d6:0a:f6:
0a:eb:00:63:9c:be:0b:5b:0c:2d:11:29:b2:25:05:
24:73:a6:b4:c3:f5:2e:38:d9:1e:cc:ba:56:94:a7:
51:b3:4e:5d:71:51:29:4d:95:43:49:4b:89:72:2d:
c8:6c:c2:97:42:5a:22:5b:79:16:0e:87:bb:1b:ae:
43:f7:99:ca:69:c9:17:34:c0:bc:93:ae:64:a8:56:
1f:ce:cf:d0:bb:0e:10:c3:ea:a9:9b:97:46:dc:5b:
38:0a:fd:db:b4:40:89:48:4a:4b:1d:0a:b4:a6:bc:
1c:02:f8:9f:8b:72:76:e8:b3:32:79:86:f3:57:ff:
45:b8:38:ce:22:6b:37:8d:51:ce:d6:c7:ca:a9:39:
84:08:13:31:f9:df:b4:fb:7a:04:1f:48:85:43:8f:
a8:82:b5:f4:4d:8b:a4:26:1e:2f:b3:5f:f9:3d:cb:
bc:c0:a6:52:69:03:dd:f5:3d:a3:52:a1:24:27:53:
91:ae:5d:c2:01:9c:dc:e2:cd:c7:af:c4:4b:96:93:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:57:AA:1E:CB:26:99:04:BD:47:77:67:7A:BD:67:27:F3:59:E8
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:96:c6:e4:53:e9:58:47:98:32:a4:34:26:d3:b5:cf:c3:46:
35:b4:4f:c0:b8:00:32:3c:e3:c7:5e:12:0b:6f:ea:4f:2e:cc:
82:1c:93:71:93:55:db:f9:73:a1:04:ae:e5:b2:7a:6f:e8:5d:
af:25:0f:59:ba:45:18:12:ba:b9:b2:9d:84:d3:d3:94:fd:1a:
18:48:74:19:c7:e7:dc:c5:66:6b:c3:2c:65:7e:53:3e:2c:ff:
50:cd:07:d0:bd:81:f2:2c:d9:86:df:21:a0:3f:57:4d:f2:d7:
2d:21:55:57:60:4c:e3:be:ae:a1:d9:97:df:0d:a3:76:c9:ee:
ec:18:9a:04:aa:1b:04:d6:f6:3e:1d:8f:4d:6b:f2:3a:3c:11:
2c:40:f9:83:d3:3b:49:3f:62:cd:f7:c0:05:59:51:a7:34:bb:
dc:72:8b:48:10:7a:6f:c7:42:d7:2d:6d:a2:85:b6:a2:1a:06:
20:69:12:0a:10:1f:17:1a:ae:df:fc:38:28:f9:a3:f5:e7:50:
d8:8b:8f:f1:b1:7f:7b:f6:1c:ee:1d:3f:c0:4b:81:41:bf:cc:
6f:20:c6:62:5a:94:d1:f3:66:28:ec:01:06:ff:10:75:21:4d:
a8:f5:89:39:94:3c:a4:d9:11:8f:4c:b2:3d:e0:10:26:fe:85:
3e:c0:85:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:50 2026 by rpki-client