Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: zScgtkZk8NjlxwJQzbe42stAPGKwlHj5TxBI+4Gt7UM=
Subject key identifier: 0C:A5:31:11:52:4A:C5:96:01:CF:49:BB:2A:9B:E0:9B:C0:49:92:93
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 019CABD90BDAD47711E432B9ECE241871892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0B3B
Signing time: Mon 02 Mar 2026 00:00:54 +0000
Manifest this update: Mon 02 Mar 2026 00:00:54 +0000
Manifest next update: Tue 03 Mar 2026 00:00:54 +0000
Files and hashes: 1: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: JtgEJqMSt8h6ElF6S+ggdwcRnvQOzgRe0F0ixkvlPW8=)
2: hTRi4HtTpCkolgUuQDDvPG_VyIs.roa (hash: 0FlUN5CzPW1X1y6ikdRfKAaNuwCJRvtbLFmH3Xzp8cI=)
3: wDgy_dfCRG9cDmytDHPeiO1ky38.roa (hash: zBbuMIpRBO8AxXuh3KIVCJ9BZ6863IbMys75IrzppoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:0b:da:d4:77:11:e4:32:b9:ec:e2:41:87:18:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Mar 2 00:00:54 2026 GMT
Not After : Mar 3 00:00:54 2026 GMT
Subject: CN=0ca53111524ac59601cf49bb2a9be09bc0499293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:ea:4d:38:c0:79:fb:12:73:47:cd:be:7b:
15:1a:a3:48:df:e9:22:66:ca:35:c7:da:f1:b0:18:
d3:46:a3:68:28:a5:76:ca:b2:e6:cc:1d:d8:9a:01:
36:a7:ea:07:28:46:f8:f2:ca:88:17:51:04:a3:15:
4c:e8:69:f1:7f:6e:7f:4c:ff:63:ba:30:65:cd:bb:
4c:b8:f6:bb:19:ff:73:50:46:5e:86:e7:66:58:89:
63:5a:24:33:c2:97:26:b9:4d:f4:45:c8:c7:f0:b9:
30:4d:f8:75:51:54:6c:cf:d5:23:81:08:85:c7:de:
93:ef:e0:00:78:2f:f1:c3:9b:7d:d9:f2:8a:8d:1b:
06:e1:9c:df:cf:5f:8d:e7:5c:d2:8c:dd:e6:ae:28:
53:f3:44:d0:77:6d:43:f3:5f:f3:84:1f:53:66:80:
e8:5e:35:ae:60:c7:69:c1:2f:81:58:29:98:59:72:
4a:1e:db:d1:46:0b:97:9b:1a:8d:f0:3a:97:6d:e3:
d9:1a:be:a3:1d:56:dc:76:93:ef:c2:e3:89:fd:08:
f1:3a:c0:61:27:7e:ed:92:19:ba:95:4f:81:4c:c3:
60:70:14:34:37:a0:fa:72:3f:1b:59:fa:73:7c:91:
79:da:3c:28:a3:ef:c0:27:91:e8:66:b4:ed:76:4d:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A5:31:11:52:4A:C5:96:01:CF:49:BB:2A:9B:E0:9B:C0:49:92:93
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b0:23:e3:b5:ca:94:02:56:66:64:ee:5c:4b:20:48:9c:7b:
6b:c9:7d:0b:a3:06:d2:30:09:b1:6a:a5:89:f9:51:19:cd:1e:
5d:68:b3:76:ea:83:c4:03:29:ce:c8:5f:df:e1:bf:30:35:30:
c2:1b:3c:3b:fa:b1:50:a4:9e:75:00:64:53:7c:e1:cb:9e:95:
75:a9:22:dc:8d:6a:9a:94:e3:2f:81:20:19:d4:50:66:8e:1f:
a5:94:53:c9:b2:84:bf:70:49:ea:9a:33:92:3a:f4:41:ff:5c:
a5:45:96:24:31:10:28:dc:20:67:42:7b:b1:5e:48:cd:1b:a6:
2c:f9:1a:e7:fa:f8:b6:d6:33:69:6f:16:00:a7:1f:99:02:e8:
97:30:52:27:9f:a3:8e:15:05:89:57:d6:17:6c:1a:22:b3:54:
a8:2a:a3:bf:51:ff:9d:36:9c:66:ff:3b:0a:b0:41:39:31:7b:
ae:93:85:95:44:e0:53:7f:a5:8b:a2:d3:34:5f:ff:a7:83:82:
a6:29:f7:32:aa:33:39:ae:d2:b9:f5:26:15:b9:9c:75:33:9d:
10:68:73:7c:d4:53:b3:98:1c:bb:b5:91:dd:5b:f8:7b:e2:e1:
ad:df:ba:d9:6f:11:78:47:de:ff:f4:ac:5b:bc:26:e2:f1:c0:
f6:5c:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:02 2026 by rpki-client