Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: jT9b7FgiezwYsKbTXt9pn8q/7Q2+9kUnOahZohVY/6w=
Subject key identifier: 50:91:8B:20:5B:FC:FF:0D:77:08:F3:CB:F2:AE:94:39:97:E0:40:F4
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 019D9962C954789895B746C5E50446A80DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0BB6
Signing time: Fri 17 Apr 2026 03:01:21 +0000
Manifest this update: Fri 17 Apr 2026 03:01:21 +0000
Manifest next update: Sat 18 Apr 2026 03:01:21 +0000
Files and hashes: 1: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: PYJJhNVJAHVXVmQ/bWZXYDkucguMBmiwxcv/jvyImuw=)
2: hTRi4HtTpCkolgUuQDDvPG_VyIs.roa (hash: 0FlUN5CzPW1X1y6ikdRfKAaNuwCJRvtbLFmH3Xzp8cI=)
3: wDgy_dfCRG9cDmytDHPeiO1ky38.roa (hash: zBbuMIpRBO8AxXuh3KIVCJ9BZ6863IbMys75IrzppoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c9:54:78:98:95:b7:46:c5:e5:04:46:a8:0d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Apr 17 03:01:21 2026 GMT
Not After : Apr 18 03:01:21 2026 GMT
Subject: CN=50918b205bfcff0d7708f3cbf2ae943997e040f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:be:4c:87:3c:59:8a:fa:45:51:c2:f2:79:58:
3b:e1:84:13:0d:8d:15:d5:31:65:4b:0c:88:3a:21:
d3:90:0a:0e:39:63:7a:15:ac:7c:66:1d:b6:2f:0d:
39:e2:3a:f5:3c:a8:de:01:68:67:c3:20:fc:ab:be:
bf:c6:25:34:9b:8d:f6:69:35:56:5e:6b:26:01:8a:
1e:86:e9:77:ee:0b:b9:10:3c:62:85:56:46:4f:5d:
4f:56:21:83:a5:d7:57:2a:94:0f:a1:14:70:a8:30:
cf:b7:f3:74:7e:1d:4f:90:a6:61:d5:9b:1f:76:d7:
ee:c6:50:a4:22:68:2e:ca:95:38:f1:ec:1c:23:0e:
37:bc:f9:01:bc:54:a9:00:1b:ab:b1:92:1f:68:10:
bf:8a:a2:c5:52:5b:75:ec:56:e2:06:75:a7:91:45:
65:04:8b:91:bc:b6:7b:ba:42:12:e2:4c:94:9f:3b:
6e:03:49:c9:1b:2c:f5:96:be:7e:40:b2:cb:b0:0b:
ea:d1:f0:75:2b:2c:c5:78:c7:60:6a:75:7c:06:f0:
92:f0:2d:c9:d1:db:d8:4d:80:64:52:5a:1a:4a:a7:
1c:dd:3b:fb:78:b2:35:cf:c1:f1:b7:67:7a:35:29:
81:2d:6f:5e:fc:ff:15:18:51:9b:48:1d:7b:d6:fd:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:8B:20:5B:FC:FF:0D:77:08:F3:CB:F2:AE:94:39:97:E0:40:F4
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5e:0b:d6:b5:22:6f:81:25:a0:e7:ed:40:7f:1b:9e:19:0b:
66:df:1f:42:b5:4b:d3:36:2a:7c:48:1b:b7:a1:41:83:53:a2:
71:7d:44:77:45:50:58:0d:ea:1a:8b:b2:f1:85:97:c0:54:6d:
94:78:80:0d:bc:4f:96:fd:24:3c:94:ea:e0:ba:47:eb:ff:47:
ac:33:df:50:f9:a9:fe:21:16:ff:0a:a2:04:39:0d:2f:b7:c7:
44:d9:e7:56:e5:d6:b9:31:92:1b:76:da:ff:b5:7f:b0:a0:e4:
70:ed:1e:f9:ef:02:26:58:b1:7f:b2:59:19:ef:b8:39:cb:f7:
78:e9:dc:01:14:14:7e:e3:8c:c1:51:7a:02:39:76:4b:8f:84:
98:92:14:79:e6:dd:6f:7b:dc:2a:e7:d0:ab:69:20:17:27:c6:
21:56:85:bd:a4:57:cf:9f:3e:5e:07:50:0c:c3:3d:e6:ce:77:
75:ad:e0:49:47:e4:87:07:b1:8a:64:4c:0f:35:d7:08:90:5d:
c0:52:ea:71:58:25:80:3e:cd:79:2c:10:88:db:78:6a:62:55:
a2:c1:36:2e:ca:94:6f:83:a5:ff:d9:cb:75:a3:f9:5a:5c:79:
a3:86:0d:4a:34:42:2b:63:40:ed:35:e5:1d:ab:6b:1d:f7:d1:
3a:dc:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:27 2026 by rpki-client