Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier: C58a9pS5D5+lfbl0TYS0zV8rNrt+kmXVsnb/UcqqNiY=
Subject key identifier: 59:C1:F3:01:7C:01:20:A9:EC:04:43:F9:83:7B:B7:12:1F:81:AB:5C
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 019EBE7FD998A2AE751C427D0EE26051AACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number: 13C9
Signing time: Sat 13 Jun 2026 01:01:50 +0000
Manifest this update: Sat 13 Jun 2026 01:01:50 +0000
Manifest next update: Sun 14 Jun 2026 01:01:50 +0000
Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: L+0oSgTzFApbhLlQtJwE2XESgN7y7hWN4Ivvuh0nbA4=)
2: ePG6DY0S1g_n3-izjvFmaMzFYtA.roa (hash: 4EtCOL5WPsRvbWzQ4J4E2mOMMK8/QB99r0YCzdv5MzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:d9:98:a2:ae:75:1c:42:7d:0e:e2:60:51:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Jun 13 01:01:50 2026 GMT
Not After : Jun 14 01:01:50 2026 GMT
Subject: CN=59c1f3017c0120a9ec0443f9837bb7121f81ab5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:37:8a:60:5d:8b:d4:ea:50:60:ff:a8:e6:
41:d5:94:37:53:ca:08:63:51:e8:00:33:52:fc:bc:
47:a6:0f:b3:fd:9d:a1:a4:f6:be:a4:e0:45:51:9c:
36:6f:8a:84:ef:6a:57:53:09:3f:e3:04:62:e1:0e:
ec:91:a8:58:85:9a:cb:ea:9f:93:5b:33:96:47:d6:
aa:f5:3f:11:12:39:ca:5e:1e:98:e1:82:39:b5:61:
f3:65:9d:25:7b:c1:97:a5:79:55:18:f4:91:a2:aa:
fe:99:d9:0c:71:51:a9:29:e8:15:4c:2d:c3:df:78:
6c:8a:d7:55:f1:f4:39:15:d4:4f:da:de:c7:06:cf:
70:15:69:61:b0:40:02:ed:3f:af:db:e5:d6:52:53:
fb:5f:60:58:94:7c:c6:08:73:8e:a8:e6:7a:13:7a:
ec:a4:02:dd:c5:37:7a:60:3d:67:c8:99:f9:53:94:
59:bd:61:45:fb:bc:12:3b:69:db:23:f3:5e:53:37:
2c:4b:a8:f4:36:79:3a:6b:6e:a2:f1:df:6f:c6:e3:
f8:b0:56:3a:9f:d7:76:d0:b2:9b:80:dd:9a:d3:20:
2d:ae:c0:a7:da:a4:10:d0:ef:62:0a:0d:16:43:d9:
ba:f9:ff:6f:95:3f:b7:71:78:ad:0d:89:c8:9b:2a:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C1:F3:01:7C:01:20:A9:EC:04:43:F9:83:7B:B7:12:1F:81:AB:5C
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:98:3e:d8:67:e1:30:ee:39:e5:c1:66:ce:5c:8b:4e:59:d6:
bc:55:ed:b9:23:64:83:a0:af:f5:50:0b:3a:77:b0:6b:10:a9:
92:7c:a8:28:0d:b4:f2:ca:69:0e:dd:64:ce:82:e5:14:25:20:
bd:c2:2c:eb:5e:71:dc:15:c4:53:99:4d:29:e2:ea:e8:92:c1:
a8:65:7b:e8:fc:00:9a:af:5b:c6:2c:36:b4:cc:20:05:a9:f8:
9b:c8:d8:1c:ed:f7:be:b3:fa:cc:32:fa:bf:fd:f3:cf:90:aa:
db:85:c9:71:71:0c:51:7f:0e:91:33:cc:8a:e1:7a:69:af:9b:
7f:78:54:a1:59:a3:2e:30:dc:5d:56:c0:ca:8a:41:fe:f0:b2:
f0:15:27:94:24:a5:9d:f2:72:bf:96:b0:6a:c5:b6:fe:c9:58:
f5:d0:0f:46:3b:b7:38:8d:52:18:d6:d8:c5:bb:36:6e:c2:0d:
72:a4:c3:b7:cc:a8:1b:00:69:b2:d4:ed:f0:c5:81:bd:68:1f:
90:af:68:bc:c7:b4:ed:2b:70:11:a9:ff:d2:cf:81:86:95:d7:
a7:26:b7:dc:dd:9f:2e:99:6e:ad:80:5b:18:3a:b4:6d:ea:62:
b8:64:8d:fd:30:57:2e:9f:ce:26:99:27:c5:73:f7:69:47:0d:
06:73:41:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f9mYoq51HEJ9DuJgUarLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMDM2MTZjYTJmOWFlZmE3MGMzOTE0Y2NlOTBkY2UwOTcw
NmNmYmIwHhcNMjYwNjEzMDEwMTUwWhcNMjYwNjE0MDEwMTUwWjAzMTEwLwYDVQQD
Eyg1OWMxZjMwMTdjMDEyMGE5ZWMwNDQzZjk4MzdiYjcxMjFmODFhYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJw3imBdi9TqUGD/qOZB1ZQ3U8oI
Y1HoADNS/LxHpg+z/Z2hpPa+pOBFUZw2b4qE72pXUwk/4wRi4Q7skahYhZrL6p+T
WzOWR9aq9T8REjnKXh6Y4YI5tWHzZZ0le8GXpXlVGPSRoqr+mdkMcVGpKegVTC3D
33hsitdV8fQ5FdRP2t7HBs9wFWlhsEAC7T+v2+XWUlP7X2BYlHzGCHOOqOZ6E3rs
pALdxTd6YD1nyJn5U5RZvWFF+7wSO2nbI/NeUzcsS6j0Nnk6a26i8d9vxuP4sFY6
n9d20LKbgN2a0yAtrsCn2qQQ0O9iCg0WQ9m6+f9vlT+3cXitDYnImypHUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnB8wF8ASCp7ARD+YN7txIfgatcMB8GA1UdIwQY
MBaAFAIDYWyi+a76cMORTM6Q3OCXBs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEt
Yzg3Y2E5ZjJiOTVmLzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEtYzg3Y2E5ZjJiOTVm
LzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5g+2Gfh
MO455cFmzlyLTlnWvFXtuSNkg6Cv9VALOnewaxCpknyoKA208sppDt1kzoLlFCUg
vcIs615x3BXEU5lNKeLq6JLBqGV76PwAmq9bxiw2tMwgBan4m8jYHO33vrP6zDL6
v/3zz5Cq24XJcXEMUX8OkTPMiuF6aa+bf3hUoVmjLjDcXVbAyopB/vCy8BUnlCSl
nfJyv5awasW2/slY9dAPRju3OI1SGNbYxbs2bsINcqTDt8yoGwBpstTt8MWBvWgf
kK9ovMe07StwEan/0s+BhpXXpya33N2fLplurYBbGDq0bepiuGSN/TBXLp/OJpkn
xXP3aUcNBnNBLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:40 2026 by rpki-client