Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier: K1FBWPRpGvXAPb0qJ1ksXV2qY2gCmycIWISbTHMrabg=
Subject key identifier: 60:13:A0:3A:73:5F:A0:32:2A:1C:21:DA:F4:B6:17:2E:CE:BA:01:39
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 019FAA19C0F23A00EB0A9E2B8173DC87D024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number: 1443
Signing time: Tue 28 Jul 2026 19:00:42 +0000
Manifest this update: Tue 28 Jul 2026 19:00:42 +0000
Manifest next update: Wed 29 Jul 2026 19:00:42 +0000
Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: 9pd33GB28fk2jg5BkemqUB7ynkG97L/ZkthEzVWOjbc=)
2: ePG6DY0S1g_n3-izjvFmaMzFYtA.roa (hash: 4EtCOL5WPsRvbWzQ4J4E2mOMMK8/QB99r0YCzdv5MzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:c0:f2:3a:00:eb:0a:9e:2b:81:73:dc:87:d0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Jul 28 19:00:42 2026 GMT
Not After : Jul 29 19:00:42 2026 GMT
Subject: CN=6013a03a735fa0322a1c21daf4b6172eceba0139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:65:76:86:ff:e0:ee:92:31:3b:b6:98:90:
9a:0b:ba:a9:f2:13:35:83:29:a5:9f:7b:ee:35:46:
4e:0c:a7:b6:d1:fe:4b:82:3e:1a:c2:a5:f8:6a:be:
95:ed:1f:7b:ca:76:52:b4:d1:47:f0:c5:f5:31:f8:
19:18:45:fb:f2:30:a7:e0:88:29:a1:3e:fa:ca:5d:
a4:4f:03:65:dd:9e:8e:9f:17:bb:28:fc:4b:a4:fa:
c4:07:a2:8e:02:0c:73:71:34:62:30:b7:c3:2b:1b:
e3:a2:02:35:18:d0:b2:72:1a:08:4d:ae:59:f1:e4:
67:74:11:8c:33:2c:2b:47:5b:86:0a:09:82:d2:0f:
6e:b7:6f:22:0a:5e:7b:f3:30:ca:e5:8d:d4:3f:9d:
c4:17:d3:07:e9:e0:d3:f6:16:76:e9:24:22:f2:9e:
92:6f:cc:18:99:6d:e1:8f:f2:bc:14:be:f1:3e:ec:
f8:4d:d7:64:f2:26:83:19:ce:65:b1:ae:e2:24:17:
d3:26:64:59:24:09:27:f7:6b:67:f4:bd:05:f5:3a:
af:3b:5f:27:0d:8a:6e:18:c9:10:2e:d1:29:2f:1e:
75:6d:6d:46:9f:5e:7c:51:0d:43:f9:c4:a9:e1:62:
1a:ea:16:16:17:08:85:66:eb:1a:4e:4e:93:ed:c7:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:13:A0:3A:73:5F:A0:32:2A:1C:21:DA:F4:B6:17:2E:CE:BA:01:39
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b5:71:5a:64:cf:cd:42:bf:af:a5:a8:14:56:d0:fa:b4:13:
11:df:00:8c:1a:49:9b:b9:aa:d7:9c:64:89:28:84:2d:b8:08:
02:cc:96:73:89:dd:69:50:ba:b3:f3:52:d7:67:9a:fb:b4:48:
41:3d:8f:59:ef:cd:e5:76:76:d5:7c:05:41:f6:5a:e9:7d:de:
61:7c:58:68:b8:99:a8:01:b0:05:2a:c6:7b:f9:69:99:c2:0a:
30:0d:df:5c:1b:68:a3:72:f2:94:4f:f9:73:52:e4:cd:2b:0d:
be:46:0b:fe:77:d2:c2:1e:03:7c:ed:45:0c:0c:3c:00:8d:bf:
99:01:6e:1b:e7:e7:c4:26:6a:da:98:0b:fc:e0:79:35:09:99:
cd:90:d2:ef:03:6e:36:55:c9:e3:b1:c6:80:85:f4:ef:cf:56:
63:23:72:ee:0b:ea:d6:bd:19:cd:56:ed:5c:97:55:f7:a5:54:
a5:b0:29:d8:9a:fd:11:27:96:d2:13:ba:2d:17:f1:b8:2a:3a:
14:9f:54:e1:4f:b8:8a:b4:4f:d4:83:27:ed:a2:c8:ad:9e:5d:
db:9b:aa:85:18:ee:0c:37:eb:f2:07:19:13:ee:a4:82:ef:3d:
d1:ab:40:3c:9d:43:e1:6e:6f:26:eb:4f:bb:fe:00:cb:ce:c3:
41:03:49:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:39 2026 by rpki-client