Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: Hgq3/DvDlnTsedchyCI3PHHFiEgMsq1u4GWeu+8hpOE=
Subject key identifier: 50:A3:24:8E:8A:AB:6E:74:D3:7A:4E:9D:CD:26:B8:CD:07:E6:67:5E
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019CAAC681CB8B86466AB8DA174BB8BE8BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0FFD
Signing time: Sun 01 Mar 2026 19:01:01 +0000
Manifest this update: Sun 01 Mar 2026 19:01:01 +0000
Manifest next update: Mon 02 Mar 2026 19:01:01 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: jUEoNkczpq7cYRtxFo2KcOXA0UAMD8alNWl0b8JFEJs=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:81:cb:8b:86:46:6a:b8:da:17:4b:b8:be:8b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Mar 1 19:01:01 2026 GMT
Not After : Mar 2 19:01:01 2026 GMT
Subject: CN=50a3248e8aab6e74d37a4e9dcd26b8cd07e6675e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:98:49:7d:11:a4:b0:31:56:e0:86:4d:27:
dd:55:ef:a2:6b:02:e7:cb:c6:fc:97:85:b4:2d:61:
8a:41:6f:26:c4:fb:ca:66:24:f6:7b:9e:ab:ca:26:
ff:19:6e:16:14:b2:f6:06:78:e8:55:94:dd:b7:22:
c3:e3:6f:e3:03:d7:1b:3f:cf:b2:e0:f2:a1:8c:5f:
26:21:da:5b:da:57:74:c4:d6:0a:8c:1e:e8:a1:ef:
4f:12:23:7b:14:1a:a7:e1:cc:ad:23:c2:5f:5f:d8:
59:76:2d:20:be:de:00:81:bb:88:2f:70:e4:6f:1c:
7f:87:c0:ee:46:98:bc:72:eb:a7:05:e1:5f:6a:3e:
e5:6e:cf:d0:d5:fc:79:25:4d:f6:51:e1:79:26:db:
48:4a:52:44:1b:22:dd:31:b5:f3:1d:88:62:db:56:
41:0a:a4:7d:e3:6a:c3:4a:40:44:4f:0c:f2:24:a4:
3b:12:d4:a7:50:4c:41:f7:26:fa:4d:b0:63:48:d1:
25:b7:3f:9d:5e:9d:86:b0:60:ba:66:92:c6:bf:5e:
48:a8:df:5f:c0:40:3a:e4:8c:43:79:f3:3c:69:fa:
51:e1:e8:a6:ad:a0:0b:a4:2c:4f:b3:2b:54:3a:8e:
77:7e:9b:c8:80:60:b0:74:fb:71:ff:67:c3:94:7b:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:24:8E:8A:AB:6E:74:D3:7A:4E:9D:CD:26:B8:CD:07:E6:67:5E
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b8:3f:5c:71:0a:50:58:95:1a:81:b5:70:c4:6f:27:37:64:
e7:31:8d:a9:03:95:41:4e:ab:45:eb:30:5c:2b:f5:c2:55:16:
2b:a2:f8:fd:88:88:b9:72:9c:81:b2:49:6f:45:4e:7d:ed:ab:
a9:29:72:bd:5a:4f:22:58:8b:6a:6e:ab:45:b3:d3:c5:1c:0e:
22:88:3b:d2:a3:68:29:0c:58:7b:0d:41:39:02:48:af:4f:83:
8f:44:f5:22:dc:d0:3a:4e:43:15:6c:df:c2:c6:1d:c6:3d:d4:
d5:4e:85:e2:ff:3b:0c:93:ce:8a:b2:58:66:4b:e4:58:6f:ec:
4f:66:6a:d9:2a:39:23:ed:e8:fc:4b:84:29:d1:b2:e8:07:9d:
5c:16:8b:24:da:83:ee:90:ee:c4:52:24:97:07:8f:45:cf:47:
ff:c6:85:0c:20:e8:20:4a:a2:b3:b1:94:55:4f:be:c2:ea:6f:
6e:7f:d6:a1:41:6d:24:2c:51:9a:9a:7e:91:d3:7d:b2:b8:41:
12:c1:61:77:d2:37:a9:f4:5d:cd:5c:8b:d8:b6:c2:15:42:0e:
6e:c7:8c:05:9a:56:bf:11:02:1f:c5:b1:2b:e5:fb:d3:18:e4:
34:fd:5b:6a:a5:5a:f7:2a:64:fc:d4:a7:95:42:62:23:30:96:
20:d4:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:11 2026 by rpki-client