Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: ZLnQeLaTJQYUDjAkKUFDYqzAs/PL74CSzzvLb4RRkrU=
Subject key identifier: 5B:87:37:E3:19:BA:AC:44:DB:49:37:13:76:94:64:A7:91:E3:15:40
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019D9A3DE8783E2E1610D6956DC3323CA029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 1079
Signing time: Fri 17 Apr 2026 07:00:41 +0000
Manifest this update: Fri 17 Apr 2026 07:00:41 +0000
Manifest next update: Sat 18 Apr 2026 07:00:41 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: d1busX9Ms5DCMc+CcvvrmaTPvTQhFXI3KPGUS69bLiw=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e8:78:3e:2e:16:10:d6:95:6d:c3:32:3c:a0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Apr 17 07:00:41 2026 GMT
Not After : Apr 18 07:00:41 2026 GMT
Subject: CN=5b8737e319baac44db493713769464a791e31540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:64:cc:19:17:0a:74:c6:18:73:0c:5d:99:
d9:8d:4d:d2:68:60:9d:3c:a3:d6:8b:4c:53:da:df:
7e:a4:ad:ed:88:03:6c:d5:3e:a7:c5:e1:64:e3:ce:
2b:c8:18:ca:f0:18:45:78:5a:08:ad:b0:c1:5e:f5:
99:0f:05:25:66:6b:1e:4c:a4:11:77:c2:f4:f4:57:
58:e8:01:26:74:1d:04:4f:08:e7:15:06:0a:53:ec:
8c:8d:9c:cd:e4:b0:99:6d:84:c8:65:d6:cd:5d:d0:
cc:43:15:ec:be:50:d1:5e:f9:7a:dd:1a:fc:57:72:
94:52:a5:45:be:2c:7c:6c:cd:54:33:bc:02:4c:df:
d9:59:c4:c4:d5:86:3a:6c:49:40:c7:6e:66:90:c3:
a9:6b:c5:dd:a6:18:b7:b6:d5:9e:69:88:a3:1c:3e:
c2:7f:f4:d2:9f:28:a1:23:7d:84:37:56:f6:b9:c3:
f4:c1:88:8d:33:78:1f:4d:b2:a7:03:11:ad:3b:98:
ed:bb:5b:a4:39:4f:55:6e:31:b5:8c:e0:c7:e1:8e:
7d:85:8d:6c:ec:c1:a9:e4:92:87:1b:c0:e3:f0:c7:
b6:09:a3:41:8b:00:7e:41:0b:b5:6c:c3:49:9a:bf:
ba:5a:ed:1f:fb:94:36:1d:ad:9c:d5:fe:73:80:55:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:37:E3:19:BA:AC:44:DB:49:37:13:76:94:64:A7:91:E3:15:40
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:b8:5f:37:64:3e:cd:78:48:0f:60:18:b9:a5:3e:6a:77:5f:
99:e8:ce:a0:f5:8b:71:09:e8:61:d6:78:d5:45:67:3e:65:d2:
ee:3b:4d:91:72:d6:95:cb:36:58:b2:4a:d5:84:3a:02:bf:c6:
57:03:f3:2e:f7:aa:50:f8:91:9b:15:50:8d:18:a2:9b:4a:8e:
f1:3b:af:22:3b:4d:7c:b8:3d:dd:6d:dc:d7:27:f5:c1:95:94:
7e:74:60:1d:b7:3f:24:e3:48:d4:e8:0a:4b:2e:96:41:36:95:
33:69:b1:52:28:49:62:31:06:99:0b:99:d9:c9:be:fb:45:c9:
cb:e0:54:5c:df:e5:ec:df:74:a7:29:7c:46:e9:84:cf:24:21:
58:da:88:c9:52:b3:71:f6:01:33:26:8a:cc:31:bb:11:db:a6:
f0:4e:30:39:d7:a9:62:fd:4a:06:98:86:02:d9:8d:da:33:ed:
e6:dc:28:1c:b9:65:94:e7:2e:c2:cd:e0:26:1c:21:54:4b:24:
5d:3f:e6:78:c2:9b:cc:46:99:6c:5e:c7:a0:a0:26:18:4c:4e:
5f:31:2f:40:10:a2:ef:ec:a9:bf:24:7b:ad:29:a4:55:de:bf:
3d:16:6f:34:09:e4:f2:43:fb:b9:56:02:19:01:8a:49:dc:e7:
62:a4:30:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:35:24 2026 by rpki-client