Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: iY18aP7dWeqdiebAw9bVVxvoqg1kw3uE/oEFIrDslT8=
Subject key identifier: 4F:00:EA:8E:04:DB:22:B8:86:2D:B7:64:95:04:60:B6:3E:D3:18:70
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019EBFC8FA8872C12EFE0A33CF2D175031A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 1111
Signing time: Sat 13 Jun 2026 07:01:20 +0000
Manifest this update: Sat 13 Jun 2026 07:01:20 +0000
Manifest next update: Sun 14 Jun 2026 07:01:20 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: bQ5hmB6YSZ+3rUT3dgdWT2QHMhd9YiK2bgqHofzUoRA=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:fa:88:72:c1:2e:fe:0a:33:cf:2d:17:50:31:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Jun 13 07:01:20 2026 GMT
Not After : Jun 14 07:01:20 2026 GMT
Subject: CN=4f00ea8e04db22b8862db764950460b63ed31870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:9c:ad:ae:c4:cb:8a:e9:99:c4:e4:a5:b2:
09:10:ea:a9:03:a9:b0:a6:eb:b1:1d:8a:66:28:9c:
2b:b9:9f:58:8f:fa:db:33:3d:cf:47:18:7e:35:9a:
a0:b2:63:10:da:14:6f:68:c2:23:e5:89:73:58:f8:
a4:db:95:f2:85:50:1a:b4:28:34:1b:76:64:00:61:
ec:0b:c6:e4:fd:fd:52:ab:96:ff:f9:71:b0:79:d6:
25:03:57:cf:22:de:c6:9c:66:c0:38:0a:61:e6:ac:
19:55:87:3f:93:80:09:dc:62:41:8d:0a:c6:83:8f:
83:61:ad:2a:8b:a2:8b:0e:db:91:94:b0:9a:76:b1:
2e:f0:01:28:1c:36:49:31:fa:53:97:11:0b:26:4d:
28:cb:ae:04:7d:07:55:ee:77:8d:6f:ad:f4:fe:c9:
d1:0d:0e:19:b9:2e:1b:14:9c:dc:d2:ca:3b:4c:3d:
74:36:c1:25:fa:17:5a:a4:9e:f5:73:67:10:98:4d:
72:f7:4d:5f:21:bc:c5:cf:fa:d5:37:1f:4b:0f:06:
23:bd:8c:6e:0c:de:b1:78:c1:f8:c5:02:5f:ee:d2:
90:83:0b:81:d2:1b:95:11:1b:e0:db:11:6b:21:01:
06:e9:03:4a:b1:c4:c9:6d:94:8e:98:0e:81:24:54:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:EA:8E:04:DB:22:B8:86:2D:B7:64:95:04:60:B6:3E:D3:18:70
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:84:ee:d7:9c:f4:ae:27:01:5a:44:24:26:77:db:0a:d8:f9:
3f:dd:56:20:c3:a7:71:2d:b0:95:ac:85:ce:a7:62:57:95:ec:
6d:98:38:84:8d:9e:b4:ac:31:73:09:0f:26:6d:25:45:2b:db:
1a:36:16:99:91:ed:3e:fa:56:a9:dc:d6:df:9c:0f:d5:ef:a5:
09:a4:46:d4:e7:6f:07:6e:eb:e1:eb:8f:2e:0a:3c:83:58:c9:
66:11:c7:8b:6c:55:17:13:ba:7e:d6:8d:28:85:a5:07:51:3c:
38:1c:70:f0:4c:5d:a1:fa:b0:4e:45:14:26:2a:a4:c3:a7:45:
86:a3:a4:29:f2:ef:e5:39:f4:eb:52:09:4a:cf:a1:e4:f9:0b:
7b:17:cd:e1:26:8a:3b:65:33:fd:6f:06:1a:d0:e8:3e:57:33:
0b:eb:ad:27:cc:e4:f8:17:55:99:e2:44:a0:6a:ae:17:94:e5:
26:7f:fe:79:fd:1b:6f:02:55:21:80:af:b5:fd:72:6f:ee:6c:
d7:4c:fb:cd:0d:63:51:48:17:f4:cf:dc:3f:2a:2e:c5:8a:81:
aa:a1:96:23:5d:49:fa:26:9c:87:b7:e9:c4:9f:e4:b9:27:d8:
5f:da:0f:02:5e:47:76:76:ce:46:60:b9:5a:9b:1e:37:f8:3f:
7f:d6:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:20:33 2026 by rpki-client