Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
File: AG5fNfGSihR_HaQbXXtbDWGy1vg.mft (raw, json)
Hash identifier: hcF2pPB+INg5n1B3pX2BE7jiAyfettwoOLrKS+Of5QA=
Subject key identifier: 04:72:CC:B1:44:F4:18:9F:7A:4E:12:6D:33:2E:D7:43:50:30:14:9E
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 01A0CDB5EB6AD0055A1D98865ACA622B13A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
Manifest number: 0496
Signing time: Wed 23 Sep 2026 10:00:46 +0000
Manifest this update: Wed 23 Sep 2026 10:00:46 +0000
Manifest next update: Thu 24 Sep 2026 10:00:46 +0000
Files and hashes: 1: 5VPFnx7Snq1s0xjLflc4cpAtHHc.roa (hash: 31yOTf+y5hoAFje/WnwVpgH2/J9KZ8DZIZVyKF4ts1w=)
2: AG5fNfGSihR_HaQbXXtbDWGy1vg.crl (hash: /9UGw0ASUIGQxqkpKWqyHJBCiziEaOVhy6efwQS829A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:eb:6a:d0:05:5a:1d:98:86:5a:ca:62:2b:13:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: Sep 23 10:00:46 2026 GMT
Not After : Sep 24 10:00:46 2026 GMT
Subject: CN=0472ccb144f4189f7a4e126d332ed7435030149e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:5c:2f:a2:08:59:86:ba:16:41:9a:0e:a7:
02:96:7c:a2:86:a7:68:5d:d3:ed:3d:fc:56:39:55:
e6:e0:5c:41:3b:ae:41:9f:26:37:4f:9b:34:12:e8:
6e:c1:62:43:c2:94:18:d4:49:b1:27:66:45:4e:b0:
6b:4e:dc:73:79:dc:c7:90:cf:68:66:17:0b:48:86:
4d:20:1f:dc:13:79:f6:3f:46:43:0b:fb:ad:e4:40:
66:27:4c:3a:ad:86:b5:e0:e9:3a:81:05:7c:81:f5:
fc:73:8c:d5:84:10:b5:1e:d7:ad:86:f7:84:11:61:
b6:dd:68:a6:a0:72:a4:cb:bb:2d:c0:84:25:98:6c:
9f:aa:ef:7a:87:27:38:de:71:de:e7:57:78:7a:75:
a5:10:1b:4b:ac:3f:9c:c5:63:71:4a:48:b5:0d:01:
ad:41:9a:90:b7:cb:c8:86:4a:b0:bf:4c:41:04:43:
9b:0c:bb:7f:88:05:73:12:58:42:24:f3:f1:c2:22:
ca:1e:4b:0f:62:e3:fc:79:fc:04:fe:f7:7d:86:d2:
97:64:89:e0:6f:40:51:00:0c:00:63:e0:55:c7:44:
70:6a:a4:98:32:67:9b:30:25:d0:04:d4:c0:10:66:
fa:7f:6d:7d:e0:44:62:46:bf:a9:b8:22:ef:2b:67:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:72:CC:B1:44:F4:18:9F:7A:4E:12:6D:33:2E:D7:43:50:30:14:9E
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a0:3b:cc:05:b9:2f:33:a7:2f:12:5c:6a:2e:c5:29:6d:54:
d0:e5:d5:46:98:c3:b6:7e:5e:36:37:6c:e3:30:9a:e7:09:ad:
39:7a:6b:68:8d:9c:cc:b5:95:7e:09:28:c0:27:2f:e2:9d:a1:
2b:63:36:46:52:d6:88:ae:f9:b9:b0:1f:85:7a:ff:f7:0b:50:
75:24:6c:7f:12:fe:93:a5:66:fa:fa:60:4e:68:fe:30:55:03:
25:e6:f8:6e:1f:56:ac:a8:52:52:f8:16:ad:66:9f:67:b6:66:
85:40:36:93:b9:89:ba:15:72:e5:9a:f2:13:8a:fe:8d:ae:ee:
27:86:5c:f6:22:f4:c7:1d:2f:08:2c:26:0d:70:c1:94:e9:39:
a3:bf:40:4a:26:f6:19:dc:52:97:80:ae:60:97:30:0b:2b:80:
95:e5:bc:15:fe:95:9f:85:96:13:60:41:23:4c:06:7d:18:17:
51:7a:fa:f4:ed:b3:0c:a1:07:5a:88:32:da:0a:3d:94:9f:17:
2a:7d:44:de:5c:f9:42:2d:49:93:07:d5:23:6c:9b:53:b5:1c:
2d:8b:e8:f9:9c:1a:c0:44:72:45:a4:4b:f7:d9:77:9f:f7:55:
72:4b:22:1a:2f:cf:39:43:ce:b8:af:e5:e7:15:70:52:fb:6a:
6c:60:c5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:40:01 2026 by rpki-client