Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
File: AG5fNfGSihR_HaQbXXtbDWGy1vg.mft (raw, json)
Hash identifier: qhy/bknSITqZgGCqRobkbs3Mai9JSX8ZhD6UEsQXwH8=
Subject key identifier: AE:7A:1B:02:4A:3D:CE:3F:85:D1:DE:04:A3:59:10:04:7E:67:C9:9F
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 019D27043E6A91200E0BC8E8FD2ECB4D770D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
Manifest number: 02B2
Signing time: Wed 25 Mar 2026 22:01:22 +0000
Manifest this update: Wed 25 Mar 2026 22:01:22 +0000
Manifest next update: Thu 26 Mar 2026 22:01:22 +0000
Files and hashes: 1: 5VPFnx7Snq1s0xjLflc4cpAtHHc.roa (hash: 31yOTf+y5hoAFje/WnwVpgH2/J9KZ8DZIZVyKF4ts1w=)
2: AG5fNfGSihR_HaQbXXtbDWGy1vg.crl (hash: fq67trfUdWPYgf8y1IcobT1yf1iLS4uz6Wcnas8tOxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3e:6a:91:20:0e:0b:c8:e8:fd:2e:cb:4d:77:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: Mar 25 22:01:22 2026 GMT
Not After : Mar 26 22:01:22 2026 GMT
Subject: CN=ae7a1b024a3dce3f85d1de04a35910047e67c99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:09:5e:37:ba:0c:54:5b:ea:51:04:98:71:
b3:cd:07:8f:17:22:36:27:a8:ff:da:e2:09:bf:89:
07:1c:f2:b5:34:8f:6f:b8:09:8f:8d:25:57:77:0a:
f1:73:71:b4:cf:f4:5b:69:ee:91:f1:9d:f7:c7:b0:
6e:e1:20:fb:a2:01:ed:c3:f2:80:61:22:69:1b:55:
0b:0f:1b:cf:89:4f:65:df:81:57:4c:cc:24:21:77:
31:22:58:2f:c9:63:3d:27:37:6b:c4:ba:13:39:16:
46:97:29:9a:49:4d:b8:9e:1e:8a:1f:bc:15:9d:91:
f6:b3:9c:4f:98:ed:fe:b7:9d:46:68:15:d5:de:0d:
e0:86:76:84:21:00:7b:90:2d:0c:95:e3:ab:c4:3d:
db:fd:5c:d4:46:84:9c:bc:45:76:4f:51:05:c7:2a:
ea:6b:02:a5:ac:34:37:eb:cb:c0:99:b2:24:96:ef:
4f:2b:0b:ad:fa:33:bf:e2:7d:e2:dc:51:fd:54:bc:
63:50:75:3c:05:7a:74:2a:5c:4b:60:b0:97:9b:56:
a2:f5:0d:2a:21:63:aa:f8:b0:fc:88:b3:db:ee:78:
36:b2:1d:20:d3:3b:b7:78:1a:d5:e4:01:ab:7c:25:
eb:4a:40:18:56:14:02:5c:e1:3c:45:f3:39:0d:b6:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7A:1B:02:4A:3D:CE:3F:85:D1:DE:04:A3:59:10:04:7E:67:C9:9F
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:70:cf:22:a6:f0:cb:70:ad:99:76:d5:a2:cd:a6:b2:c8:87:
18:88:de:b9:7b:8c:f3:aa:b8:d3:52:7c:9d:c7:b2:42:60:ac:
f6:d8:e3:80:ef:cd:b0:34:e2:fe:89:49:a5:78:1d:ae:bd:05:
d9:32:de:0d:b6:31:81:30:41:52:70:27:63:75:c0:c9:be:64:
91:2b:c9:b9:7d:62:b2:f0:f7:e6:8f:c0:18:79:32:23:ae:33:
f4:17:d0:f9:58:cf:67:12:f1:7d:e1:93:07:b2:9f:dd:d6:f8:
12:23:43:0f:7e:ad:6f:38:8a:72:80:bd:c2:25:83:a2:c4:0e:
16:8c:4e:59:1b:57:f5:46:c2:58:17:69:a5:db:24:bf:fb:c4:
92:d0:e8:92:85:11:23:6e:a0:c5:87:81:09:3b:33:a5:24:4e:
18:8a:81:70:7c:7d:4e:fb:c0:52:59:a8:de:f4:c4:8d:ea:1b:
34:2c:9f:f9:ea:bb:1d:0a:49:8e:44:75:ef:c2:b7:ea:c7:b7:
3c:8e:db:1b:6a:0d:ef:65:ed:ca:11:ea:83:1a:7b:ef:87:c6:
d2:31:78:f6:8c:67:f7:b6:1a:1d:e9:a6:ec:8f:12:63:1c:ad:
c9:65:13:76:97:05:18:1c:b0:6e:a7:65:d9:6c:b0:e1:b2:20:
85:f0:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:49 2026 by rpki-client