Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
File: AG5fNfGSihR_HaQbXXtbDWGy1vg.mft (raw, json)
Hash identifier: Un9WTU7OeHnFRHnZixxSAUKyd5Ix/jTZ+Y5bcBdr5qY=
Subject key identifier: 17:AB:DA:B7:3B:C9:83:AF:D6:F2:A6:80:64:9A:1D:BD:30:D4:A1:1E
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 019E1E35A1798D5E43F93668B297EE2B8788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
Manifest number: 0332
Signing time: Tue 12 May 2026 22:01:31 +0000
Manifest this update: Tue 12 May 2026 22:01:31 +0000
Manifest next update: Wed 13 May 2026 22:01:31 +0000
Files and hashes: 1: 5VPFnx7Snq1s0xjLflc4cpAtHHc.roa (hash: 31yOTf+y5hoAFje/WnwVpgH2/J9KZ8DZIZVyKF4ts1w=)
2: AG5fNfGSihR_HaQbXXtbDWGy1vg.crl (hash: D/eCTRes38obscUhY3WzMZ2pVkXPWGy1hFoonAT01eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:a1:79:8d:5e:43:f9:36:68:b2:97:ee:2b:87:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: May 12 22:01:31 2026 GMT
Not After : May 13 22:01:31 2026 GMT
Subject: CN=17abdab73bc983afd6f2a680649a1dbd30d4a11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f2:13:c0:bb:35:94:1f:b0:32:87:8e:eb:4d:
1b:d6:bf:db:18:22:c1:06:a5:b2:61:11:da:83:31:
bb:97:8e:ce:d1:27:91:34:90:48:97:fe:99:ef:27:
f3:f1:6c:65:d0:20:e9:02:d6:19:bd:af:dd:24:5d:
0a:e6:5e:9d:35:5a:c2:14:58:e4:35:72:94:b6:71:
61:0d:15:28:12:8b:19:17:1a:5d:c9:a8:1b:23:9b:
d9:c9:ca:2e:2d:1a:8e:82:2d:f2:8b:57:69:b1:bb:
71:14:b5:e9:5b:60:d1:5a:3d:8f:50:70:34:09:06:
60:61:fd:74:3e:71:90:79:97:2b:e0:a9:2e:63:5f:
50:85:b4:31:04:e9:90:6c:e8:8c:ad:bf:4f:1a:5e:
73:64:56:80:07:41:fd:a0:0f:07:06:b3:f0:57:9e:
7b:56:19:db:a2:ae:d8:bf:6c:a3:01:d3:62:92:d8:
1d:34:fb:f8:5f:76:7e:a5:86:5e:05:33:c0:1d:a0:
70:9d:83:4a:d6:a6:7c:77:62:dc:84:ba:12:ab:cb:
4f:59:9e:19:e6:71:40:f3:b8:7a:70:61:11:95:c9:
3c:6d:cf:27:25:62:82:1a:a4:fc:9e:bb:b5:c8:25:
65:26:3a:f0:27:da:e3:3e:d2:ca:ac:f1:5b:7b:d9:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:DA:B7:3B:C9:83:AF:D6:F2:A6:80:64:9A:1D:BD:30:D4:A1:1E
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:74:73:ab:ce:da:90:30:ca:2b:78:0a:ca:78:d3:4c:84:75:
2e:4d:58:15:a4:62:77:a6:0c:24:2b:77:c4:38:f3:c2:89:1e:
0d:6e:9f:86:e6:4b:ef:76:76:e4:6a:dc:31:fd:6b:71:fd:4b:
1c:4b:c1:86:13:3f:2d:07:a3:90:52:f3:47:fd:ac:33:09:a9:
94:4a:52:6a:8d:6f:3b:ca:0e:f7:3e:cb:4b:eb:ce:23:7b:24:
8c:f7:76:88:98:34:a6:8a:e4:e2:19:38:d6:5f:52:c6:1c:53:
08:34:78:27:10:e4:aa:f7:e4:f2:56:4e:92:16:f2:c8:2b:70:
65:45:a4:4d:12:01:df:c5:a3:2d:9b:9e:ca:ca:f5:bb:f2:16:
6a:e9:ce:19:e3:e6:00:72:8a:55:36:22:5d:c3:82:8e:8b:6c:
12:5e:c7:3c:f5:6f:9d:47:81:c5:c5:61:60:92:17:cb:9b:6a:
38:93:7c:5d:28:af:76:77:ab:8d:d7:b8:09:dd:ed:bd:8b:b1:
84:02:51:a0:eb:36:36:af:e8:8f:d0:77:2a:44:22:40:7c:1c:
50:87:92:fd:35:ec:ae:30:ea:86:df:90:50:4b:00:db:1a:3a:
d6:2f:63:07:eb:7a:5d:bb:b2:6b:e7:71:e5:6d:b1:a7:89:8e:
93:d4:df:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:36 2026 by rpki-client