Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
File: AG5fNfGSihR_HaQbXXtbDWGy1vg.mft (raw, json)
Hash identifier: lnhREoA4qnk5eU2G0ozaLn+idlCPzjPnSiBQDU2IWvw=
Subject key identifier: 07:16:DF:24:B9:8D:3A:E7:0C:EB:5C:07:84:B1:45:1D:CD:C5:A5:59
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 019F8F11014A508605413097A69D466BEA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
Manifest number: 03F1
Signing time: Thu 23 Jul 2026 13:01:23 +0000
Manifest this update: Thu 23 Jul 2026 13:01:23 +0000
Manifest next update: Fri 24 Jul 2026 13:01:23 +0000
Files and hashes: 1: 5VPFnx7Snq1s0xjLflc4cpAtHHc.roa (hash: 31yOTf+y5hoAFje/WnwVpgH2/J9KZ8DZIZVyKF4ts1w=)
2: AG5fNfGSihR_HaQbXXtbDWGy1vg.crl (hash: bdifApaxw8m/AE1JKntkNHR2KKoiiV2lx/UBbdWP8f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:11:01:4a:50:86:05:41:30:97:a6:9d:46:6b:ea:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: Jul 23 13:01:23 2026 GMT
Not After : Jul 24 13:01:23 2026 GMT
Subject: CN=0716df24b98d3ae70ceb5c0784b1451dcdc5a559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:e1:ed:f5:16:1f:84:6d:5f:98:5c:db:2a:
95:76:91:e0:e8:c7:79:fc:5e:c9:70:3f:ac:51:ad:
e0:83:e1:6a:0a:80:98:ea:cc:5f:27:d8:50:f9:40:
f7:0e:52:ee:c4:9d:b9:e9:27:20:21:02:c6:76:85:
47:63:d4:98:fb:57:42:e0:7e:a9:5a:5f:ea:eb:9c:
02:bf:ee:9f:60:46:54:6c:49:dd:00:43:eb:ba:06:
fd:9d:24:03:a8:c8:19:8a:42:4c:58:63:0c:04:b4:
35:2f:23:9a:84:a8:41:5f:2f:2d:9f:15:45:90:0c:
75:84:ea:b2:bb:b2:3a:0b:2c:a0:66:1a:78:6c:76:
be:01:b8:83:7b:4d:ee:3b:0a:8f:61:97:f5:17:13:
02:c3:0c:87:b4:1c:1f:0c:20:25:b0:0b:19:e8:86:
46:74:4b:4c:76:1e:d5:a1:79:47:b0:0f:5b:de:a9:
e2:83:27:1e:cc:89:d2:d7:22:01:f1:29:8c:e1:36:
96:ea:d1:a2:05:49:bd:f8:de:8f:b0:42:05:94:35:
01:62:3d:03:ff:f2:c3:fa:57:08:51:ab:71:d7:f3:
45:99:f2:18:50:49:d2:48:70:ef:f0:bb:ad:08:b8:
8e:e0:73:a5:e3:bf:20:f1:4c:75:0b:b2:f4:79:c4:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:DF:24:B9:8D:3A:E7:0C:EB:5C:07:84:B1:45:1D:CD:C5:A5:59
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:36:3e:14:a6:03:ba:bc:d7:51:17:8d:07:7f:ff:75:82:
d5:a0:64:40:ec:77:3f:b6:e4:23:63:0f:4a:ae:ff:5d:25:88:
a8:a9:3c:67:13:27:97:4e:ea:ce:3f:da:1d:b9:f0:18:90:d6:
9d:f3:18:c3:40:5c:dd:6a:62:60:a4:1d:80:31:d2:04:81:91:
c7:0b:b8:49:88:53:2e:ee:d4:84:bd:1f:23:87:4e:75:94:b3:
91:45:14:56:85:c2:79:8d:c7:2e:7e:da:cb:47:bc:98:48:c0:
16:5c:90:db:7b:d7:52:bd:71:bc:ed:d7:47:e1:e5:22:24:25:
32:3e:d2:d1:f2:05:7b:aa:9d:07:66:da:56:60:47:99:a5:48:
c2:ac:9a:f2:fa:d8:13:ab:2a:6c:62:5a:37:d3:3d:87:8f:05:
45:22:3a:14:72:6e:b6:99:de:35:a6:91:f1:f8:91:2e:0c:ab:
ed:e6:0a:da:81:0f:fa:1f:ce:85:19:84:4f:4a:b0:74:4a:11:
ef:7c:3d:57:ae:af:36:73:3b:d5:a5:e7:d2:51:7d:1f:91:8a:
08:9c:97:53:a9:f5:ac:24:14:52:4e:27:51:e7:44:75:b0:6c:
e5:99:0f:98:36:9b:66:0c:b0:04:21:14:c8:b0:15:d0:f1:bf:
84:45:63:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEQFKUIYFQTCXpp1Ga+o7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNmU1ZjM1ZjE5MjhhMTQ3ZjFkYTQxYjVkN2I1YjBkNjFi
MmQ2ZjgwHhcNMjYwNzIzMTMwMTIzWhcNMjYwNzI0MTMwMTIzWjAzMTEwLwYDVQQD
EygwNzE2ZGYyNGI5OGQzYWU3MGNlYjVjMDc4NGIxNDUxZGNkYzVhNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+Lh7fUWH4RtX5hc2yqVdpHg6Md5
/F7JcD+sUa3gg+FqCoCY6sxfJ9hQ+UD3DlLuxJ256ScgIQLGdoVHY9SY+1dC4H6p
Wl/q65wCv+6fYEZUbEndAEPrugb9nSQDqMgZikJMWGMMBLQ1LyOahKhBXy8tnxVF
kAx1hOqyu7I6CyygZhp4bHa+AbiDe03uOwqPYZf1FxMCwwyHtBwfDCAlsAsZ6IZG
dEtMdh7VoXlHsA9b3qnigycezInS1yIB8SmM4TaW6tGiBUm9+N6PsEIFlDUBYj0D
//LD+lcIUatx1/NFmfIYUEnSSHDv8LutCLiO4HOl478g8Ux1C7L0ecTKuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcW3yS5jTrnDOtcB4SxRR3NxaVZMB8GA1UdIwQY
MBaAFABuXzXxkooUfx2kG117Ww1hstb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUc1Zk5mR1NpaFJfSGFRYlhYdGJEV0d5MXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iODVlNTEtZjhhOS00Zjk3LWI4NGUt
YTA1OWI0M2VkYTAzLzEvQUc1Zk5mR1NpaFJfSGFRYlhYdGJEV0d5MXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9iODVlNTEtZjhhOS00Zjk3LWI4NGUtYTA1OWI0M2VkYTAz
LzEvQUc1Zk5mR1NpaFJfSGFRYlhYdGJEV0d5MXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiI2PhSm
A7q811EXjQd//3WC1aBkQOx3P7bkI2MPSq7/XSWIqKk8ZxMnl07qzj/aHbnwGJDW
nfMYw0Bc3WpiYKQdgDHSBIGRxwu4SYhTLu7UhL0fI4dOdZSzkUUUVoXCeY3HLn7a
y0e8mEjAFlyQ23vXUr1xvO3XR+HlIiQlMj7S0fIFe6qdB2baVmBHmaVIwqya8vrY
E6sqbGJaN9M9h48FRSI6FHJutpneNaaR8fiRLgyr7eYK2oEP+h/OhRmET0qwdEoR
73w9V66vNnM71aXn0lF9H5GKCJyXU6n1rCQUUk4nUedEdbBs5ZkPmDabZgywBCEU
yLAV0PG/hEVjMQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:14 2026 by rpki-client