Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier: j6INKjZiD3Hl8oc0lbtPAV56i3ilIcvNq+yCGacyi6c=
Subject key identifier: 78:25:CA:B6:C4:6F:74:13:9A:85:D1:5F:76:D8:9F:6F:06:28:0E:93
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 019D27046B1C4D09237DF9AE840910A85F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number: 12F6
Signing time: Wed 25 Mar 2026 22:01:34 +0000
Manifest this update: Wed 25 Mar 2026 22:01:34 +0000
Manifest next update: Thu 26 Mar 2026 22:01:34 +0000
Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: YgJEY04KEOi69ELBO8xsBaABwAm9jNeN1QyhjK/ta/A=)
2: ePG6DY0S1g_n3-izjvFmaMzFYtA.roa (hash: 4EtCOL5WPsRvbWzQ4J4E2mOMMK8/QB99r0YCzdv5MzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6b:1c:4d:09:23:7d:f9:ae:84:09:10:a8:5f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Mar 25 22:01:34 2026 GMT
Not After : Mar 26 22:01:34 2026 GMT
Subject: CN=7825cab6c46f74139a85d15f76d89f6f06280e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:cc:e3:f2:bd:b2:67:f4:ae:f0:67:87:33:
57:57:82:f7:a3:19:01:99:fa:f2:87:ca:99:48:70:
71:05:0d:d8:e6:53:25:e9:1a:38:a7:46:84:d6:30:
9f:e3:02:8f:d1:69:08:ab:ea:69:7f:09:7d:69:14:
17:0a:9b:45:0f:21:c5:bf:f1:b2:c2:2f:0b:76:fe:
93:e4:e4:fb:b4:10:18:43:d3:67:cf:e1:ef:2e:bb:
f3:43:50:6f:56:3e:77:d7:d5:d9:3e:61:0e:f9:02:
bc:d9:10:46:7a:58:02:47:91:d6:76:d9:d0:dc:4c:
e6:8d:98:af:86:5d:2f:1d:ee:2a:aa:80:64:61:8f:
9b:32:7c:d0:7d:e5:e7:97:c4:f7:9b:34:70:68:45:
b3:6e:be:df:9d:5f:4f:f4:1f:d3:8d:3f:19:e9:99:
0d:a5:c7:00:e6:01:6f:2b:ca:a0:e0:19:98:b7:4a:
94:b1:e4:d2:c5:23:8c:08:5e:4d:b3:81:36:a1:a6:
4a:6a:2e:cc:44:b6:f0:89:06:04:eb:04:b3:b5:33:
9c:91:36:2a:c4:48:e5:5c:26:a0:aa:44:50:63:55:
89:15:d9:00:b6:14:70:29:99:bf:3b:a3:43:85:e7:
dd:e9:ce:2f:9d:34:35:9b:82:aa:d5:ce:85:de:bc:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:CA:B6:C4:6F:74:13:9A:85:D1:5F:76:D8:9F:6F:06:28:0E:93
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:92:e0:dd:d1:11:ac:17:7e:f2:10:1d:42:71:ff:b2:00:c3:
39:5e:e5:2d:16:a7:6c:f8:bd:89:4b:c1:1c:ff:98:f1:6c:51:
7d:5c:4b:5e:a6:f4:ac:c2:64:3e:35:57:a7:4a:30:98:19:eb:
80:e5:13:f4:63:e5:f5:36:e3:ca:58:48:20:48:30:32:e8:ef:
58:27:1f:13:1c:a3:30:fa:b9:8e:3b:f0:46:d5:99:c8:dd:8b:
eb:65:cd:f6:cb:88:a1:7e:38:36:28:db:d6:0f:a3:c2:db:d3:
4e:69:a4:9f:59:a6:4b:58:68:97:78:55:ab:1f:90:05:a4:f0:
72:fd:a8:ec:3c:ac:bb:29:4c:3f:65:e5:41:18:bf:60:2f:ae:
ea:2d:4e:8a:d7:cb:6b:2a:30:c5:85:80:fc:b6:f3:93:43:22:
23:bd:2d:93:35:cc:6f:d1:59:e9:fa:54:cb:1f:49:e6:64:7a:
23:74:22:f6:92:3f:61:4a:9b:75:24:6b:5b:8b:a2:e0:89:e4:
d3:7d:d3:46:13:93:10:bd:69:d0:47:56:24:35:ae:df:c4:4c:
94:72:6a:a1:28:49:0e:4b:88:21:5c:77:e0:d7:98:40:bc:e8:
98:f7:8c:f8:23:38:07:66:de:b0:a4:5d:dd:68:74:98:4a:b1:
50:98:ab:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBGscTQkjffmuhAkQqF9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMDM2MTZjYTJmOWFlZmE3MGMzOTE0Y2NlOTBkY2UwOTcw
NmNmYmIwHhcNMjYwMzI1MjIwMTM0WhcNMjYwMzI2MjIwMTM0WjAzMTEwLwYDVQQD
Eyg3ODI1Y2FiNmM0NmY3NDEzOWE4NWQxNWY3NmQ4OWY2ZjA2MjgwZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsrM4/K9smf0rvBnhzNXV4L3oxkB
mfryh8qZSHBxBQ3Y5lMl6Ro4p0aE1jCf4wKP0WkIq+ppfwl9aRQXCptFDyHFv/Gy
wi8Ldv6T5OT7tBAYQ9Nnz+HvLrvzQ1BvVj5319XZPmEO+QK82RBGelgCR5HWdtnQ
3EzmjZivhl0vHe4qqoBkYY+bMnzQfeXnl8T3mzRwaEWzbr7fnV9P9B/TjT8Z6ZkN
pccA5gFvK8qg4BmYt0qUseTSxSOMCF5Ns4E2oaZKai7MRLbwiQYE6wSztTOckTYq
xEjlXCagqkRQY1WJFdkAthRwKZm/O6NDhefd6c4vnTQ1m4Kq1c6F3rxwPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHglyrbEb3QTmoXRX3bYn28GKA6TMB8GA1UdIwQY
MBaAFAIDYWyi+a76cMORTM6Q3OCXBs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEt
Yzg3Y2E5ZjJiOTVmLzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEtYzg3Y2E5ZjJiOTVm
LzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppLg3dER
rBd+8hAdQnH/sgDDOV7lLRanbPi9iUvBHP+Y8WxRfVxLXqb0rMJkPjVXp0owmBnr
gOUT9GPl9TbjylhIIEgwMujvWCcfExyjMPq5jjvwRtWZyN2L62XN9suIoX44Nijb
1g+jwtvTTmmkn1mmS1hol3hVqx+QBaTwcv2o7DysuylMP2XlQRi/YC+u6i1OitfL
ayowxYWA/Lbzk0MiI70tkzXMb9FZ6fpUyx9J5mR6I3Qi9pI/YUqbdSRrW4ui4Ink
033TRhOTEL1p0EdWJDWu38RMlHJqoShJDkuIIVx34NeYQLzomPeM+CM4B2besKRd
3Wh0mEqxUJirxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:46 2026 by rpki-client