
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier: K32YgMo/kYKIiaeri1DZ/L1d+9ceb7XYySpHZNyipCQ=
Subject key identifier: 43:8F:ED:D8:9A:DD:3B:FD:C9:64:D0:51:D1:3C:98:C6:57:ED:6D:70
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019E1D905D528B97815A3A41B3DD4B100BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number: 14B4
Signing time: Tue 12 May 2026 19:01:00 +0000
Manifest this update: Tue 12 May 2026 19:01:00 +0000
Manifest next update: Wed 13 May 2026 19:01:00 +0000
Files and hashes: 1: 1-FuYsbw3PtN6RSCCIreMvOiEBvc.roa (hash: LcUqDvDIF+dS1rO59QJwzMS/rR1Ec+AWaOwx0W19I+c=)
2: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=)
3: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: TO7pb3LG0+kv/gMG/xPzsINj73FnGM9KK0VRXUKu0fY=)
4: CdgjSj8B2eEBBly0iK4h89jCNUc.roa (hash: aTHrwyvkvgZuRLuQPng1C8Fc89AkT7KTKhgpjKS5Q+Q=)
5: HGI7Gj5Wt3XPF_wVUIsUFgUNghI.roa (hash: w2PJcEzvTOSjGzFjAX45+IutqIB0ucg7R8zZ//K7w1I=)
6: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=)
7: LDPUn5qMpeiJBc3Itpk7rApmM1s.roa (hash: sRlyMRF4OcX3avZvd3yAuC5yZNhunKqTXOZ9uPyot0A=)
8: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=)
9: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=)
10: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=)
11: QomjpQx9_CU1bmLVLsZtPoZDq78.roa (hash: HNmZtCav5oDUjr+7p6DMbvp4B1wr1fA/JAYD/NDabk4=)
12: T86y2lb6VM9SYijib5Gx6TXU_P8.roa (hash: ExJprcrpe0RGYOZUNA24jfKZT7aUwu9YCrRRkzYlGpo=)
13: TEFZXyi-TdJJ-8c3Jqvj55TRRvo.roa (hash: Cxi33yaEo3wewSE6aiUk4NlD+VA3nEwo0JszGNifnSk=)
14: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=)
15: W5olfq9Y7_Lj6KMnAWRUMCZAxjo.roa (hash: qmwFKXQc7nyx5IpOYqlWD91kE3wC9gbI51Kb8YcehEw=)
16: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=)
17: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=)
18: _gx37fLAjTn81ea4QvOuL3hHCkg.roa (hash: MCy3oFiQwUBO7wcUyatfr3G/3IlU2viPJ+3hsKVLQSY=)
19: _oMS8vQNhi6R4XyJHn3Kgm85oW8.roa (hash: G/zJxy7ZK39KBuYYRk7Yf3yrVTAyUCZvIxiOw4FGcYk=)
20: fKtoyxRVW8bUMI_rB5p-nLcW5mU.roa (hash: ps8RU8VkZlyeWoj9Je22w0i7MXOLJvXdQve7pnVShE0=)
21: gxYBa5PVU9v9YoR3nT1e_I5ZLaQ.roa (hash: LUNLKTLF0jU435zgccL4QRfdTZFRAvMjstkjVzOvR40=)
22: gy7rlJxxVRn0ruQudZypKsohRZQ.roa (hash: v00o1sImpKjVCO5RKOF/dkSMZU/2cdcLFSxQQgLDRbw=)
23: hmb3Sj2KWUAMTfGYcWVLk0KMRhg.roa (hash: EYq3/vGPN6jy3lzOn8yHeB4uOnE5CknSB12P3oGEmTQ=)
24: m9c46eni9yZMngOFFo19sH6DwbM.roa (hash: ZUjTwPyUn4Vyebeha6QqOs7+cWCLWPu9Lx1jvOq5UGQ=)
25: ofDnG2RR07Ffgo6O-NriMLrnSqk.roa (hash: NnioAnFhMcEqC2jvleG0Rix97KFCy1QoGkLlAfyyOm0=)
26: qO2ZYDlru8D0qKA_PlIfPHuJ87Y.roa (hash: yAQHrlDWiEN3OIpMgVB3JbW0VXL3siiz0W9Zs2LsAnQ=)
27: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=)
28: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (hash: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg=)
29: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:5d:52:8b:97:81:5a:3a:41:b3:dd:4b:10:0b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 12 19:01:00 2026 GMT
Not After : May 13 19:01:00 2026 GMT
Subject: CN=438fedd89add3bfdc964d051d13c98c657ed6d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:4e:1b:cd:98:64:82:83:f0:8f:8d:06:ab:
1e:ad:27:de:64:f9:5a:43:5a:51:ec:4e:ac:ac:52:
d6:bf:d1:b3:bf:90:a1:82:20:06:55:67:f9:f7:f7:
34:85:9a:e7:08:fa:6f:3a:8d:d9:89:6a:d0:68:f0:
f3:df:c1:f5:f9:8b:8f:c5:ef:bb:74:67:e6:b3:80:
83:b2:d9:d6:9a:39:ac:83:54:33:04:24:8d:75:1d:
5e:b0:31:10:3e:16:52:7a:73:de:bd:e0:31:34:37:
74:bc:9f:bf:9b:9b:6b:16:79:3f:42:1d:51:b7:fe:
ac:fd:0b:7d:c5:19:95:b6:e4:62:3c:a7:fd:72:f8:
99:fd:d4:d8:e2:4c:fb:90:31:65:49:ac:9d:99:4e:
dd:e4:60:fa:da:97:38:7a:21:5f:4b:aa:48:bd:9c:
28:52:d3:49:90:d1:44:5a:b3:07:4e:22:94:96:0d:
b5:b3:ea:80:c1:93:ce:ce:ab:4f:5c:1f:3e:dd:66:
0d:f9:37:2d:cc:76:83:c1:00:34:87:8e:cb:3c:61:
92:8a:87:cf:04:4b:ab:1b:6b:84:af:1b:97:a7:93:
7c:80:eb:18:5e:0e:51:df:3e:bf:5a:6f:d6:4f:ff:
8e:6b:15:63:f8:22:fd:7f:2c:5b:5f:ac:ac:c3:1b:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8F:ED:D8:9A:DD:3B:FD:C9:64:D0:51:D1:3C:98:C6:57:ED:6D:70
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:42:90:d4:99:3c:84:a7:c9:7c:15:d5:27:0f:13:00:c3:37:
75:b7:d0:44:1a:ac:7f:81:f3:97:69:9b:ea:8f:33:3e:8f:e1:
49:17:12:40:e9:5b:36:eb:86:80:32:d3:bc:e6:cf:47:99:9b:
d5:1a:cf:56:6e:1c:15:ff:dc:39:9e:05:1b:3f:ab:55:c5:d0:
1a:93:90:86:b2:eb:03:54:a9:59:05:d9:c5:8f:2b:e9:f1:7e:
04:17:2d:cd:76:02:3b:69:b3:a3:d5:ed:85:91:6c:2f:a5:7b:
43:80:d3:1a:af:bd:65:43:f4:60:fa:98:df:7e:21:3f:95:c3:
bc:05:d2:0e:8b:ca:fa:8a:6d:cd:65:dc:c4:88:d2:a7:7d:e9:
12:b9:58:a6:5b:e5:d8:2c:31:5c:ac:56:d7:22:b0:10:c3:e4:
b2:b3:b2:cd:01:ba:55:2f:52:e4:fa:97:51:d7:79:aa:7a:56:
4d:7b:0f:91:9c:ac:7b:25:06:04:80:6e:9b:ee:fc:2b:6f:ff:
2e:27:61:19:03:18:61:c7:3b:af:1d:55:1b:0e:2d:ba:44:59:
31:70:2d:9d:8c:b1:27:c7:d3:2f:e7:d2:80:57:d6:db:24:ac:
99:d8:72:15:fe:59:8c:76:75:21:cf:a7:b7:94:46:0d:64:60:
25:b6:cf:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkF1Si5eBWjpBs91LEAvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjYwNTEyMTkwMTAwWhcNMjYwNTEzMTkwMTAwWjAzMTEwLwYDVQQD
Eyg0MzhmZWRkODlhZGQzYmZkYzk2NGQwNTFkMTNjOThjNjU3ZWQ2ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ExOG82YZIKD8I+NBqserSfeZPla
Q1pR7E6srFLWv9Gzv5ChgiAGVWf59/c0hZrnCPpvOo3ZiWrQaPDz38H1+YuPxe+7
dGfms4CDstnWmjmsg1QzBCSNdR1esDEQPhZSenPeveAxNDd0vJ+/m5trFnk/Qh1R
t/6s/Qt9xRmVtuRiPKf9cviZ/dTY4kz7kDFlSaydmU7d5GD62pc4eiFfS6pIvZwo
UtNJkNFEWrMHTiKUlg21s+qAwZPOzqtPXB8+3WYN+TctzHaDwQA0h47LPGGSiofP
BEurG2uErxuXp5N8gOsYXg5R3z6/Wm/WT/+OaxVj+CL9fyxbX6yswxsrUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOP7dia3Tv9yWTQUdE8mMZX7W1wMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUKQ1Jk8
hKfJfBXVJw8TAMM3dbfQRBqsf4Hzl2mb6o8zPo/hSRcSQOlbNuuGgDLTvObPR5mb
1RrPVm4cFf/cOZ4FGz+rVcXQGpOQhrLrA1SpWQXZxY8r6fF+BBctzXYCO2mzo9Xt
hZFsL6V7Q4DTGq+9ZUP0YPqY334hP5XDvAXSDovK+optzWXcxIjSp33pErlYplvl
2CwxXKxW1yKwEMPksrOyzQG6VS9S5PqXUdd5qnpWTXsPkZyseyUGBIBum+78K2//
LidhGQMYYcc7rx1VGw4tukRZMXAtnYyxJ8fTL+fSgFfW2ySsmdhyFf5ZjHZ1Ic+n
t5RGDWRgJbbPpA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:01 2026 by rpki-client