Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: czAfkyTU7c1Yzs1f3JI6oFiiYFdGtB91XArfeg4Dpu8=
Subject key identifier: 6F:BF:18:C9:46:47:6A:8E:25:8C:81:F7:C2:2A:41:79:DC:76:55:06
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019E1D9021FF4D236F9B88A50723927B8065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 10BD
Signing time: Tue 12 May 2026 19:00:45 +0000
Manifest this update: Tue 12 May 2026 19:00:45 +0000
Manifest next update: Wed 13 May 2026 19:00:45 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: etrkeuXf3YhbnK40/gQd6eJTpRdJmkTIegURJQ8Rweo=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:21:ff:4d:23:6f:9b:88:a5:07:23:92:7b:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: May 12 19:00:45 2026 GMT
Not After : May 13 19:00:45 2026 GMT
Subject: CN=6fbf18c946476a8e258c81f7c22a4179dc765506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:e9:53:19:46:71:79:11:3f:6c:4c:32:7b:
02:3d:31:4d:fc:f3:d6:77:9b:70:03:4b:10:aa:bb:
fd:0b:6a:b9:4c:e4:f3:ca:1e:4c:72:aa:76:37:7b:
7d:2f:9a:a0:aa:84:98:4a:52:e4:0d:cc:15:9b:db:
d7:28:59:80:49:54:1c:9e:96:45:65:ee:a8:ef:fa:
62:5f:bc:d1:79:fd:65:9b:4a:48:93:8f:e2:3b:63:
6c:9e:62:76:4a:40:9c:b5:1c:9e:fc:a7:72:62:3a:
b4:48:3e:ab:4b:d5:89:a2:fc:b1:1d:ec:87:7d:bd:
35:15:fd:57:ae:0f:73:34:d7:6a:65:12:e5:49:48:
69:94:f3:83:66:52:05:35:d1:09:87:ea:3d:04:ff:
b3:e1:03:cf:7d:f8:33:fd:8b:ce:94:17:fe:ae:9d:
5e:47:5f:19:f7:e2:53:84:34:06:07:c3:c4:e0:15:
65:c7:5c:1a:fd:96:58:0d:47:7b:a5:70:e2:c9:8b:
05:da:20:e3:97:5e:0c:61:40:e1:32:70:5c:ce:84:
7e:00:65:6a:93:1a:64:ac:b9:a9:e6:96:d5:e3:6c:
61:38:5d:b5:63:ec:f5:73:60:55:c2:fd:3f:90:86:
d0:e3:da:3e:24:21:a6:57:cd:2e:4f:c3:64:ce:9f:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BF:18:C9:46:47:6A:8E:25:8C:81:F7:C2:2A:41:79:DC:76:55:06
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:81:d9:cf:7a:9d:a9:fa:fb:9b:9f:91:6d:39:67:1b:07:22:
d0:b1:36:ce:d7:32:04:4c:2c:b3:e8:97:19:70:f4:f7:98:85:
0b:75:7c:af:68:69:a8:65:a3:97:f3:de:a5:31:09:57:03:b5:
7a:8f:e2:ab:34:60:f5:4f:28:6d:fa:e8:de:7f:99:0a:8d:f7:
6a:8a:d8:8d:91:45:b1:ce:0f:b1:72:e5:b4:2b:77:94:dd:55:
e2:58:9d:18:6c:f3:5c:a9:83:cc:fa:f9:61:eb:9d:e4:5c:24:
4b:aa:94:75:10:50:02:93:46:a8:9a:1f:7d:5d:dc:b5:e2:86:
63:55:6c:af:55:2c:e0:f1:1f:94:84:ca:62:60:1b:0f:cd:f4:
08:bd:c9:d0:de:38:86:bd:15:95:4b:a3:60:da:54:f9:4c:29:
34:4f:29:4b:65:0b:ce:63:55:b4:ea:da:2b:09:18:2f:44:96:
11:f9:56:a6:ee:95:1e:6d:9f:1b:80:6b:29:5f:7b:79:51:d3:
50:e3:cc:04:68:ab:f1:be:e6:73:1d:bf:80:3b:ef:d0:39:ca:
b7:2c:c5:1a:7f:69:40:f1:8a:18:21:89:f0:69:83:eb:ec:ea:
fb:42:5a:96:b3:e3:c3:3f:68:c2:f2:44:9d:f1:c9:a8:12:73:
4c:a4:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:11:50 2026 by rpki-client