Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: iGh/uwd9IddXOoWvBLisg4fgSZfAg60mAhB+toNPcyc=
Subject key identifier: AB:BF:50:CB:A2:AB:A5:32:54:47:B5:D1:0C:59:F5:C3:87:2B:C6:A5
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019D265F25C1079D79675FE589AE5D7E1E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 103D
Signing time: Wed 25 Mar 2026 19:01:02 +0000
Manifest this update: Wed 25 Mar 2026 19:01:02 +0000
Manifest next update: Thu 26 Mar 2026 19:01:02 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: XXiokrZcJzdLk8OSbq7goaMxseYuQSeBfKk0Df9W7+c=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:25:c1:07:9d:79:67:5f:e5:89:ae:5d:7e:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Mar 25 19:01:02 2026 GMT
Not After : Mar 26 19:01:02 2026 GMT
Subject: CN=abbf50cba2aba5325447b5d10c59f5c3872bc6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:f9:27:ba:65:ea:78:b9:77:53:25:5e:dc:
fc:12:e6:ac:e2:f9:f1:4a:e9:4d:7e:52:9c:6e:0a:
96:3a:e6:ec:90:9d:64:eb:25:fc:bc:21:b0:12:3c:
af:0d:fd:66:83:ac:a6:7a:a4:a1:77:cd:37:a5:f3:
c4:a8:16:77:5a:0b:7b:5c:75:dd:f4:6e:0f:54:bc:
66:32:ec:e5:0b:ca:94:8f:7c:82:d0:c7:42:50:56:
fc:fa:2a:a5:f7:b1:8c:f7:53:75:73:ff:3b:ce:36:
18:68:d7:45:0b:8e:9b:4b:c5:57:d0:2d:09:3f:59:
2f:69:fe:b7:61:ef:e2:b9:33:7c:b1:cb:10:d3:eb:
ac:74:e2:ef:2a:2d:b7:3e:19:1f:72:90:0b:19:3e:
6e:9a:3b:c1:93:cf:2c:1d:9f:88:8c:0b:a8:16:08:
c5:f8:1a:5f:03:f2:2c:3a:e7:c3:f8:7a:31:9e:d8:
61:12:03:d6:72:1f:06:36:99:3d:f7:d9:be:a0:49:
ef:46:c6:78:b4:13:51:c0:ef:cf:17:1f:9b:ab:04:
52:7b:47:0a:b2:cb:f6:32:78:b0:e3:d5:16:01:83:
ed:bf:a5:fc:77:4a:a0:d8:db:6f:67:fc:4f:55:b9:
34:3b:ef:cc:2f:d2:2f:53:0b:c7:f8:ff:c5:7c:3a:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:50:CB:A2:AB:A5:32:54:47:B5:D1:0C:59:F5:C3:87:2B:C6:A5
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:2a:64:15:6b:36:e7:8e:09:19:d0:c3:98:70:3c:42:03:54:
15:88:f8:2d:c1:c7:5d:6f:f0:11:d6:17:d3:db:62:17:c5:d6:
db:91:74:d0:4c:8b:ae:cf:e2:16:c6:95:48:9a:4a:51:27:80:
4a:8b:aa:16:8e:12:e3:59:18:2a:24:d3:d1:af:78:9e:9d:ad:
d2:6e:c1:4d:a3:19:e6:f9:00:bc:0d:11:6f:73:a3:e5:8c:0b:
fd:f2:3d:b1:4a:aa:8a:30:76:fb:36:25:3a:89:a9:64:65:85:
09:06:35:9c:e3:d7:ee:c9:c4:40:b2:ef:e4:10:2b:8f:43:d8:
4a:cd:2e:54:71:4b:f9:6c:d5:4d:ee:0b:f0:63:1d:bb:1e:89:
01:ff:e3:25:28:e0:99:00:5d:c4:5b:1f:4b:6c:a0:6c:e8:37:
0c:2f:f5:ae:d6:68:c2:82:5f:6c:2d:45:53:d9:8a:f9:30:41:
d6:ce:13:2e:ba:c6:5b:21:b0:72:6f:e9:8c:fa:98:6a:5c:ff:
7a:5c:3c:45:57:5d:25:34:10:a6:a9:31:d2:e1:eb:62:38:2b:
13:0d:0b:dd:79:34:3b:ac:48:12:a7:34:a2:14:65:ac:36:99:
ee:14:54:ff:14:c3:05:96:b6:15:b7:80:4c:7f:1e:0f:25:bd:
dd:86:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:34 2026 by rpki-client