Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: CR0uyRi17rONhik1HnVTuPxbV/vWIFIEWzyKJSjKFTw=
Subject key identifier: 55:9C:7A:59:D1:60:9A:E7:A7:37:7D:B0:F0:F8:16:0A:53:44:96:E8
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 01A0D2DE9647B82134CE62BD718933012A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 1224
Signing time: Thu 24 Sep 2026 10:03:17 +0000
Manifest this update: Thu 24 Sep 2026 10:03:17 +0000
Manifest next update: Fri 25 Sep 2026 10:03:17 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: KqgsIjrdDjm96taiG3IkyB6LHPFM2wdnq3OzEKC+aN0=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:96:47:b8:21:34:ce:62:bd:71:89:33:01:2a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Sep 24 10:03:17 2026 GMT
Not After : Sep 25 10:03:17 2026 GMT
Subject: CN=559c7a59d1609ae7a7377db0f0f8160a534496e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:53:5b:d3:98:7f:d4:dc:3d:5d:9c:cc:d9:
15:48:03:0d:c7:0c:b3:aa:6c:00:eb:37:b2:d8:c3:
82:98:01:0e:c7:97:81:0d:5e:f0:26:e7:0f:07:e5:
94:7e:c0:c0:20:62:90:68:89:84:52:d1:2d:b8:6a:
e8:db:92:50:26:d5:78:65:3a:d7:78:db:e3:fe:8a:
10:a1:5b:f8:be:bb:66:af:ed:fe:19:5b:9c:9f:e6:
60:e4:d7:d1:ad:e3:29:39:cc:ba:fe:e6:9b:82:e0:
3d:46:20:af:21:93:07:72:2b:af:fd:1d:ab:61:99:
3b:d1:51:3a:a2:5a:63:74:fa:95:d5:6b:ba:0e:b9:
71:e7:85:84:5f:61:61:7d:32:94:65:d1:a9:3d:93:
66:2c:47:c4:52:00:b9:41:61:db:50:5e:44:3a:ee:
45:c2:23:0f:01:56:9f:e2:ef:dd:9e:06:9c:47:a4:
f1:49:6f:44:e1:d2:a9:e7:77:25:48:10:fd:25:7f:
8d:d8:5f:21:ae:71:79:4f:76:3a:d9:ab:5c:57:fa:
d5:0a:ed:17:5c:90:7d:0f:ee:36:08:0e:68:97:55:
89:62:df:a2:07:35:29:1f:33:7e:6c:76:2d:45:54:
34:46:c6:12:ed:3c:f8:8d:ce:9a:0e:7a:49:19:b5:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9C:7A:59:D1:60:9A:E7:A7:37:7D:B0:F0:F8:16:0A:53:44:96:E8
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:28:cd:37:fe:fc:4c:30:53:74:a8:5a:c3:e3:1d:fd:f5:e7:
08:9e:c1:ca:c1:e5:42:73:fe:bc:22:e5:fd:cb:e2:24:e9:fc:
eb:68:73:89:54:28:28:2c:23:75:d4:de:30:65:60:1a:d0:0c:
69:9f:82:b3:81:90:be:d4:b3:20:96:9a:8e:90:e4:45:3f:67:
96:d6:c7:c3:19:8f:99:d9:3a:39:29:82:54:d3:13:36:e5:c6:
11:1b:87:c3:30:a8:93:67:12:5a:73:eb:e3:e6:ee:ec:17:56:
c0:be:41:38:ef:45:e9:17:8a:e5:79:c9:b4:2b:9d:a9:7a:d6:
d8:d3:e4:ab:45:28:39:6b:8c:a9:3b:6a:7e:a3:a8:ec:4f:3b:
85:c4:82:69:d1:2a:8c:64:48:7b:ef:38:d6:f7:2c:35:f2:f6:
c4:06:57:0d:58:4e:e0:a1:f1:10:42:d5:fe:2c:7d:f6:f2:7b:
f2:97:74:a2:63:06:e1:5f:c8:d1:2a:1f:d9:f1:e3:67:92:64:
a0:e0:80:ee:ee:21:79:f9:1f:4b:b6:41:3a:47:c6:b2:98:f9:
d6:6f:4b:16:1a:c4:25:8f:c2:f1:ed:48:87:1d:5b:fb:e7:80:
98:28:a2:64:5d:6c:44:24:36:cb:a0:58:02:e4:de:2b:bc:95:
f6:46:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:47:35 2026 by rpki-client