Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: XpZpMvlmBYspB8WT2OYYDVhiJTn/p633y47ntwgEKnc=
Subject key identifier: 2F:45:8C:B3:20:E8:A3:EF:9C:8E:FA:EA:D1:12:64:44:55:3A:85:9E
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 019D3752E31FE903F26E8D8C5C550CA89582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0D63
Signing time: Sun 29 Mar 2026 02:01:11 +0000
Manifest this update: Sun 29 Mar 2026 02:01:11 +0000
Manifest next update: Mon 30 Mar 2026 02:01:11 +0000
Files and hashes: 1: 35C6AJOSNoz8sqN_-_bGrGZUKpA.roa (hash: APmpxtsjZwTYH+8Tnb5n7iPD+1J1/uTjo396nOTJWkg=)
2: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: AoUWWVqQDfnPQwBrWhp7cZV3g7Gr7985sROALhZUOxM=)
3: ojCAlBieGgvtH-Amg5Pbx-kD3Ks.asa (hash: E8BQNyWryGM1yvv9Iab0H4klKvyW9tS+D+O7/6V8RiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e3:1f:e9:03:f2:6e:8d:8c:5c:55:0c:a8:95:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Mar 29 02:01:11 2026 GMT
Not After : Mar 30 02:01:11 2026 GMT
Subject: CN=2f458cb320e8a3ef9c8efaead1126444553a859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c9:07:c2:eb:33:f0:ea:12:71:af:da:4e:34:
01:ec:ad:a1:08:d2:52:d2:b5:9d:42:62:a4:e1:29:
2d:32:48:03:dd:b0:d1:34:d7:ab:21:d4:bc:47:cd:
f4:e8:de:0c:70:d5:e7:d1:6d:12:a7:5e:bc:3d:cf:
06:dc:37:16:80:2f:c9:db:1f:88:5c:9d:c9:40:14:
53:06:17:a6:60:60:6b:81:73:0d:89:13:e7:76:d0:
8e:5c:8f:37:09:a3:47:32:32:2a:e6:48:a6:4a:c6:
7c:b7:02:92:4d:f3:c3:85:42:0a:43:78:29:59:9f:
0a:e0:fe:38:dd:5d:11:ef:2a:87:02:24:de:c9:3e:
74:31:0c:4e:79:68:e9:d7:f7:b1:4d:d5:e4:ff:74:
57:ae:93:a7:68:5c:69:5e:3f:29:f5:e3:02:9a:78:
b3:57:a0:91:ed:8f:ee:0a:d4:9d:2f:2c:8b:7b:ac:
30:cb:72:cf:64:7d:e8:c5:00:5c:6e:ea:fe:ce:c4:
56:92:fa:e0:ba:f7:4a:3a:f4:33:85:2a:a1:05:b6:
cc:6a:c3:9d:57:4b:35:a8:51:7e:f4:bf:e7:93:54:
ab:bb:c5:b9:4a:39:ea:07:5a:29:53:3b:62:55:53:
8c:e7:86:80:8d:6d:5b:a4:f7:02:da:e4:37:f9:6e:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:45:8C:B3:20:E8:A3:EF:9C:8E:FA:EA:D1:12:64:44:55:3A:85:9E
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:31:aa:f1:2c:39:9e:15:fd:b7:49:2a:8d:03:6b:36:71:ce:
79:85:14:04:ea:58:1a:df:7d:6d:20:3b:b0:45:2c:16:ff:6c:
49:22:09:14:70:70:c9:50:d7:ce:32:8f:97:a2:70:69:1c:6c:
f1:05:d1:0f:bf:73:f3:e4:99:8c:f1:c8:fa:e0:25:a1:a4:12:
11:6e:dc:a9:5f:7c:af:28:fc:55:6c:29:97:00:0d:06:eb:4e:
d7:8a:02:1c:cd:3b:28:67:d9:6a:de:32:84:27:16:83:21:35:
a0:6d:e2:58:39:48:00:f2:ca:cb:b5:89:3c:c5:21:1d:36:70:
fe:d4:8f:23:70:e6:4a:6d:f8:19:10:c4:86:d2:79:1d:24:e4:
dc:99:3b:43:e2:00:60:d9:81:d4:fd:e3:fd:e4:63:2c:90:01:
2e:1f:c5:b5:f2:f1:79:b9:65:85:d5:d2:e9:ef:20:76:6c:0e:
e2:96:df:fd:a4:3a:82:6d:7d:dc:72:14:ba:2e:45:65:e5:66:
7f:35:8c:19:92:4d:27:f9:c8:9d:f1:31:29:72:21:0b:a4:d9:
97:f1:f0:61:12:9a:f0:11:11:d1:e8:06:1f:ad:cd:8b:99:b2:
08:fa:eb:4e:a3:fb:3e:87:52:d2:64:60:19:7f:93:be:1b:78:
b9:1e:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:54 2026 by rpki-client