Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: 81rGvl+zSnO1K4Ad9HttQVlEZNPCiVjQ5saOAw0XAgQ=
Subject key identifier: 84:4C:84:55:34:93:DE:8F:53:CF:06:94:82:4A:0C:40:3E:66:95:12
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 019F1265291311141A62A906419DB7F69889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0E59
Signing time: Mon 29 Jun 2026 08:00:47 +0000
Manifest this update: Mon 29 Jun 2026 08:00:47 +0000
Manifest next update: Tue 30 Jun 2026 08:00:47 +0000
Files and hashes: 1: 35C6AJOSNoz8sqN_-_bGrGZUKpA.roa (hash: APmpxtsjZwTYH+8Tnb5n7iPD+1J1/uTjo396nOTJWkg=)
2: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: lf9w3NbIrdSDKcpgdap3BsfzdELR5bcPrTHUZstmMKU=)
3: ojCAlBieGgvtH-Amg5Pbx-kD3Ks.asa (hash: E8BQNyWryGM1yvv9Iab0H4klKvyW9tS+D+O7/6V8RiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:29:13:11:14:1a:62:a9:06:41:9d:b7:f6:98:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jun 29 08:00:47 2026 GMT
Not After : Jun 30 08:00:47 2026 GMT
Subject: CN=844c84553493de8f53cf0694824a0c403e669512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:25:70:e5:7e:fb:6d:a1:3a:f3:9f:1f:4b:
4c:30:c4:c5:3c:62:02:72:67:75:89:c0:40:76:03:
a7:81:fe:a2:3a:96:83:ee:6e:0e:c2:73:14:a5:96:
af:db:eb:8b:0e:7b:ca:50:67:e5:cd:c2:43:f4:1f:
21:13:87:dc:ab:dd:0a:55:0b:9f:7a:8e:82:c9:5c:
71:94:f1:11:85:70:b6:4e:c2:ae:82:4f:67:a5:9b:
75:77:06:28:3f:32:ce:45:94:ca:ab:ea:2e:88:14:
fe:17:b6:eb:ba:7f:ef:55:51:a4:ac:e9:4f:56:45:
c5:4e:fe:34:50:7c:23:ee:3c:55:d8:6a:84:47:b9:
f3:74:86:40:e6:45:0e:cd:a4:93:33:88:e8:c7:44:
52:e4:01:e5:6d:9f:78:bd:01:78:d0:5c:a1:22:6a:
37:fb:58:99:6b:d4:fe:65:7e:f1:64:7c:7c:ac:80:
b8:b4:ac:d3:bd:7d:b2:87:5b:ac:9e:6b:f9:77:fa:
1d:fa:16:b5:6a:ad:42:a8:9d:b1:5b:8b:ed:e1:5e:
e1:54:3f:d6:95:57:c6:ff:06:4d:43:98:03:e6:5a:
ce:32:2d:cc:97:71:49:a8:16:9d:47:18:ea:51:86:
29:b5:e7:b3:36:18:6d:7d:a2:6c:78:66:df:34:f4:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4C:84:55:34:93:DE:8F:53:CF:06:94:82:4A:0C:40:3E:66:95:12
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e6:f6:9c:72:6a:b3:15:f8:7f:ff:27:b3:cf:13:8f:21:6f:
af:d9:67:09:41:f2:c4:ae:69:44:95:5c:81:0f:e7:c1:70:34:
c7:1a:11:f8:c3:9a:48:f2:ce:af:df:86:b1:34:43:ca:51:1d:
67:97:55:e7:85:47:3e:b5:16:fd:83:e8:d4:f7:6d:5b:93:88:
83:f8:67:84:cf:8e:b2:81:fd:b9:f1:c9:56:1c:80:4c:2b:d0:
18:df:7d:f4:4a:8d:0e:77:b6:44:28:b6:0e:a1:45:3f:a3:42:
06:22:78:9b:ac:6b:2e:8e:aa:8e:d9:6c:e9:83:3e:fb:23:97:
82:b1:4e:fd:1b:ae:5f:73:33:d5:b1:d5:f9:1f:d2:81:02:f9:
b0:b6:77:3c:ce:df:e5:7b:c0:d4:eb:3d:fe:4e:bd:71:9b:14:
12:0f:0b:d7:63:b8:ed:a5:d8:c4:d3:ac:2e:5f:ff:9c:58:76:
a7:8a:10:01:b2:cf:f5:0b:c0:f7:bf:e9:b4:2f:a0:30:69:34:
04:c2:ee:74:de:70:87:97:2c:6b:1f:50:76:92:74:1f:b6:b3:
76:9a:b6:87:8f:26:94:fe:d8:62:cf:af:6c:7a:ea:5d:5a:a8:
56:7c:fe:04:9b:11:83:35:59:89:d4:6a:76:14:e6:24:31:e2:
a9:c3:12:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:33 2026 by rpki-client