Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: BZrBIDv/0NXrwku41I/DhLkTvUv7JHd2BX7HwMa3mj4=
Subject key identifier: 5D:49:61:30:25:84:7A:87:DA:92:32:22:F0:C6:6E:55:25:11:E1:A2
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 01A03B95DD35B41ED25DC850D02A0557B2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0EF4
Signing time: Wed 26 Aug 2026 01:01:12 +0000
Manifest this update: Wed 26 Aug 2026 01:01:12 +0000
Manifest next update: Thu 27 Aug 2026 01:01:12 +0000
Files and hashes: 1: 35C6AJOSNoz8sqN_-_bGrGZUKpA.roa (hash: APmpxtsjZwTYH+8Tnb5n7iPD+1J1/uTjo396nOTJWkg=)
2: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: MPYTVykN+4+c/UJ1YXWujbmle1biTR+OHzuOs2cPO+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:95:dd:35:b4:1e:d2:5d:c8:50:d0:2a:05:57:b2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Aug 26 01:01:12 2026 GMT
Not After : Aug 27 01:01:12 2026 GMT
Subject: CN=5d49613025847a87da923222f0c66e552511e1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:e7:a2:ae:e1:c9:b1:d7:30:cc:22:95:27:
9c:59:3a:e7:a4:17:c9:bd:3d:f2:1c:73:08:3c:f2:
7d:18:b0:dd:51:52:9a:2a:72:fb:d8:cf:1d:ff:97:
fc:33:bb:e6:a7:f0:93:1e:45:87:6b:0f:47:b1:99:
d4:bd:39:13:75:46:66:2d:1b:04:cd:3e:db:6b:d2:
f6:24:c2:1e:94:3f:c8:3a:b6:99:e3:01:24:51:be:
ff:c0:28:d0:5b:72:c2:d3:e9:bf:6c:5e:26:14:dc:
95:14:cd:65:ad:68:c6:d2:5d:d9:0a:16:49:8b:3b:
24:77:b3:3e:41:d4:02:b7:85:38:5a:7c:c0:94:12:
e6:d7:a9:0a:85:cc:f2:45:c4:27:ce:e2:8f:14:73:
40:c9:15:dc:8f:c1:89:32:ae:0a:c0:22:b5:7b:77:
8a:68:25:fe:c6:3e:67:f3:6f:a7:45:32:62:66:6d:
b4:e0:77:f7:b4:fc:c4:36:a9:a6:73:ed:d4:6c:35:
dc:be:b1:1f:37:01:44:85:69:23:53:5e:44:b1:ba:
97:fb:51:ae:1f:d4:1d:00:20:c7:3f:28:f0:cb:42:
70:7d:d5:cb:ea:60:18:76:0d:be:e4:19:52:9b:53:
b8:7a:d5:ce:77:eb:d5:ec:8f:26:82:dd:32:61:c0:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:49:61:30:25:84:7A:87:DA:92:32:22:F0:C6:6E:55:25:11:E1:A2
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:c4:ed:9c:af:b6:90:64:86:fd:8f:5a:5b:35:be:dd:28:
88:fb:6f:3f:1e:c4:fb:be:75:b6:4a:d7:e3:b0:b8:32:d9:72:
66:c9:05:fd:5e:dc:7d:a3:8a:0b:f5:ad:69:4b:1e:bc:26:b8:
85:ba:ba:17:88:76:c0:16:97:d3:04:52:ac:c7:f9:7c:16:d5:
0e:24:61:22:76:c3:33:86:60:87:d1:fe:a8:aa:ce:12:65:2c:
5d:ac:fe:48:d9:7e:7d:a2:19:63:b2:b0:40:33:e0:1d:45:98:
7b:d2:49:40:b7:54:cc:14:ec:78:89:44:33:2b:b6:6e:4b:cb:
c4:6f:a5:ba:7e:f8:50:0e:81:96:25:da:52:3a:3a:ba:9d:5b:
c4:56:07:e0:b7:0e:f1:cb:fc:ef:26:7b:a8:fb:4f:97:38:22:
1f:64:39:1c:f5:60:74:da:36:17:84:08:96:46:6a:18:b1:99:
94:43:1e:b6:90:2c:f5:a4:5b:8c:c4:ef:c1:2b:1b:6c:10:ba:
df:f1:c9:9a:1f:b0:27:b8:55:1a:1e:28:ac:b6:97:5b:03:86:
ad:bb:eb:7c:a5:98:9c:9b:3a:42:72:73:81:bc:2e:d8:c0:ec:
11:43:77:08:9e:89:f8:c0:79:10:b1:b5:b2:42:0f:e0:e1:2d:
39:c2:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:30:19 2026 by rpki-client