Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: /0fVxP+Rq17gR6aDZnbTRgOSHBrBhtTRXKzlasrOZOc=
Subject key identifier: 5D:14:C3:F1:FA:95:D7:E4:D1:88:3B:CE:73:83:7E:1D:0B:C0:71:0A
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 019D25F1205FDD933EDC49B3D12FBD2DE8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0D5A
Signing time: Wed 25 Mar 2026 17:00:52 +0000
Manifest this update: Wed 25 Mar 2026 17:00:52 +0000
Manifest next update: Thu 26 Mar 2026 17:00:52 +0000
Files and hashes: 1: 35C6AJOSNoz8sqN_-_bGrGZUKpA.roa (hash: APmpxtsjZwTYH+8Tnb5n7iPD+1J1/uTjo396nOTJWkg=)
2: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: zEx1TPffpG1fIMga5xo3HVWUgrnVPzwC/6KNvzCdwQk=)
3: ojCAlBieGgvtH-Amg5Pbx-kD3Ks.asa (hash: E8BQNyWryGM1yvv9Iab0H4klKvyW9tS+D+O7/6V8RiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:20:5f:dd:93:3e:dc:49:b3:d1:2f:bd:2d:e8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Mar 25 17:00:52 2026 GMT
Not After : Mar 26 17:00:52 2026 GMT
Subject: CN=5d14c3f1fa95d7e4d1883bce73837e1d0bc0710a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:44:83:d5:45:62:a2:1c:3b:1f:29:d0:1d:
34:77:be:17:4d:7a:89:eb:be:f2:cb:e3:3d:a6:33:
25:9d:75:d8:67:58:21:ec:31:2d:5c:7a:07:af:1b:
95:f1:4d:49:40:05:b4:87:bf:b5:04:0a:d6:76:3f:
f6:dc:10:79:41:9e:19:78:ed:88:37:d4:f2:2f:91:
2a:3a:ba:0c:72:75:71:38:5d:2f:2d:7f:31:36:f4:
7b:1f:aa:99:c3:0a:89:ee:cd:91:af:ab:06:c1:5e:
b5:78:a8:fe:4e:52:2e:64:e8:96:84:e5:04:aa:d8:
18:b4:68:25:d4:d5:d6:8b:39:81:19:48:8a:a7:67:
7c:94:fb:db:c7:0b:dd:fa:56:f9:f2:a9:77:40:9c:
01:01:32:da:7c:5f:4b:2b:9f:8b:e2:61:0a:99:e0:
73:6f:5f:8a:62:87:9d:e9:57:95:b8:32:42:f8:05:
2e:cd:41:5c:42:7c:41:c8:12:49:ae:a4:9a:e4:e3:
4f:85:28:9c:85:d7:fe:43:5f:bf:7c:e1:7e:dc:08:
6d:c4:30:d7:cb:6b:84:9f:ab:af:10:c8:78:a9:14:
34:58:a3:8a:37:71:2d:aa:7a:f9:57:ee:0d:8c:92:
bc:f0:ec:04:4c:21:71:d7:15:47:e0:d6:58:58:08:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:C3:F1:FA:95:D7:E4:D1:88:3B:CE:73:83:7E:1D:0B:C0:71:0A
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:be:69:86:b0:ec:f6:1e:23:b4:58:01:a0:0d:87:23:dd:25:
81:7c:98:db:ea:49:6d:2a:79:8f:7a:c5:c5:2a:f9:1b:0a:92:
16:64:ba:78:d3:2a:7d:a9:87:b2:10:f7:a3:5d:0e:24:06:53:
4b:1a:d6:7e:42:5e:e0:2c:47:f8:a4:dc:85:1a:f7:45:30:b7:
64:08:e3:59:33:f8:49:a7:a4:a8:f3:b0:b1:c5:98:c3:6f:51:
8b:fe:53:4b:ae:e3:d5:b5:10:6b:bf:b9:43:dd:37:16:91:06:
1e:34:ce:92:7e:ab:5d:87:e8:d8:20:a9:58:47:fd:42:e2:12:
a4:a8:0d:1b:d1:72:16:d6:3c:0e:3a:3a:26:50:a8:9e:aa:a3:
7c:5e:d2:e4:7b:e8:c5:d5:d3:bf:40:41:0e:ee:e1:b5:ab:d8:
18:36:f9:de:1f:21:4b:76:93:5b:f9:43:ec:f3:dd:8b:9a:57:
c5:ec:cc:34:65:72:50:58:99:d7:f7:07:45:6e:bd:1b:de:69:
ad:0d:b4:2d:4c:fb:a3:17:c9:da:7d:dc:c5:86:eb:a4:73:d4:
c2:4e:f2:df:c3:ee:45:a3:c0:1c:d4:bb:d7:cb:50:ce:3f:f7:
c8:d7:b0:f6:60:77:c5:3e:ca:db:ca:b3:17:99:39:e4:dc:40:
cb:d6:7b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:39 2026 by rpki-client