Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: Jo9E6mwRvl22vNq8AXZ+XXspeh5KNl24ofEDuiiw5KA=
Subject key identifier: 8E:CA:AA:89:7E:E1:D5:39:D5:E4:8D:E0:05:CD:B4:8B:EB:D7:0A:AC
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 019F91A3ED13D5603C3CCABCB39B4E597FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0E9C
Signing time: Fri 24 Jul 2026 01:01:06 +0000
Manifest this update: Fri 24 Jul 2026 01:01:06 +0000
Manifest next update: Sat 25 Jul 2026 01:01:06 +0000
Files and hashes: 1: 35C6AJOSNoz8sqN_-_bGrGZUKpA.roa (hash: APmpxtsjZwTYH+8Tnb5n7iPD+1J1/uTjo396nOTJWkg=)
2: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: 9KKkkH4xZ8MxqO7l2o0QOI8QHdoXvaGeZbFLr7o9OF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:ed:13:d5:60:3c:3c:ca:bc:b3:9b:4e:59:7f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jul 24 01:01:06 2026 GMT
Not After : Jul 25 01:01:06 2026 GMT
Subject: CN=8ecaaa897ee1d539d5e48de005cdb48bebd70aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:9d:ee:a3:4c:79:3c:d2:d1:ca:a9:4b:fb:
39:ee:1f:e7:8c:e1:c4:24:a5:e0:5c:b2:95:57:ef:
5e:b5:7b:60:c8:51:a4:d0:eb:ec:47:26:d2:59:68:
c8:f4:35:2c:89:cd:f5:cf:b9:68:08:4c:7a:2f:92:
08:40:d8:92:98:db:03:b7:03:c4:4f:6a:49:3c:b8:
76:e4:ce:1d:36:dc:3e:38:91:a0:9c:4e:81:01:fd:
75:9f:62:5a:4c:b5:b6:42:a8:4d:a5:28:23:a9:c9:
aa:ef:da:ec:a9:22:ee:e5:2f:8f:d8:c6:4b:87:cc:
4f:d3:aa:d2:54:61:8d:89:17:e3:b0:76:00:c9:78:
4b:5e:7a:18:f4:ab:c1:d6:83:90:58:2f:da:1d:ff:
52:46:94:87:63:8e:5f:a5:7d:78:a0:9e:e3:de:3d:
a7:48:76:cd:9a:58:80:82:d7:59:59:bc:01:52:5e:
b0:a3:b1:c4:f8:f3:22:b9:29:cb:fa:d3:27:f6:30:
e7:8e:e3:17:50:10:d4:dd:20:55:e4:e7:c3:a1:29:
6a:6a:e1:a3:3b:f2:b8:0b:ad:43:fa:13:fb:be:f6:
5b:03:04:bc:6e:39:6c:4e:cd:27:7c:4f:09:17:ae:
b3:5e:da:23:c4:d9:55:93:fd:90:03:0c:9e:74:2f:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CA:AA:89:7E:E1:D5:39:D5:E4:8D:E0:05:CD:B4:8B:EB:D7:0A:AC
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d7:39:bd:7b:c3:23:ce:37:1b:1c:9b:bc:41:eb:dd:04:6c:
eb:3f:bc:72:a0:43:69:5f:69:25:db:1d:60:44:3a:a1:14:4c:
26:09:80:d2:15:33:db:e2:32:85:6f:92:51:cd:83:a5:38:64:
14:b4:2f:57:48:8b:c6:94:9c:25:ac:58:c5:d5:8d:a4:19:27:
ff:18:d7:c9:40:b9:1c:d8:68:26:3d:8b:c5:d6:78:12:eb:2b:
82:cf:21:d7:c2:04:0b:3b:35:3f:78:30:40:d1:0e:01:86:e0:
69:97:1e:cf:6e:ed:d1:c7:01:8e:7a:25:1b:be:b7:9d:fb:1e:
8d:b9:f3:fc:76:82:25:c8:eb:e9:43:95:cf:65:99:89:26:64:
ab:d8:75:f8:f8:a8:04:78:cf:b1:67:67:0c:b2:fd:10:76:7a:
99:9e:81:4f:bd:6f:fa:3d:23:7a:c7:e8:34:cb:e8:e5:ff:f2:
0d:51:8a:80:99:1c:a0:7f:82:1c:34:73:fb:a9:c5:52:45:66:
11:b9:a8:a6:55:8c:18:14:f7:29:00:0a:4e:4d:24:c9:d5:42:
9c:7e:94:fc:be:48:bd:5a:06:b1:b5:f5:ac:cb:61:1c:15:ae:
d2:84:1c:17:c4:44:5e:c9:c0:aa:ed:00:c6:c6:dc:2e:c9:0f:
dd:66:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:34 2026 by rpki-client