Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier: h4lZV5HXH4YRICzGcP+E7GWz2nbQkYmw5ONXcxgho40=
Subject key identifier: B2:AE:07:51:3E:F5:69:74:84:AE:F9:FF:81:F8:ED:29:54:5D:52:14
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial: 019D28847C68CF6CA59C5F89DF73444CECF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number: 04B6
Signing time: Thu 26 Mar 2026 05:01:04 +0000
Manifest this update: Thu 26 Mar 2026 05:01:04 +0000
Manifest next update: Fri 27 Mar 2026 05:01:04 +0000
Files and hashes: 1: NzRA3D4Kn5TIzMbdeBRZj8-3TPI.roa (hash: CfqYoJORgk50J8/a4wFc3Mw6td5sedXHYSUR5haXaCE=)
2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: X1AyhZTm463IJ9LjzYbKfOVv3qHyQwzDIkA77nEqW7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7c:68:cf:6c:a5:9c:5f:89:df:73:44:4c:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Validity
Not Before: Mar 26 05:01:04 2026 GMT
Not After : Mar 27 05:01:04 2026 GMT
Subject: CN=b2ae07513ef5697484aef9ff81f8ed29545d5214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:fe:b8:ae:0b:77:59:f8:f9:62:29:07:da:
a2:53:35:b0:9e:26:1c:a5:db:ee:5a:42:e1:bb:64:
55:a3:1e:00:f1:ff:47:a8:56:3a:bf:e4:36:39:c1:
6c:6a:5c:36:8c:76:85:0d:db:f1:05:8c:23:3d:81:
99:52:83:dd:47:61:16:a6:fe:b8:ac:4c:d1:73:23:
61:53:4d:37:2c:2f:4e:61:b9:68:77:1b:c3:77:3e:
5e:0d:17:22:c0:cf:5b:9d:57:cf:8a:98:70:b8:86:
bd:85:4a:73:42:b3:48:ba:11:c6:56:c3:30:13:a7:
36:c4:65:88:6c:5e:bf:a4:f4:39:29:3f:b7:5b:3e:
be:6b:27:f4:8c:68:0a:05:1b:72:65:3c:e8:cd:31:
41:c5:25:74:8c:9b:21:ee:49:f8:f2:b3:f8:c3:35:
d2:ef:c8:6c:4c:7b:df:0b:51:8e:06:f6:dd:b9:b9:
2e:da:e6:db:e1:58:4a:20:7d:7e:41:ce:c7:74:95:
fd:f7:b7:96:73:f4:9b:b5:51:9e:54:9a:c4:4a:22:
a6:8b:6f:c4:4d:f1:76:a4:45:66:11:86:37:55:a1:
5b:02:61:8d:ca:93:b4:f8:b6:2b:50:45:3a:b8:c9:
03:bc:6a:8c:a6:ec:02:ba:b8:ac:1f:92:aa:e2:8f:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AE:07:51:3E:F5:69:74:84:AE:F9:FF:81:F8:ED:29:54:5D:52:14
X509v3 Authority Key Identifier:
keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ec:71:39:0c:8d:05:e1:49:35:fe:c7:9e:08:33:f7:8a:3b:
05:21:4c:2f:53:9c:0a:e5:3c:d3:f3:a6:e9:5d:4b:5a:59:ef:
6c:00:48:07:e6:bf:6b:37:ce:74:24:72:23:54:82:90:26:22:
47:88:31:14:f5:db:2d:ae:64:22:ac:dd:00:b9:77:b8:4b:3b:
00:be:ae:30:76:60:88:42:bb:80:d2:af:45:63:74:6d:e6:7a:
ca:08:04:f8:5f:9f:8e:63:c0:1c:d1:0b:1f:b0:9e:07:0d:34:
84:b6:cc:96:0c:8b:9c:82:52:eb:20:42:e4:83:5d:9d:70:a2:
a3:7e:36:b2:b7:f6:3c:b3:67:db:fa:7c:55:f1:bd:69:ec:d6:
cb:74:66:04:74:30:2d:e7:ae:7e:4d:d0:81:ac:77:61:02:56:
60:2e:f2:d5:d3:88:63:eb:f8:a3:1e:bc:7f:7e:20:f3:02:e9:
0d:86:fe:d4:f5:d4:79:8d:97:29:04:4a:e8:21:24:a2:7d:ac:
88:bb:5a:c1:cd:36:c5:06:a9:ac:fa:88:76:e4:80:b3:1c:73:
c7:54:62:00:2a:a8:10:d7:d0:0e:ff:36:17:68:74:f0:cc:e6:
5e:2d:eb:50:62:81:47:8f:4b:74:c2:d0:d5:ff:46:9f:a7:35:
02:0c:fc:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohHxoz2ylnF+J33NETOzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5
Y2RmYjYwHhcNMjYwMzI2MDUwMTA0WhcNMjYwMzI3MDUwMTA0WjAzMTEwLwYDVQQD
EyhiMmFlMDc1MTNlZjU2OTc0ODRhZWY5ZmY4MWY4ZWQyOTU0NWQ1MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLD+uK4Ld1n4+WIpB9qiUzWwniYc
pdvuWkLhu2RVox4A8f9HqFY6v+Q2OcFsalw2jHaFDdvxBYwjPYGZUoPdR2EWpv64
rEzRcyNhU003LC9OYblodxvDdz5eDRciwM9bnVfPiphwuIa9hUpzQrNIuhHGVsMw
E6c2xGWIbF6/pPQ5KT+3Wz6+ayf0jGgKBRtyZTzozTFBxSV0jJsh7kn48rP4wzXS
78hsTHvfC1GOBvbdubku2ubb4VhKIH1+Qc7HdJX997eWc/SbtVGeVJrESiKmi2/E
TfF2pEVmEYY3VaFbAmGNypO0+LYrUEU6uMkDvGqMpuwCurisH5Kq4o/sgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKuB1E+9Wl0hK75/4H47SlUXVIUMB8GA1UdIwQY
MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct
OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz
LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuxxOQyN
BeFJNf7Hnggz94o7BSFML1OcCuU80/Om6V1LWlnvbABIB+a/azfOdCRyI1SCkCYi
R4gxFPXbLa5kIqzdALl3uEs7AL6uMHZgiEK7gNKvRWN0beZ6yggE+F+fjmPAHNEL
H7CeBw00hLbMlgyLnIJS6yBC5INdnXCio342srf2PLNn2/p8VfG9aezWy3RmBHQw
Leeufk3Qgax3YQJWYC7y1dOIY+v4ox68f34g8wLpDYb+1PXUeY2XKQRK6CEkon2s
iLtawc02xQaprPqIduSAsxxzx1RiACqoENfQDv82F2h08MzmXi3rUGKBR49LdMLQ
1f9Gn6c1Agz80Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:33 2026 by rpki-client