Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier: k6qypGrCCtH42/az7v7Z2+Jtl7RP9I8g7AyarRmx5eE=
Subject key identifier: B8:2B:F1:25:25:EF:6E:0D:12:AA:7A:2F:82:98:78:23:46:48:0E:12
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 019D33082630B2792641AF647E9E6C7254EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number: 1642
Signing time: Sat 28 Mar 2026 06:01:05 +0000
Manifest this update: Sat 28 Mar 2026 06:01:05 +0000
Manifest next update: Sun 29 Mar 2026 06:01:05 +0000
Files and hashes: 1: OBdFDRVC595sAnyB_0VmTmVJFWo.roa (hash: 28ttAFOYw0/3k0gD+y/7PAKtDPtrhHQLrlbHUNtynS0=)
2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: K79nwXkY6gQJFy2Ur5Sb8Hm+LV1usRJGpDV6rHh9uzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:26:30:b2:79:26:41:af:64:7e:9e:6c:72:54:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Mar 28 06:01:05 2026 GMT
Not After : Mar 29 06:01:05 2026 GMT
Subject: CN=b82bf12525ef6e0d12aa7a2f8298782346480e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5e:d3:ec:39:1a:de:f5:67:32:ba:33:9c:db:
cb:a2:c7:0f:ac:af:a1:46:c2:35:c1:aa:72:85:9b:
19:09:af:68:d5:74:71:06:1b:60:24:3d:0a:51:e5:
17:7c:7b:f8:2a:b5:b5:15:83:0d:30:d1:ef:4f:1e:
d0:d8:f8:94:fd:6f:cf:66:3a:07:61:1c:d3:dd:b9:
c1:5a:66:1b:e2:00:76:d5:0a:48:35:1c:2c:8d:da:
dd:73:0c:fa:51:61:32:85:0c:62:47:2c:91:f8:41:
fd:65:34:0f:5d:51:4a:90:af:ba:0c:aa:ef:3d:a4:
91:89:3f:81:1e:f2:1e:d1:9c:f5:5b:f6:db:38:0b:
d5:65:f4:cf:1c:7c:dc:64:e1:a0:de:af:66:53:67:
7c:dc:9d:d3:e2:1e:40:6c:aa:9f:2a:6c:09:22:eb:
3b:85:2d:ee:eb:a8:1a:f2:04:ad:1f:50:6b:dc:60:
b3:02:48:93:1c:d7:80:ca:76:76:09:1f:85:92:79:
16:78:38:73:c8:e9:e8:f5:b1:fd:02:95:aa:e6:3c:
2c:82:35:66:18:58:80:7b:49:ee:97:0e:e9:c7:07:
07:0a:be:ed:32:f8:02:3c:10:6c:be:8b:e8:5c:5d:
3d:63:b1:57:21:a7:b0:b2:48:7a:82:fa:d0:b1:35:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:F1:25:25:EF:6E:0D:12:AA:7A:2F:82:98:78:23:46:48:0E:12
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a5:dc:27:7f:73:2a:e9:92:89:8e:be:77:b7:35:8b:9e:5d:
03:4a:9e:67:58:d7:6f:ad:2d:fb:0e:69:8e:a2:f7:7d:a7:66:
40:4b:d4:60:3e:68:66:5c:b5:05:20:6f:e7:20:ed:46:5a:36:
30:55:75:59:17:0f:be:c0:de:ee:c9:25:6b:3d:92:7a:87:22:
ed:1e:1c:3c:91:bb:c7:96:42:7f:51:19:cb:ea:75:8a:53:c7:
4d:7c:2b:5a:f0:f8:0a:30:d9:31:fc:ad:d2:e4:3a:55:00:2a:
ca:e7:66:61:74:5c:aa:21:00:b1:e8:d5:1d:a1:ca:f1:49:10:
04:00:8f:a2:1b:18:81:4b:45:cb:88:95:f4:97:2c:dd:23:aa:
ae:64:cf:1b:4e:49:df:aa:0f:13:14:81:87:80:73:ec:a7:5d:
f8:0d:ce:81:3c:ac:72:7c:54:af:f9:50:6a:6b:9f:01:ab:f5:
f7:9c:38:4e:1b:90:2f:98:5b:23:ee:e3:a2:d0:ff:76:ae:8d:
d6:b3:f5:d6:01:0f:bc:ee:e5:b6:bf:cf:ee:cc:fd:0f:78:16:
5d:fa:dd:a3:8b:7d:a5:15:1e:ca:8e:e4:b1:2c:07:01:65:ce:
f2:e0:8f:43:77:66:cf:23:d0:63:c7:bf:38:b5:96:1a:09:9b:
f8:06:6d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zCCYwsnkmQa9kfp5sclTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjliZDhiYjQ5YTgwOTk2YjQ2MGY1MDI4ZWQ1MmE4ZTA1
N2MwYjEwHhcNMjYwMzI4MDYwMTA1WhcNMjYwMzI5MDYwMTA1WjAzMTEwLwYDVQQD
EyhiODJiZjEyNTI1ZWY2ZTBkMTJhYTdhMmY4Mjk4NzgyMzQ2NDgwZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV7T7Dka3vVnMroznNvLoscPrK+h
RsI1wapyhZsZCa9o1XRxBhtgJD0KUeUXfHv4KrW1FYMNMNHvTx7Q2PiU/W/PZjoH
YRzT3bnBWmYb4gB21QpINRwsjdrdcwz6UWEyhQxiRyyR+EH9ZTQPXVFKkK+6DKrv
PaSRiT+BHvIe0Zz1W/bbOAvVZfTPHHzcZOGg3q9mU2d83J3T4h5AbKqfKmwJIus7
hS3u66ga8gStH1Br3GCzAkiTHNeAynZ2CR+FknkWeDhzyOno9bH9ApWq5jwsgjVm
GFiAe0nulw7pxwcHCr7tMvgCPBBsvovoXF09Y7FXIaewskh6gvrQsTWbMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgr8SUl724NEqp6L4KYeCNGSA4SMB8GA1UdIwQY
MBaAFP4pvYu0moCZa0YPUCjtUqjgV8CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWIt
MDZiOGRmZTQ5OGJkLzEvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWItMDZiOGRmZTQ5OGJk
LzEvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaXcJ39z
KumSiY6+d7c1i55dA0qeZ1jXb60t+w5pjqL3fadmQEvUYD5oZly1BSBv5yDtRlo2
MFV1WRcPvsDe7sklaz2Seoci7R4cPJG7x5ZCf1EZy+p1ilPHTXwrWvD4CjDZMfyt
0uQ6VQAqyudmYXRcqiEAsejVHaHK8UkQBACPohsYgUtFy4iV9Jcs3SOqrmTPG05J
36oPExSBh4Bz7Kdd+A3OgTyscnxUr/lQamufAav195w4ThuQL5hbI+7jotD/dq6N
1rP11gEPvO7ltr/P7sz9D3gWXfrdo4t9pRUeyo7ksSwHAWXO8uCPQ3dmzyPQY8e/
OLWWGgmb+AZtrQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:07 2026 by rpki-client