Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File: imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier: 3VZVZL8bdR4W7Gu18kDplVtbc2kNEYBgvADDiEjS01o=
Subject key identifier: 84:72:6B:28:F1:C1:18:A9:A7:64:5B:84:62:21:95:51:CE:F2:DD:9D
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer: /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial: 019D284DDEC9167B0CB768D04E0B44B44724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 04:01:24 +0000
Manifest this update: Thu 26 Mar 2026 04:01:24 +0000
Manifest next update: Fri 27 Mar 2026 04:01:24 +0000
Files and hashes: 1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: 4y4G7wcl2Qo9Ma4iGsD2QccII2QoZrvziJpcaTj3OrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:de:c9:16:7b:0c:b7:68:d0:4e:0b:44:b4:47:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Validity
Not Before: Mar 26 04:01:24 2026 GMT
Not After : Mar 27 04:01:24 2026 GMT
Subject: CN=84726b28f1c118a9a7645b8462219551cef2dd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:63:ab:c0:d3:2f:c8:bd:7a:61:7b:4f:ca:
9d:7a:27:d6:68:ef:66:aa:00:11:c2:49:21:43:fa:
29:ca:bb:61:21:c3:f9:d2:de:fa:2f:9f:36:cb:73:
b9:7c:d5:f2:04:f9:bd:7c:0e:9b:b1:bb:7a:5d:e1:
29:e7:50:6b:3f:a9:16:7e:7b:d8:33:44:0b:3a:c3:
a3:fe:bf:40:ed:9e:ce:dd:f3:a3:56:36:5f:ff:3a:
35:79:db:23:2e:9c:1f:e7:ab:fc:6f:b8:07:ab:9f:
32:42:7f:77:1b:f2:d0:85:ba:e7:80:b6:b2:ae:6f:
52:e5:f7:e1:9b:d4:1e:c0:e5:b1:1c:b8:f1:a2:68:
b9:68:30:60:49:38:5f:10:92:54:f6:81:05:79:7d:
08:19:7a:aa:f8:ad:31:08:61:a7:57:e4:69:d9:88:
41:18:af:83:64:2a:69:9b:6d:9b:88:fc:db:77:79:
8c:d0:e5:18:36:8d:30:c9:8f:af:9a:49:22:c7:0e:
99:3e:cc:63:c3:3e:01:b5:ee:9b:b1:7e:c2:33:2e:
e0:ba:0e:96:d5:24:4d:3c:76:f7:ea:50:dd:0c:0a:
ad:b6:be:75:95:e1:e8:77:d0:f7:e0:3b:89:a0:02:
96:88:c4:5e:24:41:92:95:a5:50:e7:09:a7:b5:ce:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:6B:28:F1:C1:18:A9:A7:64:5B:84:62:21:95:51:CE:F2:DD:9D
X509v3 Authority Key Identifier:
keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:47:e4:47:a2:e5:9d:c5:33:54:d2:8a:cd:29:0b:42:bf:84:
81:91:ce:52:b0:b7:03:e7:08:2a:68:f6:86:da:f5:e6:9a:31:
a6:5d:5a:99:03:43:6e:cc:79:2c:e3:c6:00:16:7a:e7:f6:29:
24:aa:eb:7f:0a:2a:7b:f7:9f:54:be:64:e0:d3:b3:d1:14:20:
91:26:f8:4f:09:67:04:89:02:1e:de:11:f5:65:ce:e6:a1:06:
7b:e0:09:fd:f8:f3:a9:b9:fc:46:eb:86:41:5c:b1:ec:e9:6c:
c9:20:6e:37:dd:e3:ad:3b:86:13:bf:1e:b7:1c:78:72:ed:12:
97:81:ed:8e:89:0c:d5:a5:76:a5:8e:b7:6e:6c:50:87:a9:47:
58:0d:d3:f5:7e:89:e7:03:ab:5a:9c:24:dd:84:e9:0d:f1:67:
91:f3:11:69:8d:b4:d3:43:32:c4:f5:f1:58:c5:de:48:34:1e:
9a:98:81:e8:5b:a0:83:40:01:27:46:c7:5d:d4:86:1c:37:e8:
f9:d2:06:c0:0f:3b:24:fe:8d:ae:cb:d4:f2:be:4e:7b:68:30:
c6:5e:ff:f3:5f:94:e3:9f:76:95:c1:ff:ad:e6:1e:a2:93:e2:
34:af:81:e2:8c:3e:dc:6b:c7:9d:ff:46:d5:be:e9:50:32:72:
1a:46:aa:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTd7JFnsMt2jQTgtEtEckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNmEzNDExNTgzZTI2MTQzMzQ5MmU1MDQ3Y2YzMWM0NmMz
ZDJjMWQwHhcNMjYwMzI2MDQwMTI0WhcNMjYwMzI3MDQwMTI0WjAzMTEwLwYDVQQD
Eyg4NDcyNmIyOGYxYzExOGE5YTc2NDViODQ2MjIxOTU1MWNlZjJkZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIJjq8DTL8i9emF7T8qdeifWaO9m
qgARwkkhQ/opyrthIcP50t76L582y3O5fNXyBPm9fA6bsbt6XeEp51BrP6kWfnvY
M0QLOsOj/r9A7Z7O3fOjVjZf/zo1edsjLpwf56v8b7gHq58yQn93G/LQhbrngLay
rm9S5ffhm9QewOWxHLjxomi5aDBgSThfEJJU9oEFeX0IGXqq+K0xCGGnV+Rp2YhB
GK+DZCppm22biPzbd3mM0OUYNo0wyY+vmkkixw6ZPsxjwz4Bte6bsX7CMy7gug6W
1SRNPHb36lDdDAqttr51leHod9D34DuJoAKWiMReJEGSlaVQ5wmntc7H8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRyayjxwRipp2RbhGIhlVHO8t2dMB8GA1UdIwQY
MBaAFIpqNBFYPiYUM0kuUEfPMcRsPSwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yODI5NzQtMzdmYi00ZDg1LTkyYmYt
NzA5OGE3YTUyYzdlLzEvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yODI5NzQtMzdmYi00ZDg1LTkyYmYtNzA5OGE3YTUyYzdl
LzEvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkfkR6Ll
ncUzVNKKzSkLQr+EgZHOUrC3A+cIKmj2htr15poxpl1amQNDbsx5LOPGABZ65/Yp
JKrrfwoqe/efVL5k4NOz0RQgkSb4TwlnBIkCHt4R9WXO5qEGe+AJ/fjzqbn8RuuG
QVyx7OlsySBuN93jrTuGE78etxx4cu0Sl4HtjokM1aV2pY63bmxQh6lHWA3T9X6J
5wOrWpwk3YTpDfFnkfMRaY2000MyxPXxWMXeSDQempiB6Fugg0ABJ0bHXdSGHDfo
+dIGwA87JP6NrsvU8r5Oe2gwxl7/81+U4592lcH/reYeopPiNK+B4ow+3GvHnf9G
1b7pUDJyGkaqeQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:32 2026 by rpki-client