Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: Zn65hdtekzQUV7wrpBsbSAGFyQfz+bOSV2xvbv3ozx4=
Subject key identifier: 96:52:64:FF:66:6B:F6:1F:B1:28:34:6A:61:53:61:F1:7F:32:BF:5A
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 019D284D34E85F1C8E6F77E3DF5F729C924F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 0773
Signing time: Thu 26 Mar 2026 04:00:41 +0000
Manifest this update: Thu 26 Mar 2026 04:00:41 +0000
Manifest next update: Fri 27 Mar 2026 04:00:41 +0000
Files and hashes: 1: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: nyu6ohaz3Bvtbf7zWIHprK1loOtS+9Rn1+jMF0F2gfE=)
2: yYkIK7iiHzx2jAmuALfuoXQn_Is.roa (hash: gxk/AWSXI5drD+6qtBL8cwOZXbNZIUQAyoeMR1t9KzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:34:e8:5f:1c:8e:6f:77:e3:df:5f:72:9c:92:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Mar 26 04:00:41 2026 GMT
Not After : Mar 27 04:00:41 2026 GMT
Subject: CN=965264ff666bf61fb128346a615361f17f32bf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:4b:c7:be:84:d7:c3:da:72:ef:ed:2c:80:
ed:41:b0:e8:86:4d:0c:65:8f:56:5a:51:f6:7c:06:
49:3b:dc:ac:d7:4d:8e:d4:d7:db:cf:a6:a2:28:10:
94:94:81:55:25:ee:45:91:12:33:ef:e7:de:b4:8b:
27:45:9b:e2:a8:b0:53:8b:ac:67:4b:d7:b0:8f:52:
40:81:0e:25:22:b7:96:64:7f:d7:4b:b6:d4:f5:04:
84:01:52:d1:63:93:d2:8c:18:9e:76:ff:6d:45:ad:
95:28:ed:8f:8d:41:e0:0b:81:6e:f7:7e:a9:62:57:
68:76:bc:4e:c6:6f:11:91:de:42:af:3e:1d:01:6f:
b6:27:fd:16:3c:64:2c:c3:32:ca:4a:4e:00:fe:61:
39:5c:a0:26:a7:5a:7a:62:0b:0f:f0:3b:9b:1f:c7:
00:73:26:cc:fa:5b:ad:c1:3f:69:63:7b:24:ca:af:
f6:90:cb:e8:c1:97:28:5b:2e:1a:85:3d:6c:f3:01:
6a:06:41:dd:3f:9a:c2:f8:71:73:3c:93:6b:64:2c:
2d:14:d6:ef:f7:c1:3c:d1:7a:0b:8c:05:d9:86:5e:
45:e5:9c:7f:60:e5:5a:66:12:61:a2:26:ff:7b:d1:
c8:0f:fd:d0:d4:bc:51:59:fb:2a:cf:85:db:72:05:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:52:64:FF:66:6B:F6:1F:B1:28:34:6A:61:53:61:F1:7F:32:BF:5A
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b4:f4:13:aa:6a:8b:e7:03:76:c8:60:2a:b2:7e:7d:bb:4f:
57:df:4b:19:e4:d7:e7:45:fd:08:7a:db:2b:52:50:af:74:30:
55:35:9c:0b:06:d3:5a:0d:6d:ca:91:39:0f:c0:39:10:7f:ee:
44:a6:be:f5:62:ad:b8:ee:51:99:24:b6:41:2f:1f:1e:7d:76:
f1:a1:9c:24:6c:c4:83:cf:bb:72:39:17:ae:0e:87:32:44:66:
6e:e3:6f:c6:91:fb:ab:f2:27:ec:b8:24:cc:76:11:30:d8:e7:
82:1b:6e:e7:a7:c3:eb:ec:af:98:b2:0c:61:33:63:ea:67:ac:
83:cd:12:9a:d6:d3:26:74:2d:75:bb:cb:a0:42:5e:0a:cc:68:
89:09:83:ad:94:77:d4:19:c1:0a:41:4d:b4:50:33:c9:c7:68:
ff:0e:f0:52:a8:a7:90:7a:f4:c0:99:a7:91:a4:1f:06:7d:ee:
2a:1f:6e:e0:c3:fd:8d:73:34:0f:24:f5:bf:81:e3:3f:99:f0:
39:43:b9:6a:76:be:65:37:2c:a3:df:60:f5:24:41:d2:44:17:
a3:6d:5b:1e:13:a1:b5:dd:b8:bf:4d:32:69:18:f2:29:11:33:
f0:9c:a8:84:c4:0e:78:4f:de:38:b3:54:71:2c:c5:bb:81:03:
e9:78:22:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:51 2026 by rpki-client