Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: jV9/J08y+whUPGkFVv4oAm8Ylca1k9RQr4f1wxac2aE=
Subject key identifier: 20:DA:D4:CF:F2:B1:48:77:6B:25:D1:FF:A1:C6:CD:98:CF:76:2F:0F
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 01A10512F1F494388EA58CD0796675DD437B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 058C
Signing time: Sun 04 Oct 2026 04:01:29 +0000
Manifest this update: Sun 04 Oct 2026 04:01:29 +0000
Manifest next update: Mon 05 Oct 2026 04:01:29 +0000
Files and hashes: 1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: SqTYoJVy8oaIJPvr1l2FCvq6GjIWuIx26dSglNL9sXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:12:f1:f4:94:38:8e:a5:8c:d0:79:66:75:dd:43:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Oct 4 04:01:29 2026 GMT
Not After : Oct 5 04:01:29 2026 GMT
Subject: CN=20dad4cff2b148776b25d1ffa1c6cd98cf762f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:98:90:38:29:e5:2c:25:88:2c:64:2f:a6:9d:
f5:48:95:17:62:84:d1:a8:13:40:da:02:7a:02:9d:
cc:3d:7c:1d:f7:fe:cf:99:3d:e9:ef:c7:cd:11:f2:
34:4f:12:ff:d9:6d:3c:02:9f:84:04:ea:e8:4d:67:
5f:dc:19:65:38:ab:35:80:79:46:b7:5f:0e:4e:38:
7e:62:64:b6:85:e5:f0:e9:e8:49:21:1a:80:8b:90:
cf:d3:5a:26:1b:4c:2b:f1:ca:d4:70:bf:aa:67:68:
0a:60:19:66:af:29:5c:7b:17:45:84:3b:c8:9d:e2:
7b:59:ff:10:a5:f2:fb:0b:67:6b:b9:8e:6a:c2:ef:
dc:61:ba:37:96:53:7c:f5:e5:cd:ed:37:56:c5:e8:
fb:9c:2b:8f:e8:d9:46:25:4e:60:e6:9c:ed:de:00:
6c:56:d8:26:56:3e:bd:89:bf:1d:3b:92:be:ae:f1:
9c:17:4f:a2:57:21:3e:fe:ca:66:d5:99:99:f8:12:
f4:a0:b5:9f:d5:43:7b:69:7c:5a:be:d1:e8:d4:f0:
5c:d0:f6:d8:55:9a:bb:0e:0f:b3:80:0a:57:71:e9:
79:7c:08:92:fa:3c:ff:43:a4:10:1d:89:c9:79:93:
a7:8a:65:7e:e5:6d:b5:a1:ec:9a:75:54:b3:a1:6a:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DA:D4:CF:F2:B1:48:77:6B:25:D1:FF:A1:C6:CD:98:CF:76:2F:0F
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f1:75:22:ae:a9:82:d0:bc:ee:95:4c:36:7e:f8:8f:5d:39:
b8:9f:df:40:36:9b:04:04:a8:79:84:aa:66:62:51:a9:e4:ef:
69:0d:9b:de:66:e9:7d:2a:ee:fb:ee:0d:0e:69:89:c8:3f:08:
c6:12:aa:89:1e:d9:12:cb:1b:60:33:5d:ba:d6:17:4f:4b:63:
8c:8b:34:e1:27:63:1b:2a:41:15:23:7c:3a:3d:81:f3:c6:b2:
fc:ee:85:fe:16:f3:16:a7:4b:05:b1:bb:a0:48:21:a5:1f:56:
54:4a:d3:e3:58:36:4d:0f:4f:b1:62:90:41:df:5f:54:a9:cd:
85:e1:01:41:0c:a0:60:d0:e9:7e:3f:a8:16:4e:5f:fc:e8:f3:
10:f3:aa:d4:b4:1d:8d:97:ec:87:5c:94:c8:75:8e:9a:ad:88:
c5:5a:e1:4f:e1:45:f1:ce:6d:67:db:9d:59:1d:0e:ce:8b:8b:
b9:ec:0d:c9:2d:b1:d3:95:0a:d9:69:f1:5c:eb:eb:de:c9:a8:
ad:ad:3d:d0:f5:b6:45:59:88:00:4c:53:3e:cf:21:c5:e4:dd:
44:5e:41:e5:47:1a:73:d8:6f:f4:22:18:09:0d:bf:f8:d5:c4:
5f:d8:e3:05:24:ff:df:69:ab:ba:01:46:29:73:c7:33:8b:40:
17:5b:d5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:10:17 2026 by rpki-client