Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: SXbkvbajdxhKChJX8yIm0/1S9kuWmNaKT9p7GUO30mE=
Subject key identifier: 38:A5:1C:B6:5B:BB:C6:4D:BB:A2:D9:18:21:E6:C5:C1:F4:BF:9C:FE
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 019F9436E75ECB8F8EC7B6BF809A1B1F4E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 04CD
Signing time: Fri 24 Jul 2026 13:00:53 +0000
Manifest this update: Fri 24 Jul 2026 13:00:53 +0000
Manifest next update: Sat 25 Jul 2026 13:00:53 +0000
Files and hashes: 1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: dy+Cv1YDD3plnoB4d1soimI1Bd9UJci3pOGTQGSRHQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:e7:5e:cb:8f:8e:c7:b6:bf:80:9a:1b:1f:4e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Jul 24 13:00:53 2026 GMT
Not After : Jul 25 13:00:53 2026 GMT
Subject: CN=38a51cb65bbbc64dbba2d91821e6c5c1f4bf9cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:4a:fd:bb:53:80:e1:23:ef:c3:57:b3:af:
2f:43:53:44:dc:83:22:2d:c7:c3:4d:b1:5b:02:f2:
99:62:a7:32:f9:5d:c8:8e:ea:63:84:1a:88:35:62:
21:2c:2d:d1:65:95:9c:c1:c6:42:5f:de:1d:8d:43:
ee:ef:ee:20:4f:30:b3:5e:2b:87:07:73:b6:1b:e2:
5d:fc:89:65:d5:14:8f:ce:0e:82:16:2a:52:00:91:
2f:91:3b:88:6d:01:44:c4:bb:f3:e2:04:fc:f5:15:
19:a8:be:37:83:d8:6d:5b:85:2e:f2:36:bb:56:9d:
c5:be:80:2c:41:9e:25:a6:e1:fa:ca:c4:02:b0:ed:
f8:71:f6:e5:9e:ef:d9:6e:0e:22:9d:9b:65:5a:80:
0a:8b:27:76:49:43:95:1d:66:8a:14:61:ad:83:14:
8d:72:a3:70:99:a4:f2:f5:3c:5d:54:80:a3:ab:2a:
39:9f:90:4e:b5:94:8c:27:76:49:e5:c5:83:5d:2c:
10:a7:61:44:06:06:6a:b7:6f:d6:5e:19:73:45:ce:
30:7e:0c:a8:13:dc:a1:94:79:d9:f3:b7:c5:75:80:
b9:c3:b4:ac:d0:f8:22:ba:c5:09:a1:94:d2:ef:1b:
4c:0c:2a:46:d1:0b:3f:4e:44:7d:ee:85:c8:9f:b6:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A5:1C:B6:5B:BB:C6:4D:BB:A2:D9:18:21:E6:C5:C1:F4:BF:9C:FE
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e9:9f:0f:ef:5c:e4:e5:16:99:44:b5:7b:35:93:b0:42:9a:
f0:85:85:e3:c3:ae:ff:6f:1a:80:a2:58:57:c7:4c:68:2a:63:
f2:8b:f3:b0:e7:f1:41:72:8a:76:99:55:a4:d7:12:78:32:4f:
c6:5a:f8:11:04:72:50:c7:ce:4e:0e:65:e4:99:43:ca:a3:f9:
c9:10:a1:25:68:c3:d4:45:b7:92:d3:bd:98:56:a7:1f:3a:d0:
3f:8a:70:59:a2:19:6c:64:02:3e:ca:9f:2c:0c:12:4f:44:fe:
e3:0e:2f:18:5e:c4:7b:73:48:4a:02:a8:a5:c0:7c:df:07:90:
d7:b4:a3:6d:c6:2f:ae:50:b6:cc:a2:08:77:8c:2c:a7:50:72:
a2:1c:d0:a2:8c:99:08:14:de:73:58:13:0d:f8:bb:e1:17:bf:
df:d2:6e:b8:29:11:4f:23:e8:ec:d4:99:41:25:ed:c8:7d:5e:
7b:8f:4e:30:3d:39:76:75:e9:d7:26:bd:75:a7:c9:ad:21:67:
b0:11:0b:4e:03:53:9e:06:5d:c9:ea:10:44:99:45:a8:a3:7b:
00:a2:21:f4:66:4e:f3:60:72:6f:18:5b:cd:fe:2b:60:54:60:
60:11:71:50:2b:27:ca:06:44:bd:5b:16:17:95:1e:f4:8e:69:
96:c9:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:17:12 2026 by rpki-client