Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: bLuntPpsaZ3vfLBw80OILdHEwTzp9+aCs5MIzXJQl5o=
Subject key identifier: 6E:79:C7:75:08:70:19:7A:DA:1A:5F:D2:7C:2B:23:A0:C9:F9:21:31
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 019D284D927F66EF955EEEEF0177F054D738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 038C
Signing time: Thu 26 Mar 2026 04:01:05 +0000
Manifest this update: Thu 26 Mar 2026 04:01:05 +0000
Manifest next update: Fri 27 Mar 2026 04:01:05 +0000
Files and hashes: 1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: D5fde4XiLU5/05B3XPw3F+UUP859l0XrmjOPCR8NGT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:92:7f:66:ef:95:5e:ee:ef:01:77:f0:54:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Mar 26 04:01:05 2026 GMT
Not After : Mar 27 04:01:05 2026 GMT
Subject: CN=6e79c7750870197ada1a5fd27c2b23a0c9f92131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c9:22:e3:58:c8:71:fa:ad:11:9a:6c:55:fb:
b0:42:ad:dd:05:68:c7:56:c8:85:0b:0a:da:e0:91:
eb:1f:40:4f:3a:a7:bd:29:c3:b6:43:39:a7:1d:4e:
11:d5:cd:c4:d9:76:f0:c6:4a:93:e7:44:6e:f1:00:
ab:17:33:4e:fe:ff:f4:4b:87:c7:98:61:2d:c7:8b:
5e:d3:ac:84:7b:4c:1c:02:ca:98:00:f1:1e:5b:57:
72:64:40:18:e8:04:72:8a:cd:11:ad:00:9e:02:53:
b1:2b:1c:63:03:79:34:74:ef:b5:f8:ea:c2:45:fb:
f8:ad:dc:6d:63:9a:a1:09:dd:30:5a:14:27:e0:76:
16:b9:9c:bc:d5:56:69:42:aa:0f:23:37:7c:ea:c3:
7f:c7:44:01:69:bd:c1:95:f0:be:b9:fe:98:9b:b7:
3f:54:6b:bf:f7:e7:9d:49:57:4a:93:6b:5f:ff:63:
2d:7b:86:a2:22:ed:c0:70:66:18:7d:63:d1:0b:87:
04:ff:5f:2a:cc:a6:04:ae:88:17:18:02:1a:1f:c7:
85:24:32:11:2b:f4:b3:04:05:f0:20:67:f5:d6:b9:
f1:85:bd:fd:69:48:e0:e9:ed:e6:28:74:a2:9c:03:
d1:89:31:57:82:e6:95:03:ca:54:6e:19:73:ac:6f:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:C7:75:08:70:19:7A:DA:1A:5F:D2:7C:2B:23:A0:C9:F9:21:31
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5c:1d:46:55:82:fd:cc:ad:a4:cf:6b:5e:37:8d:30:32:69:
88:7a:78:9c:de:3c:bc:ae:2a:79:09:7b:4f:bf:de:54:e0:13:
37:56:22:21:1a:c6:7e:a4:29:5f:21:70:4f:26:c7:de:24:d7:
12:8c:ed:c2:e7:fa:b6:a2:99:64:0b:0b:b1:24:8a:96:9a:2a:
47:ef:c4:bc:35:36:b7:c4:ab:ca:31:25:f4:fe:da:14:2a:db:
c7:7a:fd:c4:90:cf:33:f2:5a:8d:38:30:86:7f:2a:68:97:5c:
77:b9:79:5d:c6:d2:f8:54:4b:52:e2:f2:d5:a1:68:d6:dd:29:
0f:92:0e:7a:d8:e3:b1:b0:c8:7b:09:af:0f:f5:85:b7:0b:c2:
b9:06:f7:c5:27:5e:a8:52:4e:0a:c4:8d:8b:99:43:03:c0:37:
9a:11:85:6e:6a:60:bc:91:1d:30:d0:05:28:bf:9d:3d:c1:58:
c0:2c:0e:00:40:2a:62:67:b5:bc:83:a0:1e:fb:a6:a4:52:85:
3e:c9:df:c0:7e:8d:69:fd:07:21:48:fd:45:cb:26:b9:93:9d:
1d:ec:1e:3a:ef:63:c2:f5:3c:08:5e:5d:9d:99:f2:8d:c4:83:
c0:73:cd:e7:73:64:f1:4e:5c:30:72:b8:81:79:b6:bc:9e:b4:
6a:cc:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:17 2026 by rpki-client