Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: u+mmUj/tcjf7nlGu7Kj4gerNvBm3u+vERJYDDGTVJuM=
Subject key identifier: BE:95:CC:25:31:B3:88:E3:45:FF:BD:2C:16:C9:1F:4C:84:52:E9:B1
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 01A0CE90FDC8C02D9372494D7BCC26FDE430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 0BB6
Signing time: Wed 23 Sep 2026 14:00:03 +0000
Manifest this update: Wed 23 Sep 2026 14:00:03 +0000
Manifest next update: Thu 24 Sep 2026 14:00:03 +0000
Files and hashes: 1: 0r_UE69prseODZzygBvCxia-3X0.roa (hash: gkr4fLf/h/n+t25YUpdj0dN1J2aUCJ0sU9K4sKPOSZA=)
2: 1-0EnCQalliPsgsGf-YDpvuy83p8.roa (hash: vws009aZ/tbgou4EVRv/DzWL1VNSHfQsljchCi2mVcU=)
3: M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa (hash: GSKHfVVOdL2e+McXNKGIgDnG7vQB68vSPuon+3b3vBw=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: 7aS61tHIFAKvgDFxEnAhIebiEmeNvqIv0LwOTcxvl8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:90:fd:c8:c0:2d:93:72:49:4d:7b:cc:26:fd:e4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Sep 23 14:00:03 2026 GMT
Not After : Sep 24 14:00:03 2026 GMT
Subject: CN=be95cc2531b388e345ffbd2c16c91f4c8452e9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:67:a0:5c:41:e9:89:36:27:cb:7e:9c:a1:
13:45:4f:57:cc:d9:6d:92:50:29:24:e0:33:7d:4c:
6a:15:a3:50:63:6d:8c:50:ec:ad:1b:2f:2a:1d:2d:
06:dc:da:ba:5d:d3:25:ff:3c:35:b3:e4:f6:7e:13:
c9:a6:31:c7:d9:6b:ab:c8:67:1f:9c:eb:aa:1e:3d:
e4:82:3b:d8:fe:b3:5f:fc:5d:01:b8:2a:93:29:92:
4e:a0:14:c5:35:66:b6:d3:02:0b:46:a0:a8:0d:8a:
16:4e:9a:ec:c6:2d:4a:69:3c:05:a8:b2:95:51:c4:
c7:06:04:4d:a5:02:e1:9e:49:a2:0f:7e:83:02:a5:
e4:6f:95:4f:8a:01:4a:d9:9d:18:9f:41:e6:d7:8d:
7f:2a:c8:35:5c:7c:e3:1a:98:c5:04:08:df:c5:0e:
d8:07:83:30:77:ce:8c:b7:3a:85:ca:e1:36:49:e7:
c7:71:e9:b9:2a:30:f4:cc:2d:53:88:7f:51:2b:82:
b1:0f:0b:ed:d6:84:c1:b4:35:92:22:0b:7c:66:4b:
38:37:34:dd:be:d7:26:43:6e:cc:f2:a2:ec:aa:9c:
9f:63:4e:79:cc:2f:04:3d:d0:ac:9a:01:84:f0:d9:
19:50:29:07:d4:c3:fb:bf:cd:6e:58:25:97:2f:89:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:95:CC:25:31:B3:88:E3:45:FF:BD:2C:16:C9:1F:4C:84:52:E9:B1
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:90:64:20:6f:60:e1:a3:26:db:74:07:32:62:c4:a0:1e:e9:
c8:85:a4:c6:49:eb:ca:9c:83:72:16:cd:31:ea:44:00:b7:99:
64:02:4e:6d:66:3b:11:86:00:d4:7b:cb:84:3b:2d:da:3f:4c:
8a:02:2f:b9:1a:5a:1c:b4:cf:36:06:40:96:d1:81:e1:48:bf:
a9:2b:ae:71:da:3a:06:85:81:ee:1f:7d:46:c3:d4:45:ba:af:
f8:d8:1e:d9:37:8d:c3:62:f1:bb:63:5f:f7:02:44:bf:de:28:
ec:a9:4f:ac:d2:1b:5b:ab:e3:22:52:06:12:1e:97:a0:83:be:
c1:5c:6a:77:9a:dc:e3:0e:cf:1f:0d:65:90:a9:af:ee:7a:49:
c4:e2:0b:b7:20:ea:b1:ea:aa:0e:a7:f2:9f:c0:7e:c8:d2:7b:
03:d2:cf:18:8f:e6:96:9b:e1:b5:bf:21:46:39:34:b6:b0:3f:
49:60:29:42:cb:9c:7c:5c:d7:0f:0a:25:10:e9:f9:8f:3b:b2:
7a:77:cf:2a:5d:bd:41:91:9a:b5:f7:38:97:d6:02:bc:8d:83:
5f:91:5c:37:10:b2:32:f6:4e:e8:d9:07:79:c4:0f:68:b3:cf:
86:87:d7:5d:ae:a7:5a:e0:94:ce:2b:ab:7b:88:d0:f9:f1:6a:
d4:d9:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:14:12 2026 by rpki-client