Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: kOscJTEES6Swe+5ZmEJErr5aX9uVoukTlIChO/GvUvg=
Subject key identifier: 14:7A:4D:CE:B6:74:DE:14:2C:28:34:AA:3A:C5:AB:EC:63:C9:66:62
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 019D27E01A20F6511ED84ACF51BF30ADEE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 09D2
Signing time: Thu 26 Mar 2026 02:01:31 +0000
Manifest this update: Thu 26 Mar 2026 02:01:31 +0000
Manifest next update: Fri 27 Mar 2026 02:01:31 +0000
Files and hashes: 1: 0r_UE69prseODZzygBvCxia-3X0.roa (hash: gkr4fLf/h/n+t25YUpdj0dN1J2aUCJ0sU9K4sKPOSZA=)
2: 1-0EnCQalliPsgsGf-YDpvuy83p8.roa (hash: vws009aZ/tbgou4EVRv/DzWL1VNSHfQsljchCi2mVcU=)
3: M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa (hash: GSKHfVVOdL2e+McXNKGIgDnG7vQB68vSPuon+3b3vBw=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: 9xef1gY62w47inptDff0C6gCgRMuh1o6NAewyDIm8mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1a:20:f6:51:1e:d8:4a:cf:51:bf:30:ad:ee:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Mar 26 02:01:31 2026 GMT
Not After : Mar 27 02:01:31 2026 GMT
Subject: CN=147a4dceb674de142c2834aa3ac5abec63c96662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d6:3d:c0:ab:99:c9:44:b8:78:e3:5b:af:b0:
27:d8:f5:28:80:44:25:6b:a0:1e:fc:b1:ec:09:f0:
eb:47:3b:b2:43:d9:43:88:cf:21:66:41:6b:e0:96:
de:7a:2b:ea:f4:04:08:06:f6:a1:cd:2c:6b:95:2a:
6a:5b:e3:6d:1f:4f:e8:4a:a9:01:1c:62:4a:d5:1c:
20:32:d4:de:fb:5c:de:10:ce:d2:9c:84:c0:62:2c:
4b:fe:f6:9d:5a:69:0f:db:ea:6d:4d:da:02:f6:bb:
ab:69:7b:09:98:48:b3:d1:1f:5d:76:32:dc:55:1d:
49:c7:cb:5c:fe:cc:49:6a:82:ba:e7:6a:29:a1:d0:
15:a4:fc:80:8d:d3:e0:f0:e2:f9:eb:a9:b8:61:50:
9d:a6:f2:a3:b3:ae:3d:a0:89:52:22:68:41:fe:d5:
64:4b:d7:02:35:32:ba:ff:24:90:da:8c:8c:c2:c6:
a4:a1:42:8f:3b:d1:63:93:35:40:23:9e:95:05:e6:
c3:57:b7:23:e7:77:03:6a:a3:4b:10:bc:c4:5d:60:
59:c5:e2:a0:31:ba:f4:ff:90:9a:9d:f1:3e:e9:15:
22:cd:6e:2b:d1:3b:cd:e9:58:61:76:2d:b7:7c:87:
f4:ae:3d:02:cb:3b:ac:7c:cc:0c:f2:f6:a5:37:35:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7A:4D:CE:B6:74:DE:14:2C:28:34:AA:3A:C5:AB:EC:63:C9:66:62
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:25:f3:9e:39:c2:8f:51:e8:88:15:a3:1e:04:fa:bc:d2:
0f:9e:81:22:e9:bb:76:8e:0a:3a:60:a8:16:bb:85:1e:f3:75:
c4:5d:98:ee:83:87:54:71:91:34:a4:0b:03:68:34:c7:04:59:
51:e1:02:a4:52:46:d9:c5:7d:50:17:85:29:51:7a:7a:b9:1e:
07:de:25:3a:98:1d:35:a2:64:f2:fc:e9:62:9b:0c:66:36:cf:
78:e1:02:37:ec:e5:af:16:bd:37:e2:dc:00:64:6d:10:67:f4:
af:b2:71:ad:c7:33:95:84:30:69:ec:9f:73:54:b8:c7:f5:31:
c5:a2:e4:67:56:3a:01:ea:2d:5b:1a:9a:56:f8:d9:33:90:c6:
19:f6:b0:cd:cd:1a:13:2b:55:e7:22:91:e3:a8:b3:3c:55:7d:
d8:18:5b:18:f2:51:4a:f9:07:3c:a9:53:c6:d0:77:4d:e4:a1:
72:8a:6f:e4:89:5a:e1:84:99:f9:b8:42:f2:0e:a3:b7:75:41:
9b:3a:29:ca:3a:c6:6a:bb:e5:41:e5:48:2b:00:37:cd:8d:1e:
ae:9b:6b:ca:22:af:67:8f:d4:60:03:38:21:c0:4b:17:99:67:
38:fa:2f:94:16:be:80:39:9c:7c:89:bf:55:32:99:a6:e3:a2:
3c:de:81:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4Bog9lEe2ErPUb8wre5tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjODlhZjYwOTg2ZTZkOTU4MzIyZmIwMjZjNmI2NWFlZWM5
NDlhMGQwHhcNMjYwMzI2MDIwMTMxWhcNMjYwMzI3MDIwMTMxWjAzMTEwLwYDVQQD
EygxNDdhNGRjZWI2NzRkZTE0MmMyODM0YWEzYWM1YWJlYzYzYzk2NjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69Y9wKuZyUS4eONbr7An2PUogEQl
a6Ae/LHsCfDrRzuyQ9lDiM8hZkFr4Jbeeivq9AQIBvahzSxrlSpqW+NtH0/oSqkB
HGJK1RwgMtTe+1zeEM7SnITAYixL/vadWmkP2+ptTdoC9ruraXsJmEiz0R9ddjLc
VR1Jx8tc/sxJaoK652opodAVpPyAjdPg8OL566m4YVCdpvKjs649oIlSImhB/tVk
S9cCNTK6/ySQ2oyMwsakoUKPO9FjkzVAI56VBebDV7cj53cDaqNLELzEXWBZxeKg
Mbr0/5CanfE+6RUizW4r0TvN6Vhhdi23fIf0rj0CyzusfMwM8valNzUh2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR6Tc62dN4ULCg0qjrFq+xjyWZiMB8GA1UdIwQY
MBaAFKyJr2CYbm2VgyL7AmxrZa7slJoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTIt
OWM4YmJhNjY0ZmYwLzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTItOWM4YmJhNjY0ZmYw
LzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLIl8545
wo9R6IgVox4E+rzSD56BIum7do4KOmCoFruFHvN1xF2Y7oOHVHGRNKQLA2g0xwRZ
UeECpFJG2cV9UBeFKVF6erkeB94lOpgdNaJk8vzpYpsMZjbPeOECN+zlrxa9N+Lc
AGRtEGf0r7JxrcczlYQwaeyfc1S4x/UxxaLkZ1Y6AeotWxqaVvjZM5DGGfawzc0a
EytV5yKR46izPFV92BhbGPJRSvkHPKlTxtB3TeShcopv5Ila4YSZ+bhC8g6jt3VB
mzopyjrGarvlQeVIKwA3zY0erptryiKvZ4/UYAM4IcBLF5lnOPovlBa+gDmcfIm/
VTKZpuOiPN6BUg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:36 2026 by rpki-client